Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/v9gcqQzFIkWGr-urHHixeQJo1cE.cer
File: v9gcqQzFIkWGr-urHHixeQJo1cE.cer (raw, json)
Hash identifier: T1AiJmGLnE+JpHIzIS6MCNJkzJM5l+LO9zWX340o4iE=
Subject key identifier: BF:D8:1C:A9:0C:C5:22:45:86:AF:EB:AB:1C:78:B1:79:02:68:D5:C1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B27643C1E783DFB879DD9B2E50A9EC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:47:43 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 45.149.216.0/22
IP: 2a0f:7600::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:76:43:c1:e7:83:df:b8:79:dd:9b:2e:50:a9:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bfd81ca90cc5224586afebab1c78b1790268d5c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7b:ec:92:a4:46:f1:96:0c:a4:d7:f9:7c:8c:
f7:dc:84:03:1d:48:b5:74:c5:f8:74:c5:fe:7e:0d:
7e:bf:10:41:ca:50:69:66:96:c9:fe:1e:a1:8d:75:
80:71:b6:b8:ff:7f:a5:5f:4c:df:da:db:09:72:3b:
ba:2c:62:44:cd:a4:79:5e:f6:6e:aa:79:3e:6a:25:
44:9b:41:71:a7:ca:e2:4b:d2:ae:74:68:b4:f4:cd:
25:9a:89:7b:ef:98:86:2d:f2:6b:2b:49:a3:9e:1e:
05:35:5d:46:8c:ab:29:b1:69:e3:69:c6:88:9c:6d:
b4:fc:f3:f9:2a:c9:45:1c:5a:56:1e:37:1a:80:7e:
19:79:67:99:2d:26:09:bc:d2:60:43:9f:e3:6e:3b:
59:b8:14:94:af:05:50:cf:51:62:14:fb:a9:8b:94:
e9:f8:6d:d0:10:7b:7e:42:43:53:4d:ee:6f:94:d7:
5c:6a:85:a4:14:10:56:9d:78:4f:10:bf:95:d5:a6:
92:c5:02:f4:fa:89:8f:41:e4:0a:25:15:5d:22:e6:
6b:7f:a4:11:93:9a:ac:ca:95:a1:31:41:42:c4:d3:
ce:e1:18:15:97:b8:53:c8:22:31:b5:bd:82:8b:e9:
b7:b2:1a:c6:07:f9:82:38:f9:d6:b2:10:49:b9:49:
59:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D8:1C:A9:0C:C5:22:45:86:AF:EB:AB:1C:78:B1:79:02:68:D5:C1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.216.0/22
IPv6:
2a0f:7600::/29
Signature Algorithm: sha256WithRSAEncryption
3b:8b:da:64:00:81:35:2d:2c:9a:18:15:e9:85:10:02:44:39:
6a:3e:f8:9f:45:27:26:bb:88:52:d2:e3:bb:5a:ee:56:7c:55:
77:86:27:2c:70:1d:ac:77:d1:f8:cd:21:93:11:97:21:a7:e1:
55:af:8a:24:9a:c0:e7:60:81:cb:4c:c5:b1:5c:ff:07:c2:a6:
74:05:e6:b2:a2:37:a9:02:a3:ed:7c:d3:e6:c4:3f:46:cd:5a:
76:80:cf:ed:4f:86:4f:27:4b:c2:c6:99:ca:a6:36:58:4b:34:
38:c1:0e:67:46:d7:e5:6c:c1:3c:4c:56:7b:83:66:2c:00:e8:
41:ff:ce:a6:55:53:85:fc:bd:f7:f9:56:16:9f:5c:76:c3:eb:
91:df:46:f7:fa:ac:e8:45:90:b8:7c:01:46:95:fb:18:ef:05:
b1:24:03:7c:9d:32:62:cc:79:60:27:b2:c2:a2:1e:03:1f:61:
73:56:3e:3c:df:cb:67:6a:32:c5:1a:24:83:ce:26:b1:a8:6c:
f9:4e:a5:e9:1b:ea:9f:36:3c:86:29:4b:5b:13:78:cd:2e:1f:
4f:93:5d:b7:f4:47:66:b4:d6:4c:e6:0f:5b:df:c2:b7:3d:33:
66:64:25:66:94:b5:17:0a:8d:eb:cb:69:9c:c9:ab:5f:f9:31:
46:b4:be:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:59:45 2025 by rpki-client