Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer
File: dbWrs1_KMHDUgSKjOexcvv8L6Xo.cer (raw, json)
Hash identifier: iNqP5Eghlp7vUCdvn+v+31q6k0BOMl+nlE54/pkS9Oo=
Subject key identifier: 75:B5:AB:B3:5F:CA:30:70:D4:81:22:A3:39:EC:5C:BE:FF:0B:E9:7A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427482BDC4F431715B5C4EB155C9EFCE7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:50:28 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.244.252.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:2b:dc:4f:43:17:15:b5:c4:eb:15:5c:9e:fc:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:50:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=75b5abb35fca3070d48122a339ec5cbeff0be97a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f8:4f:8d:10:20:a6:c4:95:89:26:e4:cf:2a:
a5:00:8d:77:31:46:97:8b:3c:a3:8c:8b:7d:36:d6:
b6:8f:b5:9d:c2:3f:fe:8a:8c:1b:d4:8e:36:ba:ba:
59:5a:58:7a:f2:ad:f0:25:42:9c:48:23:17:03:de:
a5:de:40:f9:4c:63:f7:a6:e4:8d:58:63:a4:38:f3:
e0:08:d2:80:fb:b3:54:21:7f:ce:f8:e6:ce:33:ef:
4a:d5:c4:c0:b4:d1:cb:ba:f3:65:93:be:ad:f4:fc:
b3:46:94:e5:d0:47:91:35:e6:81:ad:d4:d7:b8:08:
2a:c9:76:83:51:c6:bf:57:43:de:5f:df:4a:36:6d:
a1:1c:36:2e:27:57:23:be:b4:a5:7c:84:5a:13:3a:
d9:8f:39:74:7d:62:ea:7d:af:85:e7:ba:1f:ce:52:
b7:84:b6:56:3a:da:08:c7:d4:5a:b7:f4:34:f7:90:
72:ed:a4:a8:23:f9:c7:f2:f4:05:07:14:0c:41:5a:
97:f1:5e:f8:86:9b:cf:6a:95:07:b8:d5:19:61:05:
eb:b7:c8:b3:81:5e:ae:ee:9e:3c:30:d3:ed:11:ba:
9a:de:3a:a5:4c:d2:e2:09:00:55:13:e1:ad:cd:81:
52:33:70:26:40:ed:ad:dc:70:8d:ca:9e:b5:d0:0f:
3f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:B5:AB:B3:5F:CA:30:70:D4:81:22:A3:39:EC:5C:BE:FF:0B:E9:7A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5d842f-6324-4122-b850-2c6a2c69212b/1/dbWrs1_KMHDUgSKjOexcvv8L6Xo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.252.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:d2:af:aa:d0:6f:9e:0e:7c:53:b7:c2:fe:94:5c:b4:dc:c5:
80:19:43:2f:65:9c:8c:80:ed:97:69:d8:8f:a7:a1:07:7b:7f:
e8:22:50:bd:9c:27:93:92:d7:71:c1:16:5a:76:63:2b:cd:fd:
80:91:fd:31:5a:2c:f7:97:38:88:47:fa:60:8e:9a:46:6a:dd:
35:18:ac:28:14:f1:e0:ed:01:e0:68:28:9c:b6:22:25:1c:cb:
61:fb:b9:04:06:6f:2e:06:51:77:bb:51:f2:3d:eb:9a:b9:ae:
f6:c3:f4:80:a5:b0:4b:f8:26:4d:85:95:32:ba:bd:f4:0c:88:
2e:00:59:1a:e6:f5:9f:e8:c5:0c:f6:45:2f:5f:6a:4d:66:f1:
cb:45:de:40:bc:4a:be:b5:9d:31:b9:a0:15:a2:f0:dc:57:eb:
4d:aa:d3:ee:90:88:62:30:b8:ab:d2:c9:14:35:c9:ee:b5:38:
88:db:13:38:09:5d:42:7a:02:74:84:b2:7a:ab:c8:a6:07:b5:
f4:e9:9d:a5:99:7b:db:5a:ea:1d:71:21:0b:87:00:f4:7b:6d:
27:1d:be:7d:f6:05:93:1d:a4:de:bd:59:19:21:16:b0:ff:f2:
20:f8:65:aa:2d:62:f2:5a:1d:86:da:67:f5:e1:c7:22:53:05:
80:29:6d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:26 2025 by rpki-client on console.sobornost.net