Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LxXXiyVtKEWbhptybyMpSrP_Fz8.cer
File: LxXXiyVtKEWbhptybyMpSrP_Fz8.cer (raw, json)
Hash identifier: SC+IzmyIaXqdN96aaqjJtppxD/b2mvHJibIQzNz4h5o=
Subject key identifier: 2F:15:D7:8B:25:6D:28:45:9B:86:9B:72:6F:23:29:4A:B3:FF:17:3F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425218680E2D8DAD7530EA967D050D640
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:49:01 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.13.66.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:86:80:e2:d8:da:d7:53:0e:a9:67:d0:50:d6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2f15d78b256d28459b869b726f23294ab3ff173f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:4d:04:02:c1:a8:08:62:0b:fa:7e:d2:9c:cc:
b0:41:5e:65:af:d3:a0:7e:73:a6:e6:e3:ea:56:24:
71:15:b7:69:95:5a:94:b6:94:d6:b2:00:18:86:79:
93:06:d5:f4:b0:ba:4f:6c:14:73:40:51:86:1c:95:
a7:c1:de:56:14:2d:4c:75:6f:a4:20:8a:63:05:0d:
1c:ee:af:a5:f2:a6:31:44:0e:28:65:84:6a:1c:db:
86:3f:07:c6:da:e0:4e:e6:48:a3:65:61:ee:0d:f7:
6f:fd:0a:a2:e3:82:58:b7:45:28:63:fb:c9:0c:02:
c2:7d:5d:1e:fa:6d:cd:1a:8e:be:aa:32:c3:32:b7:
f6:7c:10:dc:02:21:a6:67:50:b0:5d:11:a6:72:b1:
85:4d:bd:db:1b:9d:db:50:52:7b:9f:83:53:34:10:
c4:5a:e5:5e:f1:56:40:37:b6:c4:3f:2e:d1:39:02:
a9:56:f5:38:40:d3:f4:ba:c0:21:2f:59:44:d7:fa:
a2:94:bd:69:d3:3f:a7:41:ac:a5:44:30:4a:c9:da:
83:74:5b:77:3d:84:ba:de:20:ec:ac:f7:f5:2a:b5:
0f:33:e6:88:d5:68:3f:61:d3:4d:54:28:5d:36:7f:
4d:43:3f:e8:f3:6c:b9:5e:d5:30:b9:5a:35:db:b0:
6f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:15:D7:8B:25:6D:28:45:9B:86:9B:72:6F:23:29:4A:B3:FF:17:3F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/6bdf6c-a181-42fc-b9bf-83bc7cc463de/1/LxXXiyVtKEWbhptybyMpSrP_Fz8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.13.66.0/24
Signature Algorithm: sha256WithRSAEncryption
89:6f:3a:9a:a4:9b:56:e9:dc:47:32:f4:55:1c:59:80:75:69:
6d:e3:2f:dc:52:1b:6f:94:e9:03:0d:03:d6:7d:98:f3:70:2c:
5c:45:f8:c7:e7:05:c5:61:34:40:79:fe:17:23:20:f5:27:74:
13:75:0f:4b:76:c1:2f:f7:62:03:2f:85:c0:41:4e:6b:71:fa:
2a:88:14:3e:fc:93:90:1f:8d:12:fe:da:fc:f5:98:68:03:c3:
7b:77:22:d7:29:37:b9:84:c1:70:14:c4:33:40:c5:09:fb:17:
4b:7d:da:33:04:84:67:eb:02:41:a7:26:7a:5e:19:ae:4c:52:
2b:2d:0c:52:d1:a2:15:4b:50:0c:9e:a5:f0:57:b7:9f:f5:a4:
46:58:85:b8:b4:80:79:80:0d:db:b4:b0:8e:92:8e:f5:6b:20:
18:a9:e8:9e:8e:ac:67:02:77:b7:f0:4f:b5:0a:99:4a:aa:20:
74:95:20:b6:4e:2f:86:f3:c7:49:c8:7b:f0:b2:ca:5d:fd:58:
5c:13:c8:cb:0e:e1:d8:dc:b3:4b:40:c7:87:34:3a:ad:46:ef:
18:9f:04:59:a2:91:bd:e4:48:69:e5:69:b7:0f:93:91:a4:22:
1a:13:23:8c:59:39:ea:66:4e:98:d4:c2:65:da:c0:32:b1:af:
d6:cf:fc:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:23 2025 by rpki-client on console.sobornost.net