Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer
File: z59vv-AKCFkre7Dt_cIAK_xytXg.cer (raw, json)
Hash identifier: ZPV1LJMTFbEADOLg+XLrF78YBXQqwyvk0Rjp8uRKIuI=
Subject key identifier: CF:9F:6F:BF:E0:0A:08:59:2B:7B:B0:ED:FD:C2:00:2B:FC:72:B5:78
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194D266502CB0EF9365DD7B18C87B8DE27F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 04 Feb 2025 19:18:28 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.104.129.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d2:66:50:2c:b0:ef:93:65:dd:7b:18:c8:7b:8d:e2:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 4 19:18:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf9f6fbfe00a08592b7bb0edfdc2002bfc72b578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:89:c4:76:6c:3a:e9:4e:1a:5d:38:69:43:ab:
14:02:df:99:44:c9:fe:1a:c0:dc:77:67:02:cd:7f:
55:7c:fd:43:d3:c6:73:e9:d0:d9:90:f3:b4:6c:5c:
5a:be:54:cf:78:8e:f4:bf:4b:5e:00:69:ac:16:a5:
1d:d8:a1:d8:33:86:5a:38:d3:4d:52:00:59:a8:1a:
37:f0:3c:98:63:33:70:a4:a3:91:d1:11:b6:42:f4:
9b:aa:17:b2:1f:2b:44:e3:38:ae:78:2f:41:87:90:
ed:98:1e:cd:a6:c6:a2:31:84:93:5b:a4:61:a2:80:
56:8c:14:55:4e:cb:a5:c0:f0:bb:48:25:64:2a:b5:
c4:2e:5b:99:89:06:26:7d:9a:ec:7e:00:14:d7:40:
e1:15:d0:03:c7:93:d8:b1:27:b9:e5:91:6a:82:5c:
e8:40:50:99:d1:00:18:2e:0b:30:00:c8:fb:58:8b:
2b:1b:47:3d:e7:c1:aa:0d:4e:5e:31:db:84:8f:af:
f0:ed:de:1a:0b:d5:b6:3b:7c:cb:31:96:82:73:08:
7c:62:12:f0:aa:84:29:0f:63:1a:71:be:aa:f9:bc:
3b:56:d4:5d:7d:ee:cd:f9:f6:15:30:95:0b:78:ad:
fe:7b:8b:e9:89:6d:57:c3:4f:4f:80:96:72:2c:ae:
c7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:9F:6F:BF:E0:0A:08:59:2B:7B:B0:ED:FD:C2:00:2B:FC:72:B5:78
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.129.0/24
Signature Algorithm: sha256WithRSAEncryption
61:f2:f6:2c:bb:65:22:b5:7a:ee:5b:8a:93:bc:91:aa:13:5b:
3f:fe:5f:8c:6d:f1:52:14:ac:2a:4d:c6:39:58:70:d7:e0:b3:
47:60:86:84:32:8d:0d:45:b3:7c:66:fa:f0:5f:83:b7:67:7a:
0b:78:71:01:2a:42:35:22:e8:eb:8b:1b:3a:da:d6:14:d7:a9:
3d:20:9e:f8:52:7a:69:e0:c6:47:84:18:ff:71:15:92:e4:54:
bf:07:39:5e:42:03:08:f4:44:12:57:6b:b9:9c:f4:96:5e:ad:
6e:14:e7:d2:9d:43:9d:b8:37:95:c3:09:ed:3f:d8:98:a2:54:
d2:75:b7:2d:1b:4c:ee:6f:19:e7:7e:4d:be:cd:30:38:92:e5:
4e:17:05:62:09:70:54:3b:d5:69:8a:71:4a:9a:8e:d7:9b:cc:
12:ec:a6:ea:12:9f:e0:25:72:eb:11:a1:7a:c8:1f:5f:86:28:
37:3d:f1:83:55:e2:ad:d3:a4:36:70:5f:67:9e:9b:eb:c3:03:
b7:49:3c:21:76:e0:9b:ee:b5:11:0e:ad:7e:3b:21:98:14:a2:
0d:3a:54:11:dc:dc:6a:6d:50:0a:0c:4f:43:d7:04:bc:5f:a3:
af:c1:9f:c1:c2:2d:6e:da:12:09:1f:19:0f:26:1b:53:d7:9f:
e9:69:1b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:20 2025 by rpki-client on console.sobornost.net