Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2zDy__T-ELGnnBJ6akrYLKUyYGQ.cer
File: 2zDy__T-ELGnnBJ6akrYLKUyYGQ.cer (raw, json)
Hash identifier: 8Nbd44CPHsiOh1PZY1LUm3XGFga36ybM6p7K0K9wydY=
Subject key identifier: DB:30:F2:FF:F4:FE:10:B1:A7:9C:12:7A:6A:4A:D8:2C:A5:32:60:64
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221FF395DD0C0FB76CCDB4252A517877
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:26 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.53.128.0/19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:f3:95:dd:0c:0f:b7:6c:cd:b4:25:2a:51:78:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=db30f2fff4fe10b1a79c127a6a4ad82ca5326064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8c:6f:72:05:44:37:60:9e:41:1d:af:cc:e4:
54:c1:08:41:26:a2:14:4a:cc:a4:13:b5:ab:db:77:
9e:2f:e8:95:c0:67:1e:ae:8f:36:69:62:b2:9a:5b:
b9:b2:64:47:a6:a9:ef:8d:25:d7:8b:8d:cb:b3:f8:
58:59:92:c3:79:51:4e:2e:ac:b6:c3:da:81:96:c7:
72:af:e7:ba:79:e0:c2:48:56:77:b2:e7:3f:c3:10:
99:3f:9c:25:e4:51:95:47:3a:57:24:9c:44:e8:7a:
33:4b:9a:fe:5a:44:87:6e:c5:d8:e2:89:b3:ea:67:
bf:24:e8:7b:75:b5:c9:91:f4:8c:26:08:f5:63:4a:
6f:cf:5e:b6:fc:c3:b1:2f:57:d1:84:b9:bb:79:39:
b1:1d:a3:19:20:03:ed:65:2c:71:75:ac:6d:ce:05:
ae:a3:d7:2b:bc:50:91:a6:fa:05:ad:ee:72:ed:4c:
90:49:4d:d6:b9:dd:78:16:b4:4d:e0:e7:1c:d3:80:
53:c3:b0:1e:d5:80:6b:9c:3b:36:a0:c7:0e:98:a8:
ea:ba:0a:06:d1:7c:b2:b6:42:fa:a2:a8:31:02:83:
84:d6:9b:4e:6e:80:23:29:8b:5f:a7:39:10:c3:38:
62:46:52:22:3f:1f:ca:e3:96:c5:12:57:b8:be:b6:
c4:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:30:F2:FF:F4:FE:10:B1:A7:9C:12:7A:6A:4A:D8:2C:A5:32:60:64
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b0c0af-619b-4ad5-b95f-937e2523d6f7/1/2zDy__T-ELGnnBJ6akrYLKUyYGQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.53.128.0/19
Signature Algorithm: sha256WithRSAEncryption
59:3b:0f:5c:51:2c:8a:7e:a9:9b:79:b3:d0:9c:74:cf:83:fc:
cb:fd:64:73:f5:a0:eb:4a:e0:a8:a1:55:92:ff:12:b6:77:7b:
71:3e:18:87:69:85:52:37:9b:89:f2:b9:74:7e:eb:67:39:45:
bd:f9:d7:23:2b:70:48:35:8b:dd:36:47:7d:e1:74:fd:df:04:
62:2f:85:0a:38:02:a2:b7:d5:01:d0:aa:54:ce:fb:70:64:6d:
33:8c:94:e7:b8:8d:aa:e0:5b:a9:29:a5:40:2a:be:b3:f4:be:
e9:97:7e:fa:ff:af:86:e2:85:d2:14:20:d7:31:88:68:06:84:
60:09:ed:db:a3:0d:6c:f7:a4:bb:75:a2:15:31:af:08:cb:e0:
47:a7:07:cd:9a:d5:cb:f9:6f:83:f6:4a:eb:11:0d:d6:a9:7e:
b6:43:c2:37:95:c7:31:28:fc:9a:0e:e6:9a:74:27:8b:0f:39:
98:b8:2a:ce:75:99:d1:e3:de:55:20:21:dd:93:7d:19:d4:45:
2a:b0:da:e3:16:4e:e3:64:22:19:c1:c9:5c:64:5f:d0:c5:09:
24:51:cb:ef:49:7c:e9:28:91:da:0f:00:c7:ce:c9:0a:a9:9e:
fa:24:82:b4:71:63:b4:14:f9:8d:c7:56:cc:88:58:2c:fe:9f:
cd:60:3d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:09:33 2025 by rpki-client