Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.cer
File: 5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.cer (raw, json)
Hash identifier: n2PLZulDz1PeHovStiZeEkpVbNNGKTbL/so5/Sz94so=
Subject key identifier: E4:7E:E5:BE:E3:ED:23:F9:43:76:1E:58:F0:EE:A9:7C:7C:5B:F8:7C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B3DC4973AB3082F690D8B766D2FA3B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:49:14 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 176.111.240.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:dc:49:73:ab:30:82:f6:90:d8:b7:66:d2:fa:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:49:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e47ee5bee3ed23f943761e58f0eea97c7c5bf87c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4f:a3:40:b4:3f:40:e5:c2:8c:66:64:23:c4:
32:6f:4f:5b:35:13:5c:f7:a1:79:d0:25:81:56:b7:
86:a0:55:11:36:d4:e4:e6:2b:21:74:50:f3:59:6c:
57:ec:2f:8d:07:b1:a1:ad:34:27:d2:b6:6c:93:73:
99:39:08:fe:a6:03:3a:07:95:82:f5:5f:fb:d2:ee:
19:bf:2f:91:90:d0:f1:ab:b6:e9:d7:73:7e:57:05:
db:37:e2:04:3c:81:53:3d:23:64:7c:c2:7d:dc:bd:
3f:e0:29:c1:34:91:58:11:13:65:02:5e:7e:5e:ea:
4b:43:d3:63:0c:ca:1b:8c:cd:06:fd:33:8b:b1:80:
dc:63:3d:02:5b:0f:1d:6c:e3:35:4b:55:98:76:b1:
89:09:c6:19:3c:bc:6f:16:a2:96:77:20:3e:ce:91:
83:fb:cf:cd:8a:4f:96:8c:54:51:e6:c0:2b:f6:86:
f7:ae:f4:10:d9:85:8c:cb:d0:2b:93:3f:9d:4d:57:
82:4a:a4:81:6a:77:1c:e9:8d:5f:18:8d:1d:65:7c:
5b:c6:5a:1e:57:a2:e6:df:58:cc:fb:b3:a0:78:61:
3c:a9:0a:e2:bf:d7:63:20:57:9d:d1:d3:8e:30:46:
94:61:23:ed:e7:80:80:37:84:cc:df:67:23:4c:c4:
a0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:7E:E5:BE:E3:ED:23:F9:43:76:1E:58:F0:EE:A9:7C:7C:5B:F8:7C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.111.240.0/22
Signature Algorithm: sha256WithRSAEncryption
22:e1:97:62:dc:b5:a9:25:29:59:8c:d5:ba:62:23:47:68:c6:
ae:ba:84:1c:d5:b7:96:37:0a:83:d5:b1:16:04:9a:39:e8:89:
bf:e2:38:75:34:24:ec:27:3f:26:96:b5:15:8c:13:0c:12:de:
db:91:2c:27:b6:9a:61:62:b4:b8:66:05:59:d6:41:f5:2e:e2:
73:af:41:60:7b:b7:1c:e6:4c:73:5f:b5:d8:c8:d6:44:22:57:
2c:1a:f2:ce:bb:fc:59:cc:4a:d5:91:06:c5:ec:df:5f:e6:e9:
e5:68:05:12:41:22:1a:9f:ea:e2:b1:d3:e4:2e:43:23:15:75:
e0:94:15:2f:0e:c2:70:93:77:1a:d3:aa:dc:f6:8b:57:d3:c0:
6c:dc:0d:1d:9f:89:86:57:9a:ec:25:2b:3b:83:e4:6c:5d:d2:
28:1b:22:1c:eb:2e:8c:b9:bf:d2:56:3d:9d:19:95:78:39:65:
38:85:a5:74:d3:6e:68:ea:52:63:d1:ff:78:69:bd:4d:c1:29:
f3:33:e4:5a:a2:8e:c4:4f:81:b9:94:55:bd:51:c4:a9:24:ee:
51:e0:f0:7a:41:f7:6e:b8:f4:d2:fa:03:80:71:89:78:2e:44:
43:21:76:d4:0c:65:5b:d8:f8:43:14:c5:2e:cb:22:b5:0e:83:
ef:14:43:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:28 2025 by rpki-client on console.sobornost.net