Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EImgJR4yvzxID1qUq7X7TrkGpbM.cer
File: EImgJR4yvzxID1qUq7X7TrkGpbM.cer (raw, json)
Hash identifier: O3Thu/+qR0gwRgRQzkDay3FFxGJyN7qb0/CUR69gsds=
Subject key identifier: 10:89:A0:25:1E:32:BF:3C:48:0F:5A:94:AB:B5:FB:4E:B9:06:A5:B3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B250DA13B1F492602078AE745FD923
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:41 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.49.23.0/24
IP: 194.55.162.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:50:da:13:b1:f4:92:60:20:78:ae:74:5f:d9:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1089a0251e32bf3c480f5a94abb5fb4eb906a5b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:33:d6:0a:9d:00:21:0d:1a:23:a1:90:6b:3c:
11:58:69:07:ba:5f:e1:80:c7:8a:a3:13:8c:4c:9a:
07:7e:6b:7a:e2:7b:b7:39:51:7c:8c:3c:22:1e:f4:
0e:ff:fc:8b:98:eb:4c:8d:b1:5c:b4:8f:81:fa:4d:
a1:a2:6e:fe:cc:42:b1:12:c1:80:57:82:e4:f2:56:
a9:ee:bc:d3:eb:1f:a4:14:30:ec:04:c2:63:32:cc:
55:66:3a:7c:9d:6f:aa:c1:ef:a3:03:41:b3:e1:0a:
8c:b9:2a:93:65:17:ef:46:7f:1f:0a:28:d8:b0:44:
c9:68:5d:3b:e6:08:7c:f6:6d:0a:89:66:f1:fa:0d:
4f:5c:ff:7c:f6:27:fa:87:d2:b1:39:81:ea:e4:5f:
ff:0b:07:5b:ff:c1:c8:8a:6d:a9:5a:ca:ae:01:33:
66:f3:9c:92:19:cb:20:0f:ed:a9:18:9b:7e:f3:09:
f4:83:64:81:28:87:c4:1a:6e:9a:6c:71:c2:20:f6:
34:27:b5:0b:19:41:e8:b2:fb:58:2a:fe:14:e5:c6:
25:f0:d3:11:15:32:33:e9:09:91:a5:52:9b:a9:59:
47:b6:56:cb:87:5f:f7:bc:3a:5b:04:d2:0e:75:25:
22:ed:a7:cd:23:20:7b:d6:e1:d9:cb:3e:9f:5f:7d:
97:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:89:A0:25:1E:32:BF:3C:48:0F:5A:94:AB:B5:FB:4E:B9:06:A5:B3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7db7a8-827f-4cf0-abc9-b8c46f95640e/1/EImgJR4yvzxID1qUq7X7TrkGpbM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.49.23.0/24
194.55.162.0/24
Signature Algorithm: sha256WithRSAEncryption
51:f0:d3:ab:76:90:8a:ee:23:da:e6:62:6d:1a:56:4e:2d:01:
a5:a5:68:e7:a0:b4:87:6b:50:3b:4f:32:af:43:89:62:64:42:
83:57:25:5b:f9:7f:27:69:99:59:8e:a2:a5:7e:83:8c:4c:d2:
1e:56:d6:af:9d:e2:9c:c4:09:55:a8:03:c4:e4:ba:74:ca:9a:
e7:01:19:81:69:15:66:c9:70:b1:bd:3b:31:0f:69:cd:e4:5d:
3f:36:b1:87:0f:e0:0d:d8:79:ce:e2:8c:e3:48:67:16:a9:ab:
57:16:42:a0:35:20:fd:bf:1b:5a:c9:2f:61:42:e0:64:8b:88:
d7:41:34:cd:86:fa:6f:78:b4:25:97:f6:f0:5b:86:65:d2:ec:
0f:d4:7f:91:74:d7:3a:3b:79:f6:4f:94:c9:1c:cc:79:f6:2c:
d7:fb:32:d5:07:bf:6a:da:73:c1:ed:8d:d8:4e:4f:29:21:78:
d2:60:f9:89:74:fe:3b:71:80:1d:6c:63:ec:ab:64:16:31:de:
92:eb:8b:c1:9b:d6:33:75:4e:ba:39:82:97:74:0e:b9:d6:1a:
72:9b:0d:1f:5f:33:3e:b0:03:f5:a2:f6:fe:52:2f:55:91:37:
ec:95:43:34:30:bd:b7:7e:1f:6a:6c:2e:74:a9:f9:9e:58:70:
86:19:25:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:06 2025 by rpki-client on console.sobornost.net