Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DbPDFk09jCZEzymzI2dhpXHuWLo.cer
File: DbPDFk09jCZEzymzI2dhpXHuWLo.cer (raw, json)
Hash identifier: hAc/M+kLqGbciBALWzBFmmfVPy6gMjYH5+RL4Pn9Meg=
Subject key identifier: 0D:B3:C3:16:4D:3D:8C:26:44:CF:29:B3:23:67:61:A5:71:EE:58:BA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B560AE7B750DA2CEB62120C6F8BC00
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/DbPDFk09jCZEzymzI2dhpXHuWLo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:49:45 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.35.252.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:60:ae:7b:75:0d:a2:ce:b6:21:20:c6:f8:bc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0db3c3164d3d8c2644cf29b3236761a571ee58ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:38:16:42:75:18:06:aa:5d:f5:09:ca:b4:26:
5e:91:05:42:8e:ab:9d:cc:3f:ab:77:6b:2b:c8:23:
c8:c1:d7:0e:e8:c3:17:42:c1:f1:c1:7c:e2:ff:99:
2a:e5:a4:9f:73:b1:18:ff:2f:78:4a:05:22:2d:2e:
5c:e2:d1:3b:88:0c:3d:33:c6:65:7a:ad:2d:b6:d1:
26:31:3b:5a:0a:4a:bf:a3:b7:b4:88:fb:9f:e5:28:
15:a5:ed:f9:c3:9b:e6:16:6e:f0:f0:00:df:d3:17:
05:2f:c1:ef:7c:27:b5:44:ee:6c:36:e7:ab:41:bd:
5f:6a:30:9d:19:7e:d3:64:61:eb:15:65:32:60:ef:
f8:06:ce:65:01:b0:ad:11:e1:51:c6:4d:96:f8:f1:
40:ba:da:fa:e1:da:ce:8a:56:60:7a:a7:91:ce:89:
d7:1f:ca:23:84:3c:8c:98:d4:95:75:67:71:75:fe:
ec:62:a4:e3:de:7a:f5:9f:70:4f:39:4c:d5:19:03:
e4:8a:50:d6:a9:a5:5f:4d:8e:f9:77:57:5e:a8:12:
af:84:76:81:d7:57:48:de:87:84:fd:44:7a:c8:4f:
bc:46:ac:71:3e:09:ee:c8:32:7c:01:be:20:e5:db:
e1:58:7c:bb:c1:40:43:60:a8:36:dd:be:4d:4c:4f:
7b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B3:C3:16:4D:3D:8C:26:44:CF:29:B3:23:67:61:A5:71:EE:58:BA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6cd366-3557-42b2-885b-3d46439aa41c/1/DbPDFk09jCZEzymzI2dhpXHuWLo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.35.252.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:58:5b:30:6e:e8:1f:b9:23:5f:76:9e:12:de:8a:ae:0a:ae:
7b:f6:df:e0:cd:d6:ac:2f:50:9b:82:24:8b:07:7d:40:d5:59:
6e:4c:fd:bc:fc:60:df:90:04:53:9d:0d:8f:ea:81:4c:62:36:
04:99:80:f9:6b:78:53:ed:ed:6a:e5:bb:a4:96:ff:71:15:35:
19:fa:5d:0f:a0:a7:42:87:c7:34:e0:04:93:63:bb:97:09:76:
eb:65:e7:e1:fb:8c:8c:a2:ab:9b:56:9d:36:4f:94:9b:b8:c6:
43:8c:3f:5f:e4:30:0f:98:92:48:e1:c1:54:97:3a:3e:4d:2b:
2d:23:04:48:dc:85:7d:c8:11:f7:ee:1a:28:b6:a5:66:82:30:
0e:ff:9a:79:d5:77:25:8e:b0:46:11:98:8d:bd:1f:87:b3:03:
7d:8f:75:2b:4e:66:8e:92:c5:76:e2:f9:68:4d:85:03:38:6e:
bf:de:f4:6b:16:13:0d:d2:0b:ad:8e:13:85:e0:5e:25:4d:8d:
c5:fd:f5:40:88:75:48:d1:a1:ed:ff:d3:52:c1:fc:7c:30:3c:
6f:43:3f:92:7e:cd:67:b6:ff:d1:6f:69:c0:a8:36:07:cc:f1:
22:3c:a5:6c:fa:67:47:7b:9a:e2:c9:9f:86:46:e4:38:0a:1e:
60:86:fe:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:05 2025 by rpki-client on console.sobornost.net