Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/idXRKIo8KuF_mcuxiRdwAYm9RyA.cer
File: idXRKIo8KuF_mcuxiRdwAYm9RyA.cer (raw, json)
Hash identifier: 9dIK3uPLpqRJr+q8zGS+TYatNthUsIsyI1bp1dWedYs=
Subject key identifier: 89:D5:D1:28:8A:3C:2A:E1:7F:99:CB:B1:89:17:70:01:89:BD:47:20
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D71E41F3DF6E0B86D002A3BB433EC4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/60/8d1756-225f-4579-b1e6-9d609770a9ea/1/idXRKIo8KuF_mcuxiRdwAYm9RyA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/60/8d1756-225f-4579-b1e6-9d609770a9ea/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:48:08 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 37.99.208.0/21
IP: 185.155.196.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:1e:41:f3:df:6e:0b:86:d0:02:a3:bb:43:3e:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=89d5d1288a3c2ae17f99cbb18917700189bd4720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3f:fa:e3:de:ed:9e:ea:31:6f:e4:3e:b4:fd:
9d:20:b2:ff:79:06:44:1c:2e:f3:1f:9c:ef:f5:00:
83:6d:2e:9a:47:33:f7:bc:6f:62:02:d4:c3:51:48:
4e:e9:80:17:49:b5:28:e4:8e:4c:ba:0f:52:cb:76:
21:90:dd:2a:65:d5:30:e1:59:b1:b0:eb:5e:90:d9:
03:b1:1d:4f:35:92:df:30:b5:63:20:82:80:23:d9:
2c:f6:e8:b6:f7:ab:ed:1c:1f:6f:08:86:93:11:72:
53:64:18:e9:09:9f:12:3f:ad:63:b9:5d:8a:91:92:
83:88:f6:83:d5:c0:74:9f:39:0b:27:b4:d9:3f:c4:
fb:00:a9:38:25:23:43:36:e5:66:73:ea:e1:61:63:
98:31:a3:3b:df:16:01:f6:f7:5d:bf:67:58:3d:c5:
e6:ad:d0:eb:b7:65:81:01:3c:b8:82:6b:f7:c0:49:
ad:10:83:58:1a:09:d7:68:bc:72:e1:bc:fc:8a:a5:
79:88:63:c5:1b:94:4a:04:17:36:50:f2:77:7b:96:
d4:8d:79:a8:10:d7:3c:b4:49:a7:e3:1a:50:a8:01:
2b:98:f1:80:49:0c:72:3b:0a:6f:fe:79:d3:72:fc:
4b:b2:5c:3c:eb:f5:54:6d:91:75:ba:34:c4:eb:fa:
89:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:D5:D1:28:8A:3C:2A:E1:7F:99:CB:B1:89:17:70:01:89:BD:47:20
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8d1756-225f-4579-b1e6-9d609770a9ea/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8d1756-225f-4579-b1e6-9d609770a9ea/1/idXRKIo8KuF_mcuxiRdwAYm9RyA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.99.208.0/21
185.155.196.0/22
Signature Algorithm: sha256WithRSAEncryption
11:2d:c0:cb:9f:dd:39:e9:cb:53:d3:77:c1:b2:dd:5e:de:4b:
c5:b4:20:13:8d:bc:63:09:e6:70:94:81:0d:54:69:8e:3c:a7:
5b:a1:12:47:80:11:6a:0d:67:18:2f:c9:29:70:d6:fe:74:be:
00:9c:e8:0f:c2:21:fd:d8:91:b4:14:a0:3a:53:dd:9b:36:e7:
70:4a:3e:a9:8a:78:f7:f3:26:04:ff:3f:ae:d3:f8:c5:08:45:
3f:83:e0:2d:8b:6e:fd:a7:a3:11:a8:bf:f0:22:06:a3:2e:a6:
31:98:e3:92:2b:a4:09:72:47:f2:d4:93:c2:3b:1d:b2:fc:8b:
2e:e1:64:9e:aa:27:fa:99:6f:bf:31:96:a6:ee:2f:d9:f0:08:
23:ed:07:63:8b:41:e9:78:92:0e:23:c0:23:70:6b:6d:c0:72:
13:ca:d1:fc:fa:b7:65:08:f7:69:03:49:1c:89:67:a1:36:83:
a7:bc:7b:ec:d6:17:cf:a7:ea:08:75:01:df:32:b7:29:18:eb:
a6:4d:54:df:09:8e:df:6f:b2:ad:09:cd:b7:fe:ec:4f:f9:8b:
27:7a:7f:59:09:0a:5b:05:6a:bb:a5:45:8d:96:0b:81:d6:4f:
7a:0e:db:e3:bf:0c:d1:19:a9:cc:c4:71:09:89:b7:8b:a7:af:
73:d3:1f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:17 2025 by rpki-client on console.sobornost.net