Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer
File: 1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer (raw, json)
Hash identifier: 5f7XejPInDGgJN4m3jMlDU0JseGhpBbw8ZcTbgPE4J8=
Subject key identifier: F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942067E0EAFBA59BB2E80EED417EECBBB7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:47:46 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 89.234.128.0/18
IP: 185.58.184.0/22
IP: 2a00:5880::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:e0:ea:fb:a5:9b:b2:e8:0e:ed:41:7e:ec:bb:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f82554a856a422b061ae64c577630f91d408cd4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4f:a9:61:6d:b1:aa:69:ed:36:46:cb:16:83:
68:bc:0e:e4:b4:e1:eb:53:85:1c:f7:40:c0:75:2b:
c7:8e:1b:a0:db:db:ad:7f:67:8d:c0:a7:04:6a:00:
1d:1b:4a:df:a7:d8:90:61:f5:72:3b:26:90:41:ef:
da:b3:12:4d:2f:29:0c:2a:c7:43:b7:fe:cf:27:27:
ac:db:66:97:57:dd:5e:b6:a9:ec:59:cb:36:6f:f3:
c9:e4:13:55:7c:4c:dc:05:65:3b:fc:9a:d7:35:7f:
f8:b5:4f:45:7d:cc:27:bc:00:89:70:fa:8f:fc:89:
82:a2:19:5b:24:f9:68:cf:8a:30:64:6f:56:32:eb:
6c:8f:e2:82:b6:77:80:03:bf:20:d5:59:92:c8:87:
4b:c6:3d:58:d6:14:0c:08:5d:1e:d9:b5:2e:85:7c:
fb:1e:dc:29:ab:01:10:fb:87:e5:65:21:66:e7:1f:
93:ee:24:a5:eb:46:a4:f7:ad:68:4d:d8:1b:eb:37:
7f:11:d5:e0:c2:4c:58:00:15:85:50:4c:e0:74:22:
1c:38:0c:78:af:92:1b:6b:89:d2:9c:9a:0d:19:96:
db:95:7d:e4:d5:6f:cb:05:a8:58:1c:03:0e:49:6a:
68:a6:3a:00:09:7b:c5:e1:2e:6e:89:15:13:24:e3:
c7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.234.128.0/18
185.58.184.0/22
IPv6:
2a00:5880::/29
Signature Algorithm: sha256WithRSAEncryption
5e:f6:20:96:9e:f5:56:d5:fb:ae:3a:fa:c9:88:fd:08:67:7e:
8c:95:05:85:8d:9f:ff:8d:aa:b8:54:71:45:67:dd:0c:8b:aa:
c7:8a:82:f8:41:bb:73:12:2a:c0:c9:7a:6b:25:0c:91:c5:d9:
35:72:e9:92:0a:82:ac:be:d0:7d:7d:85:1a:03:57:76:ae:9f:
90:a6:6e:77:67:2e:07:80:e8:16:95:c4:2a:63:ad:3a:ac:97:
f7:cb:f7:83:68:46:6b:07:df:47:8b:4c:19:c2:5f:2f:69:30:
21:64:88:37:db:a6:71:07:e7:3c:82:f1:93:0d:2c:53:63:51:
65:eb:68:3a:32:a7:c9:2b:93:8e:5f:cd:d1:c4:a5:17:b2:97:
2e:87:6c:76:83:43:c1:2c:c4:26:ef:fb:66:e2:4b:08:c1:62:
e8:cc:f7:15:f8:b0:1d:07:b5:ec:d4:f8:6e:78:76:36:3e:a0:
49:ea:a9:9e:da:6e:eb:66:1c:d8:64:0f:f7:27:a4:28:31:03:
53:34:37:db:d7:3a:35:3c:a2:90:77:61:7a:fe:57:d1:79:7b:
db:b3:a1:36:22:86:ce:83:d0:0d:5c:25:8c:ab:d0:b6:4c:62:
7b:85:7f:fa:d1:ba:a8:79:7d:83:bc:ca:d0:01:cd:35:eb:61:
78:e9:c2:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:13:59 2025 by rpki-client