Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1w4MS0dQEKW0Kt7zM8Ob3BrblhE.cer
File: 1w4MS0dQEKW0Kt7zM8Ob3BrblhE.cer (raw, json)
Hash identifier: 48isaw9pmbbwo1TxgHKp6R9RPRbhXbd96VJ798GXuCM=
Subject key identifier: D7:0E:0C:4B:47:50:10:A5:B4:2A:DE:F3:33:C3:9B:DC:1A:DB:96:11
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D90FCCCA616F32320F2D875BD71B1A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8a/e521bf-f8fd-4e39-b6ea-c9738ce5baef/1/1w4MS0dQEKW0Kt7zM8Ob3BrblhE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8a/e521bf-f8fd-4e39-b6ea-c9738ce5baef/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:07 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2001:67c:a44::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:0f:cc:ca:61:6f:32:32:0f:2d:87:5b:d7:1b:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d70e0c4b475010a5b42adef333c39bdc1adb9611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:35:6a:5b:04:20:53:3f:a1:08:00:bf:2e:cc:
ee:9b:12:21:c2:bd:51:1b:df:7a:38:3d:da:7c:c8:
06:22:f1:dc:c3:50:9c:7e:5f:61:a4:dc:e6:36:b5:
8a:a5:eb:be:77:de:71:80:61:0e:54:49:ff:e3:b0:
5b:9a:0a:55:22:01:dc:62:85:e2:97:e2:c3:2d:a4:
13:c2:1c:6f:4e:9d:c7:6d:05:ed:18:74:2f:4d:ee:
3d:28:25:84:be:13:63:98:dd:7f:7c:65:50:19:c2:
d0:79:a0:3d:de:23:8f:79:96:ec:e9:4e:8e:23:b8:
ef:39:75:f6:64:6d:36:ab:64:25:87:ca:21:14:46:
d6:bd:4f:e7:11:85:cf:71:88:40:5a:fc:ab:15:13:
41:05:f1:10:3e:a1:64:b4:42:e5:00:32:90:ee:36:
56:c7:e0:3f:f1:cc:30:89:de:14:66:3f:73:25:bb:
de:d2:b5:a1:07:dc:3b:41:e6:6d:3e:79:30:15:80:
71:3f:a1:ce:d3:a6:23:c1:d1:6e:92:0e:f4:1c:95:
46:1f:cd:d8:39:5f:ac:c6:da:79:65:09:55:dc:cb:
2f:3f:12:ff:35:29:06:7d:09:b7:30:0b:06:15:5e:
f4:11:52:f4:ad:b8:11:42:54:1d:fd:08:03:39:f3:
99:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:0E:0C:4B:47:50:10:A5:B4:2A:DE:F3:33:C3:9B:DC:1A:DB:96:11
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e521bf-f8fd-4e39-b6ea-c9738ce5baef/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e521bf-f8fd-4e39-b6ea-c9738ce5baef/1/1w4MS0dQEKW0Kt7zM8Ob3BrblhE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:a44::/48
Signature Algorithm: sha256WithRSAEncryption
78:27:cb:3d:1d:98:ee:f3:43:a7:fd:84:4b:06:44:76:77:82:
60:61:58:b5:58:3a:30:1b:ff:58:e2:ae:a8:e4:a0:f3:fa:77:
03:e7:bc:77:9a:27:ce:30:a7:d8:35:ab:5e:34:a1:62:22:e7:
89:a4:b0:0c:0a:15:20:2e:5d:eb:cf:f6:bc:5c:47:d7:df:1b:
90:e6:48:e1:41:b9:e7:e0:66:3a:a3:77:8b:fe:1c:2f:f0:00:
51:36:7f:08:9e:b3:f2:65:a6:a3:08:3f:83:82:99:e4:16:ec:
a5:ab:bc:1b:74:fb:23:04:9e:1c:93:08:2b:af:f7:cc:fd:2e:
a8:cc:01:6c:58:ad:06:4f:84:5b:76:73:c7:4f:57:1a:0d:f9:
d1:bd:e2:bf:e9:1b:86:cb:c7:8c:df:70:6d:f5:2a:ff:14:75:
6e:3e:b7:fc:87:f0:02:5a:b7:3d:1e:37:1b:ab:30:aa:1d:5b:
58:9f:8c:cb:b5:a6:c9:b8:5e:b7:f1:b1:13:bc:07:62:8f:b4:
46:15:14:94:59:10:cb:44:1e:01:0f:ea:6e:94:1a:ea:c8:0d:
eb:39:fd:a2:83:9b:15:c0:ab:ee:52:9a:61:f9:93:35:9f:2b:
18:48:03:42:a8:bc:21:c2:53:9d:51:70:04:7f:70:29:63:de:
7a:bb:75:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 22:12:32 2025 by rpki-client