Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rUlV8c295-2ead4R3qXFYPYEVqk.cer
File: rUlV8c295-2ead4R3qXFYPYEVqk.cer (raw, json)
Hash identifier: 6y5/h8YTyuJpsjw59ciygB34sQssH1Sao3sVKeM7aHk=
Subject key identifier: AD:49:55:F1:CD:BD:E7:ED:9E:69:DE:11:DE:A5:C5:60:F6:04:56:A9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC6B8A1CBC9468BEE2E87D0DBD62B5B6B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/04/1994da-fbd0-4333-b419-e56fbe3a512a/1/rUlV8c295-2ead4R3qXFYPYEVqk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/04/1994da-fbd0-4333-b419-e56fbe3a512a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 20:30:38 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 194.49.68.0/23
IP: 194.49.78.0/23
IP: 2a0f:5c0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:a1:cb:c9:46:8b:ee:2e:87:d0:db:d6:2b:5b:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:30:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ad4955f1cdbde7ed9e69de11dea5c560f60456a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6f:c7:b8:e3:4d:fc:80:2e:f7:a7:5f:91:d8:
c3:67:48:d2:f2:5e:9a:f5:a1:e4:ab:4b:36:07:fd:
bb:61:36:60:d7:00:f6:82:b6:2a:5d:17:1f:e1:25:
2e:f4:8a:42:c1:00:c3:31:1c:57:72:30:fe:ec:09:
7d:46:c8:f0:34:cf:a1:84:91:91:22:68:e7:fe:95:
2a:4f:6f:53:9f:b4:d2:0a:23:cc:6a:c4:10:29:9c:
60:66:b3:13:cd:17:d9:ee:18:b6:fd:f6:9f:06:06:
9c:db:a4:68:1b:d0:c6:53:eb:55:da:eb:73:65:c2:
93:2c:19:cf:bc:02:fb:cb:d7:bf:e7:6e:c8:4f:d7:
38:14:7e:da:d0:e4:0c:1a:32:4e:49:20:ae:f5:34:
0c:da:70:44:c8:15:dc:45:94:2d:89:c8:e3:c9:77:
ed:97:b9:12:58:fa:b9:9f:f5:f1:fe:30:5e:ea:ce:
54:2d:84:34:4a:84:c6:ba:24:7b:23:03:cc:19:0f:
cb:d3:8c:26:31:6c:4a:00:d2:6f:6c:50:90:f0:93:
70:f7:0f:ae:06:3a:ce:16:8d:78:28:cd:2a:1e:56:
b5:71:c3:ac:f6:ba:81:6a:ce:2b:56:c3:74:7b:04:
c8:a3:cb:a9:9d:3f:91:0d:90:98:65:c0:1a:a4:6b:
0a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:49:55:F1:CD:BD:E7:ED:9E:69:DE:11:DE:A5:C5:60:F6:04:56:A9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/1994da-fbd0-4333-b419-e56fbe3a512a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/1994da-fbd0-4333-b419-e56fbe3a512a/1/rUlV8c295-2ead4R3qXFYPYEVqk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.49.68.0/23
194.49.78.0/23
IPv6:
2a0f:5c0::/29
Signature Algorithm: sha256WithRSAEncryption
02:b7:04:8d:8b:2a:74:5f:de:d2:ea:58:41:06:ab:d2:c0:2c:
31:4b:82:e1:9a:1c:a2:4b:7b:82:09:42:4d:f5:f6:53:fe:88:
f3:32:00:57:1f:20:e6:60:5c:3b:a3:70:26:15:4c:e0:12:24:
e8:0a:fc:ce:8b:f6:e8:b8:1a:5f:3b:86:c8:c6:a5:50:b4:e5:
ad:c6:71:c6:c6:7f:2e:62:61:66:b3:09:ca:12:6f:eb:64:51:
b6:c0:0c:93:ad:8e:dd:86:60:51:a4:a6:a6:be:75:ce:28:55:
5b:17:75:8d:19:5b:ea:be:20:04:db:4f:f2:d3:4a:df:16:17:
95:05:3b:15:5b:92:cd:d0:bc:30:18:e6:0f:30:42:e6:e9:8e:
c9:59:98:6e:c3:9c:8a:bb:63:bb:ea:be:3e:72:45:b5:88:19:
32:d5:b5:33:ad:09:2f:73:c6:e1:43:6d:c7:58:ec:77:2d:7d:
45:4c:a1:ad:ae:e8:3d:f2:5d:bd:b4:53:4a:62:0e:fe:7e:d3:
42:f2:6f:3a:20:bd:a4:ea:69:b8:b3:db:88:1a:75:b3:2f:b5:
a7:6c:bd:96:74:be:81:88:99:ce:c1:78:f1:f6:2d:67:73:62:
a5:47:4c:38:f1:56:51:d9:b8:bb:99:88:63:05:6d:cb:18:45:
81:5f:ca:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:49:09 2025 by rpki-client