Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.cer
File: rNa-l7z-Er7L6Ct4QQR_V5cqk1o.cer (raw, json)
Hash identifier: 7tjdOOe4M0Xx8uLCKsgIITFczjS2KY0RhclVgXMOv+k=
Subject key identifier: AC:D6:BE:97:BC:FE:12:BE:CB:E8:2B:78:41:04:7F:57:97:2A:93:5A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228DD506C3D45C7703A21BAFC1CF3595
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8d/4b7c2e-089f-4708-9184-2a84acbe07ee/1/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8d/4b7c2e-089f-4708-9184-2a84acbe07ee/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:28 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.176.134.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:d5:06:c3:d4:5c:77:03:a2:1b:af:c1:cf:35:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=acd6be97bcfe12becbe82b7841047f57972a935a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0f:f1:6a:77:c9:09:00:81:0b:3f:55:0e:ea:
db:5d:5c:0f:f1:df:71:b7:87:62:da:43:33:ac:bf:
59:2c:2e:64:a5:9f:21:a3:3b:e6:41:ae:7f:ed:2b:
5d:93:a6:15:9c:57:31:3e:f5:06:9c:c8:71:47:d0:
16:1f:73:d5:df:1e:eb:01:c4:e7:c8:81:6f:5e:f3:
47:9c:87:c6:c8:98:82:6a:e8:ff:58:ab:50:80:78:
07:56:7a:b7:ee:69:2f:60:e1:34:93:15:60:4a:bd:
62:36:e2:0f:b9:fd:8f:ce:c6:0a:c3:21:f0:ca:de:
df:da:5e:ba:32:36:6e:00:fe:18:2c:b3:9f:3a:f5:
f0:45:48:04:a4:6c:b4:bc:09:82:d3:ec:66:72:e3:
e1:3a:d7:89:fc:34:8e:d1:d0:82:ae:be:0c:73:c3:
1f:e9:ef:84:5b:b4:a2:14:c8:48:97:a9:01:ca:04:
ff:be:38:55:67:b7:df:8d:4a:ae:33:05:c2:c4:51:
d6:62:a9:6e:bf:6e:25:e0:35:75:f4:50:84:3d:ac:
61:ab:66:f2:c7:95:18:ec:63:70:74:22:18:92:27:
bc:0c:b7:4f:a6:e6:15:a2:cd:1e:e0:93:26:0a:7e:
d9:1a:de:8d:47:42:10:aa:f4:87:03:67:a6:ba:29:
ba:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:D6:BE:97:BC:FE:12:BE:CB:E8:2B:78:41:04:7F:57:97:2A:93:5A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/4b7c2e-089f-4708-9184-2a84acbe07ee/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/4b7c2e-089f-4708-9184-2a84acbe07ee/1/rNa-l7z-Er7L6Ct4QQR_V5cqk1o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.176.134.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:00:e6:13:ec:33:9d:35:e2:f5:5e:40:12:38:0e:c3:cd:57:
34:d6:85:b8:bf:42:36:c5:89:ff:0b:d0:79:12:98:ce:f1:86:
7d:87:7b:fa:60:5e:6d:4d:da:2f:1f:97:a6:02:fc:1c:a5:38:
8d:e5:3b:f2:cd:f5:17:34:b9:36:15:18:d4:3e:c7:48:94:12:
42:87:7b:61:88:86:ee:04:48:e0:95:4d:fc:ec:dc:d7:11:a5:
c5:eb:fa:f1:73:23:8d:cf:91:16:a0:01:06:77:ca:e9:ee:b9:
fc:b3:d0:1d:1a:7e:e5:d8:c6:ba:67:db:f2:3e:00:66:7f:4b:
90:40:57:13:c2:00:c0:b8:13:1e:cd:76:47:43:a5:2f:ca:e6:
10:11:d4:13:b4:b7:35:2b:cf:f5:6c:8c:9d:16:bf:d1:eb:16:
af:1d:0a:8d:b8:a6:10:fa:64:22:60:10:36:59:be:6c:17:79:
2d:25:36:8e:94:50:45:3f:4a:9d:79:55:3e:71:fd:19:5d:ef:
5c:d8:f3:53:71:a6:43:cb:a0:71:2e:a9:a4:be:24:07:f5:0d:
eb:94:ff:fd:15:f3:43:54:30:01:55:a9:e9:2f:d6:c3:64:2c:
8d:29:9e:7a:31:6a:9e:86:92:01:33:ab:b4:84:b6:39:36:8a:
33:19:65:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:05:46 2025 by rpki-client