Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qJKlDIjMC-sLdHvvSwWQv5dw6TU.cer
File: qJKlDIjMC-sLdHvvSwWQv5dw6TU.cer (raw, json)
Hash identifier: K08/JiRw46XNnVV7ujxlqMhGwqz6s3T7DtrTKeO+XIU=
Subject key identifier: A8:92:A5:0C:88:CC:0B:EB:0B:74:7B:EF:4B:05:90:BF:97:70:E9:35
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258F7BEEEC25E0F8F11410F9FDE43D30
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0a/d7a3cb-5fe5-4638-a0db-f066a5c96580/1/qJKlDIjMC-sLdHvvSwWQv5dw6TU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0a/d7a3cb-5fe5-4638-a0db-f066a5c96580/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:49:07 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 146.19.236.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:7b:ee:ec:25:e0:f8:f1:14:10:f9:fd:e4:3d:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a892a50c88cc0beb0b747bef4b0590bf9770e935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7a:70:4d:bd:12:78:57:d4:b5:7a:b5:7d:13:
68:e5:bc:e2:d2:f1:52:49:90:a2:94:3e:40:ed:f8:
83:c5:0e:14:54:d2:8f:4b:da:ab:9f:2a:36:80:54:
4a:d0:73:c2:8e:a3:73:e7:64:ed:c0:45:24:98:e6:
a6:fe:67:0f:bd:6a:b3:f5:43:0f:6d:f5:16:b7:4e:
2b:5a:f0:1a:a8:7d:c1:73:e1:ac:a6:43:64:fa:55:
3d:24:02:63:74:e9:c6:f7:72:38:03:6b:44:73:2a:
2f:85:19:11:d7:f4:fa:1b:c4:1a:7f:84:1d:85:41:
36:f7:9c:f2:36:eb:a0:18:c5:7f:6e:c9:b3:f5:fc:
f2:7f:35:50:9e:e1:4b:5d:04:54:0b:77:0e:68:a2:
75:7c:3b:a6:48:42:2e:24:6b:c7:a3:77:6e:35:ad:
24:22:4c:d0:b7:a4:21:7f:b1:6b:c1:7c:d8:97:54:
f9:ca:2d:eb:f4:5e:f6:68:69:2b:52:6f:4c:a9:52:
67:08:4e:c3:c7:62:35:5b:32:c3:92:12:81:0b:b6:
25:ea:0d:e7:05:e8:9d:3e:39:41:25:d3:48:1d:88:
d2:ea:75:cb:5d:b2:02:a2:e4:d7:d5:2f:99:34:33:
66:96:0e:6e:05:e6:8b:52:30:d7:c0:a5:29:2f:50:
95:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:92:A5:0C:88:CC:0B:EB:0B:74:7B:EF:4B:05:90:BF:97:70:E9:35
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d7a3cb-5fe5-4638-a0db-f066a5c96580/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d7a3cb-5fe5-4638-a0db-f066a5c96580/1/qJKlDIjMC-sLdHvvSwWQv5dw6TU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.236.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:64:fb:1f:3e:86:dd:cc:79:bb:f7:d9:03:ad:b8:53:64:e1:
f9:2c:94:fd:46:6c:e7:95:bd:fb:1b:d9:a5:fe:ce:42:0d:33:
43:91:b6:8a:dd:bb:37:d8:aa:ac:f2:bb:4e:0c:85:27:5d:0a:
82:59:e4:e1:52:82:96:ee:1c:e5:e0:e4:1d:5c:bd:b4:cd:10:
8f:95:4f:df:05:9a:2c:a8:0b:d7:13:3a:3d:50:4f:26:da:86:
1c:6e:b3:33:95:ae:1c:28:6c:d7:22:30:9b:59:ef:5e:75:d6:
06:38:e9:9b:fd:86:33:2f:04:74:f9:47:54:0a:00:68:8d:2b:
97:09:6b:c1:39:f3:82:41:57:03:32:d3:f9:24:e1:e8:77:18:
ce:b8:49:d7:60:ae:f0:99:fb:dc:bf:95:ec:3c:05:a9:ab:85:
0d:4c:c5:49:70:8c:ff:4b:2f:24:f6:7c:71:fc:93:cc:45:eb:
7a:11:6b:a8:f7:7a:de:0b:97:27:54:2a:6c:ba:01:bf:7a:fb:
b8:8f:f0:36:37:23:10:9c:6d:73:16:bb:7d:7e:3b:03:20:90:
c8:4e:d4:f6:0c:4d:15:51:db:37:34:9e:b9:c6:2c:dc:bb:e1:
b8:30:88:c5:2e:80:42:85:d3:3a:a8:22:62:f3:65:c6:c8:5b:
53:b0:d9:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:40:34 2025 by rpki-client