Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.cer
File: i8vbUeuAIm9BR3p7xQ4PlhRV7YM.cer (raw, json)
Hash identifier: jNuYLCIFtyHye0PFxInh7wIB3g84kez5+/k/Pg0Y26w=
Subject key identifier: 8B:CB:DB:51:EB:80:22:6F:41:47:7A:7B:C5:0E:0F:96:14:55:ED:83
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194214419C58E1E1E8AAF9FBC72B565F37B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:18 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 158.110.0.0/16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:19:c5:8e:1e:1e:8a:af:9f:bc:72:b5:65:f3:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8bcbdb51eb80226f41477a7bc50e0f961455ed83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1c:ae:ad:34:7a:65:ff:a3:5a:68:aa:61:c8:
8d:57:96:d8:fd:48:ab:52:19:31:a9:11:da:7a:dd:
be:7d:79:f0:ae:51:ba:e1:d4:75:dd:79:2a:aa:04:
13:1f:d6:4a:1f:a3:6c:bf:49:af:6a:f9:61:e6:9c:
97:4b:ae:e4:34:d2:e8:09:d5:25:64:ef:2a:c8:62:
6b:74:d4:5a:a0:ca:31:72:4a:fc:a5:0f:28:a2:f4:
84:89:e8:2e:ad:c3:67:76:be:13:eb:39:87:e6:97:
5a:ec:62:61:66:f8:79:23:f1:b5:52:60:07:64:25:
c3:9c:cd:0c:35:05:84:49:c1:2d:61:66:3b:3b:b5:
fb:d4:69:77:8a:b3:d6:02:34:d6:bb:db:4e:f8:39:
dc:be:ec:8f:fa:bb:11:ea:b5:0e:ff:92:e6:88:8d:
04:6f:82:14:40:5d:d2:d4:d0:9a:3f:9a:70:2e:94:
3e:11:57:dd:f4:83:2c:06:14:9f:3c:c1:10:85:aa:
63:ca:61:63:f6:db:00:0d:98:53:3c:01:c8:c2:41:
39:cb:27:44:e3:90:4a:4b:25:86:24:83:6d:53:a3:
70:2b:92:54:f8:0a:cd:da:99:fd:9a:a4:0e:af:e8:
f9:6c:45:0d:e4:31:b8:66:99:91:42:d4:fe:2a:02:
5c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:CB:DB:51:EB:80:22:6F:41:47:7A:7B:C5:0E:0F:96:14:55:ED:83
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/564f3a-52d6-4d09-81e2-efa9391f7d9e/1/i8vbUeuAIm9BR3p7xQ4PlhRV7YM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.110.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7b:10:fe:d1:33:5e:e2:b5:a9:e8:ae:a2:2e:28:a2:18:b5:bf:
be:88:df:31:e9:ec:11:7f:0f:ef:ba:7d:67:b0:06:63:41:10:
52:30:41:ae:54:4d:5f:4c:30:a3:54:5c:c8:8c:0f:93:01:e2:
96:4a:63:c0:ff:28:5b:61:93:68:cc:f5:30:f4:92:33:f5:14:
89:58:c0:37:2c:cb:ac:97:4c:1e:ee:c2:3c:f9:be:bd:b3:07:
f0:a9:90:d7:9f:27:8f:88:47:ae:90:a8:6f:a4:89:41:aa:8d:
6e:1b:29:45:f3:10:e3:ee:7d:84:69:a7:b1:ae:7f:4e:49:b5:
c6:57:de:43:cb:21:44:b5:71:af:2c:31:c3:3c:12:14:8d:f9:
66:58:d6:e1:1e:1f:86:89:fa:a0:6a:bc:30:4e:83:43:df:d2:
34:68:bc:51:35:63:73:2a:13:04:e6:c3:ab:33:ff:bd:7e:45:
30:c4:74:c5:b7:dd:36:50:6f:cd:98:66:3a:bb:70:03:ce:6c:
ab:3e:67:61:b2:53:d6:48:0a:7e:6a:c5:d9:46:0e:5f:f5:56:
39:a9:b5:fc:ac:5f:7d:c8:83:a0:a0:44:d9:ae:13:b1:82:95:
90:c8:47:f1:36:5c:a4:97:94:d2:4e:ae:1d:f8:fd:8f:5b:7b:
94:b3:4c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:16 2025 by rpki-client on console.sobornost.net