Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cFF5Og_UkkHpOPSWz8ErDo5Tbpc.cer
File: cFF5Og_UkkHpOPSWz8ErDo5Tbpc.cer (raw, json)
Hash identifier: sH3cmVBRNqteBvoT4DXOaqa0m5rClH/rZknEG3xqFac=
Subject key identifier: 70:51:79:3A:0F:D4:92:41:E9:38:F4:96:CF:C1:2B:0E:8E:53:6E:97
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018C2F8BF23528CDB5C09D48296F18267113
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.rp.ki/repo/aci/0/7051793A0FD49241E938F496CFC12B0E8E536E97.mft
caRepository: rsync://rsync.rp.ki/repo/aci/0/
Notify URL: https://rrdp.rp.ki/notification.xml
Certificate not before: Sun 03 Dec 2023 11:59:09 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 146.19.3.0/24
IP: 2a12:1700::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:2f:8b:f2:35:28:cd:b5:c0:9d:48:29:6f:18:26:71:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Dec 3 11:59:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7051793a0fd49241e938f496cfc12b0e8e536e97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:99:18:fa:b1:07:7a:6b:b3:d8:e5:7d:a6:e4:
7a:54:f9:4b:1c:1c:f3:a9:2f:ba:b5:d8:d0:5c:49:
a6:94:1c:01:e0:10:f4:95:29:ce:a6:7f:0d:ef:77:
fa:d4:cc:b0:ce:1c:c7:92:61:35:d4:08:d8:5a:08:
b9:46:c7:76:b3:ce:b9:a6:32:82:ff:85:3b:92:0a:
35:d5:12:fd:9a:6c:7c:7f:d0:db:f2:fb:7a:a6:6c:
0b:be:b1:69:18:c9:7c:4b:4d:f6:e1:0a:87:a6:93:
18:33:ee:41:2f:b0:e7:e9:7d:00:9c:84:46:46:fa:
cb:30:1a:b5:20:bc:fe:5f:37:7c:f5:a6:8e:9a:4e:
d7:71:c8:c0:43:47:f4:31:74:f9:a8:ca:2f:95:cf:
3a:88:aa:78:29:b0:b5:ac:95:e5:ce:a0:9b:16:a9:
62:39:d6:cc:47:1c:5c:3b:83:35:e4:db:76:95:03:
1d:c0:5a:f8:4b:0f:17:25:cb:20:6e:01:3a:a8:61:
23:06:e3:6e:b5:31:b8:9b:0c:19:18:56:8f:07:03:
d4:13:e5:0a:9c:4d:80:2a:4b:41:37:b2:37:64:dc:
c5:0b:53:89:53:59:ee:72:73:47:99:80:05:55:b4:
07:90:73:a9:41:20:30:08:1a:3f:15:6d:91:03:12:
91:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:51:79:3A:0F:D4:92:41:E9:38:F4:96:CF:C1:2B:0E:8E:53:6E:97
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.rp.ki/repo/aci/0/
RPKI Manifest - URI:rsync://rsync.rp.ki/repo/aci/0/7051793A0FD49241E938F496CFC12B0E8E536E97.mft
RPKI Notify - URI:https://rrdp.rp.ki/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.3.0/24
IPv6:
2a12:1700::/29
Signature Algorithm: sha256WithRSAEncryption
4f:66:8f:45:43:ec:65:f7:e6:f9:b7:b2:41:61:3a:35:ce:2d:
e8:7c:e2:b0:82:ec:4a:f7:10:81:d0:36:ad:0b:38:46:70:29:
23:08:88:48:cc:11:05:ac:bc:91:bb:29:3d:bc:d2:06:0d:a7:
b4:15:80:cc:14:dd:3a:71:55:05:53:03:61:0a:e3:f8:34:66:
db:9d:52:32:37:7f:a3:c2:61:9b:d5:99:e7:82:6d:e5:76:0b:
c1:1f:7d:09:00:9a:22:6f:8a:bb:69:b3:ab:8a:91:49:b7:0f:
2c:1f:87:47:40:f5:31:fc:1e:09:80:3a:97:e9:d5:65:1c:8c:
71:1b:a5:a1:34:c3:92:d7:99:e6:68:84:da:fd:75:36:f5:dc:
e8:6a:24:ec:5c:96:6f:41:ba:ab:4f:be:42:8a:25:c9:09:83:
b2:86:78:36:a1:aa:33:14:ab:e7:88:c6:18:3c:d9:bb:69:e3:
b2:5d:19:2f:a6:50:ae:07:88:c9:c9:02:db:cc:47:86:29:9b:
2c:02:54:e1:80:79:97:09:e0:1c:fa:ff:ec:fd:82:f4:e3:7d:
8d:f1:e7:8a:70:04:34:8d:7d:aa:0a:37:31:a0:aa:57:a8:b0:
5f:2a:8d:d5:40:b5:77:7e:76:24:7b:08:80:a7:e8:fe:e8:01:
c7:36:5c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 16:41:01 2025 by rpki-client