Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer
File: 2sMmMqqRVCU8bc0jMemtaSC2vcw.cer (raw, json)
Hash identifier: 13XuzDAGa3ToaRepw8XGuT9M7EXOtPzejhbS76Exldk=
Subject key identifier: DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D64E0C16574B01DE4D02B3DCA2D0A8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:48:23 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 212.46.57.0/24
IP: 2a12:fc0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:4e:0c:16:57:4b:01:de:4d:02:b3:dc:a2:d0:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dac32632aa9154253c6dcd2331e9ad6920b6bdcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:24:55:ad:2c:7d:64:4b:3e:a8:bc:55:24:e7:
91:15:e6:fd:d6:73:92:55:c6:63:f9:14:a6:e4:ae:
44:87:62:d7:73:c5:74:35:b1:22:89:2b:c6:0e:78:
c7:f4:5c:1b:49:dc:84:62:8a:55:b6:05:ce:f8:0f:
5a:82:ee:27:37:13:33:b3:a0:93:c8:e9:13:62:d7:
56:f4:93:99:05:cf:4a:d3:9a:6e:90:fb:54:4e:0b:
c3:0d:8a:8e:9c:8c:f9:6b:af:4e:5b:a0:34:7e:22:
d0:1b:98:c5:77:cc:70:a9:a3:22:ca:9c:22:9b:67:
f7:b1:37:54:99:7f:98:f8:98:ff:cc:c8:62:9c:87:
f3:a3:33:28:4c:3d:bd:aa:4e:87:b8:35:23:8b:d3:
70:bd:49:83:76:49:68:af:40:8e:04:9f:67:98:86:
3d:97:8b:0f:bb:e7:ff:3d:48:6e:58:9d:d4:a3:7b:
ce:b5:c6:a6:ae:42:12:d4:c6:ab:d4:2b:d8:e3:eb:
c3:aa:61:b1:0b:0f:83:ef:33:d2:83:4f:b3:fc:05:
2e:8f:c3:82:65:30:c0:cd:8f:27:44:87:90:53:7b:
fc:8c:91:90:5a:ec:d2:6c:71:06:ca:5a:b2:c9:42:
4d:28:22:0f:bc:ef:a3:a9:eb:9d:5e:2a:14:9c:8b:
4f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.57.0/24
IPv6:
2a12:fc0::/29
Signature Algorithm: sha256WithRSAEncryption
01:44:a6:4c:8a:53:0a:4f:aa:34:0a:b2:84:97:11:1c:d6:03:
5c:d8:8e:9f:1a:05:1d:1a:44:1f:48:0f:e3:51:37:aa:af:03:
30:c1:cf:d1:38:aa:cb:98:33:c3:3e:f2:e6:b7:f8:15:53:a2:
fa:98:43:5f:f2:2d:cd:ba:ca:6a:7a:aa:35:62:28:40:ad:16:
f2:d3:ad:e5:06:d8:70:f7:c8:4b:8c:96:ec:eb:2d:53:85:9c:
1c:02:14:f4:ef:5e:8c:18:de:d2:41:8a:31:2d:29:b1:98:ae:
d7:66:58:64:7b:4e:37:25:4d:6d:54:47:f0:58:42:62:e2:20:
e4:04:e1:9d:b7:ff:52:70:64:2c:65:05:a3:74:31:84:97:c8:
50:de:84:75:d8:3a:55:13:46:f2:89:16:47:e9:63:d6:5d:45:
01:f3:3b:1a:f3:f8:3d:88:8d:26:f9:32:23:c5:9e:9b:7f:3c:
97:3a:65:ff:31:d9:48:af:70:f3:00:3e:09:d8:62:3d:3f:59:
91:47:75:73:46:ca:1d:88:d4:c6:be:97:6f:fe:9a:ab:72:13:
ef:b5:a0:7f:61:1a:20:10:e2:f4:b6:c2:04:b9:d2:79:78:ba:
2e:27:19:4e:51:14:04:cb:22:a7:25:8f:5b:45:d3:04:66:02:
39:11:18:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:24:09 2025 by rpki-client