Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vMfmdGZUQPbmuA5v8VWq1qics_I.cer
File: vMfmdGZUQPbmuA5v8VWq1qics_I.cer (raw, json)
Hash identifier: NSmTFwweZfHSxxuQn0LC/Ybtgf8jSJC7WSNsGA+kE7g=
Subject key identifier: BC:C7:E6:74:66:54:40:F6:E6:B8:0E:6F:F1:55:AA:D6:A8:9C:B3:F2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FAF9FE90D6219A3C042DABA55B99FE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:47:40 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.13.85.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fa:f9:fe:90:d6:21:9a:3c:04:2d:ab:a5:5b:99:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bcc7e674665440f6e6b80e6ff155aad6a89cb3f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:66:83:40:18:00:e7:dd:6d:e2:fb:41:0d:41:
ff:65:9c:c7:39:63:a4:61:22:a1:82:1b:31:88:29:
65:bf:d0:ab:0a:17:f4:94:af:93:f5:e3:79:f1:32:
26:49:0c:f6:7e:bc:47:c0:da:eb:c1:c5:cd:81:99:
c3:4c:81:fe:16:08:77:f6:ef:43:ab:8d:64:3c:69:
cb:02:26:be:6b:19:7f:ac:be:69:e7:1e:b3:58:3d:
4b:d1:32:a0:0b:62:48:b5:cc:25:5a:35:95:a9:a7:
4f:25:c0:cd:06:67:8b:a8:50:9c:ae:16:40:7d:9b:
b3:f2:07:c3:c2:b5:65:c4:05:84:b2:0b:a8:83:94:
c7:55:a8:8a:99:1c:ef:fa:a6:87:3b:72:01:ab:73:
47:21:5f:53:42:cd:44:07:2a:67:ac:7e:fa:2e:1f:
c0:41:80:09:99:0b:84:24:24:38:b8:ee:8a:c6:ff:
01:34:18:51:f6:de:53:d9:79:30:09:bf:c6:9c:d1:
82:fb:e5:9c:ba:1d:69:db:a4:56:8d:e2:4a:1f:e2:
c0:83:84:d1:cf:f2:3e:85:ac:2e:87:bf:da:1d:fa:
89:e7:f5:56:ce:79:87:cc:92:b6:1b:85:44:31:3f:
dc:f3:f7:ea:2f:b1:f8:1f:f9:e4:b1:6f:ac:86:ed:
af:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C7:E6:74:66:54:40:F6:E6:B8:0E:6F:F1:55:AA:D6:A8:9C:B3:F2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.13.85.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:eb:4e:47:3f:17:2e:06:a7:b7:d7:b9:28:66:fe:40:40:b7:
b3:61:8d:a0:a8:38:dd:cb:c8:e7:35:8a:c7:f3:64:69:6d:14:
76:13:4f:91:3b:a7:51:6a:ec:48:88:26:c0:8b:b0:e5:c8:e5:
48:d5:08:56:1a:6d:08:ce:06:30:5a:ae:3d:d8:d7:d7:46:63:
bb:ca:4c:20:39:3b:f0:b7:a5:e0:6a:3c:a3:40:66:f3:9f:17:
3a:48:58:8c:08:49:42:20:93:58:ec:43:d8:b6:4f:94:7d:b1:
3f:a6:2b:f4:0e:af:be:e5:0e:e2:a8:b8:1c:7d:5f:39:c5:95:
ce:4f:b5:c8:06:0d:0a:cb:07:d8:c3:1c:80:c4:18:72:ad:ff:
27:7f:2d:5f:97:d2:56:98:c4:08:df:8a:33:55:80:02:31:71:
c5:1c:3e:e4:1c:84:52:d6:7f:a8:04:41:27:57:79:c6:6a:4c:
70:00:c3:28:d2:80:c2:be:9a:fd:61:fc:a3:b2:14:4b:f1:1a:
f8:9f:23:68:96:c3:b8:79:5c:60:87:38:86:63:b0:52:8c:cd:
15:67:40:a3:4e:a0:39:c6:f7:cd:46:84:78:b8:ec:04:4e:81:
77:97:b9:95:6a:e3:22:06:82:c8:8e:0a:41:ab:0f:61:91:e8:
08:50:1c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:10 2025 by rpki-client on console.sobornost.net