Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/OL1tjruCQE1XCTUbwjKaDuQ6mkM.cer
File: OL1tjruCQE1XCTUbwjKaDuQ6mkM.cer (raw, json)
Hash identifier: hy8Mikwkli1fsSj3+ad7oTKF6j9vi/7zx/vC6uOqj1w=
Subject key identifier: 38:BD:6D:8E:BB:82:40:4D:57:09:35:1B:C2:32:9A:0E:E4:3A:9A:43
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B3BA7C9B8E8E3C32272811A7837533
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/10/bb3b49-62d0-497c-bd1e-8c9539f444c6/1/OL1tjruCQE1XCTUbwjKaDuQ6mkM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/10/bb3b49-62d0-497c-bd1e-8c9539f444c6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:49:06 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 45.88.192.0/22
IP: 2a07:aec0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:ba:7c:9b:8e:8e:3c:32:27:28:11:a7:83:75:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=38bd6d8ebb82404d5709351bc2329a0ee43a9a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:34:ce:e6:17:45:ce:06:c9:cf:23:49:b3:01:
56:2b:cd:5d:b8:4d:3b:69:ae:39:86:c6:55:d6:3b:
95:ac:58:22:d3:d2:ea:63:57:ce:6b:1c:bb:6b:f9:
2a:f3:d0:60:62:87:e7:6d:64:ad:48:4a:0b:86:4c:
c5:aa:0a:e1:0a:e6:75:15:b7:64:fb:c7:14:c7:c4:
1e:ee:4c:1a:b8:72:34:43:c0:fc:c9:bc:90:bb:4f:
3e:77:00:e7:a6:58:e9:74:97:42:a9:2f:a6:d3:9d:
2d:a9:15:6f:81:8a:0c:1d:62:cd:01:db:b3:82:cd:
5d:1c:53:87:16:c3:4e:a4:c2:d3:8a:b8:37:74:8a:
34:05:c2:94:75:eb:4e:08:c2:5f:7b:ef:0a:eb:10:
d4:f3:87:68:bd:58:78:0d:62:82:fa:9f:03:57:0e:
91:d9:54:af:90:bf:b6:1a:06:b9:2e:61:4b:54:51:
ab:93:00:e8:25:06:5b:9b:d8:2f:69:3a:1a:5d:11:
85:b5:86:3e:75:0d:41:28:b3:fe:82:65:c9:25:b5:
a8:0c:cf:10:01:36:c5:9d:9f:b2:ef:1f:66:91:e3:
55:84:f5:ad:22:17:48:66:3a:70:21:1c:55:41:4a:
07:19:7f:93:9b:92:28:60:d9:50:b9:21:83:a6:7d:
c7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:BD:6D:8E:BB:82:40:4D:57:09:35:1B:C2:32:9A:0E:E4:3A:9A:43
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bb3b49-62d0-497c-bd1e-8c9539f444c6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bb3b49-62d0-497c-bd1e-8c9539f444c6/1/OL1tjruCQE1XCTUbwjKaDuQ6mkM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.192.0/22
IPv6:
2a07:aec0::/29
Signature Algorithm: sha256WithRSAEncryption
04:67:16:81:41:26:c4:b8:2b:a8:e5:32:df:f9:07:f8:62:0e:
c8:81:63:6c:2b:df:51:10:06:96:db:f1:21:e4:24:39:67:2f:
ef:3e:b7:ed:a0:85:76:53:88:22:46:0f:fa:92:8b:19:ad:c5:
6f:21:06:0f:d4:98:16:91:7e:90:f5:16:dc:73:77:04:c1:66:
f8:24:b4:55:27:b0:73:6c:4f:b5:1c:2e:ff:34:ca:7a:a2:4f:
84:10:ad:7f:f8:c2:e1:8b:ec:f1:be:0d:9e:1c:6e:27:63:68:
45:5a:4a:c6:85:24:ab:98:18:19:d2:fc:1a:94:d2:4c:5d:c7:
4a:a4:26:b9:fb:3d:7b:35:b2:2c:c2:96:f4:c4:5d:c0:29:5f:
1e:5b:e0:ea:19:ec:85:a5:ef:ad:71:de:6d:7e:40:a9:16:3e:
57:a9:99:82:b9:6b:fe:ac:17:0f:ee:d6:4b:f6:1b:cf:98:20:
ec:33:f3:90:b5:3d:10:33:db:02:3f:bd:3b:68:e0:f7:04:61:
ad:a2:3c:20:f9:e2:9f:46:f7:da:b9:cd:ef:27:c2:1c:bf:4c:
ab:99:0d:6a:d9:5f:87:43:94:c4:01:57:dd:4a:bc:8b:33:68:
36:8c:99:fa:fe:e2:f4:cb:3f:c7:d0:e9:17:ed:ce:6c:b2:db:
78:65:32:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:39:39 2025 by rpki-client