Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3qRuqueu8vRP5mAWK7nccNZSWvE.cer
File: 3qRuqueu8vRP5mAWK7nccNZSWvE.cer (raw, json)
Hash identifier: L//+EMiT/pZkRq1cxxZW8dTkgDxUNBSMtbpgtpdB7e8=
Subject key identifier: DE:A4:6E:AA:E7:AE:F2:F4:4F:E6:60:16:2B:B9:DC:70:D6:52:5A:F1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B39FCF7AEECFCD63AF8434A95080DC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:48:59 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.225.132.0/22
IP: 2a0d:c400::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:9f:cf:7a:ee:cf:cd:63:af:84:34:a9:50:80:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dea46eaae7aef2f44fe660162bb9dc70d6525af1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a4:b2:57:e9:32:9c:64:ba:f4:08:31:f2:f2:
bd:9e:80:9e:e3:6e:80:da:20:a3:b5:30:2c:de:ba:
4a:0c:3f:51:dd:92:4b:c4:f9:93:b2:83:88:f3:87:
91:67:06:e2:56:57:8d:50:15:74:ea:8b:dc:30:0a:
24:aa:fe:b0:ad:c7:7d:4a:77:fe:03:f1:b5:60:12:
86:37:05:39:57:f8:b6:f9:d9:0c:36:80:d4:e8:21:
76:2e:44:06:2b:47:96:c4:91:c8:51:89:47:44:57:
d7:fe:21:1d:70:66:90:eb:98:b1:d5:2e:55:e0:81:
95:0e:41:1b:36:4c:56:8d:f3:56:17:33:da:39:7d:
d2:80:00:24:31:6c:ae:c2:c9:2a:87:b6:e9:9a:64:
99:61:0b:c8:2d:85:48:77:c3:45:39:e4:f5:65:4c:
fd:e7:a9:55:dd:e8:14:11:7b:4b:e7:c0:59:7a:4c:
3b:3f:bf:49:70:64:bd:cd:e6:49:04:6f:39:ca:ca:
42:da:57:47:37:19:db:49:12:85:72:23:17:93:e1:
6f:ad:3b:34:be:66:0e:d3:4b:91:8c:f2:2b:f9:c6:
50:5f:fd:bf:2a:da:09:df:7c:e7:a8:57:76:ab:79:
35:62:f7:8d:1a:83:76:d4:21:5b:60:2c:dd:37:2c:
c6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A4:6E:AA:E7:AE:F2:F4:4F:E6:60:16:2B:B9:DC:70:D6:52:5A:F1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/de3890-8d06-427c-85f1-1fa9ac580b8e/1/3qRuqueu8vRP5mAWK7nccNZSWvE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.132.0/22
IPv6:
2a0d:c400::/29
Signature Algorithm: sha256WithRSAEncryption
72:2a:30:74:6e:d3:b8:1b:d0:f3:86:b2:d8:28:16:0d:b2:b4:
ca:21:ad:5c:07:a1:d6:01:18:93:74:a4:68:5d:06:67:3d:2b:
8a:34:b1:61:bf:03:41:8d:95:d7:1e:8f:6b:66:55:d0:50:cb:
bc:1b:f8:1d:6b:26:5b:5c:4a:ff:87:b2:f7:60:80:7d:e9:13:
ae:a1:1f:04:71:97:e1:3e:df:e9:69:af:81:d8:2d:e2:ff:34:
37:17:8a:79:43:bd:30:8d:e1:ac:94:e7:7f:a8:17:64:fa:a6:
19:ee:53:02:15:9d:4e:75:d6:0b:39:be:78:e1:27:64:38:ae:
2b:a1:fa:db:ba:fc:b7:c9:8e:02:7c:2f:e4:4b:08:23:6e:2f:
e0:88:ef:c1:27:7a:36:3d:f5:c4:8d:5e:4e:b4:5d:20:c6:f8:
d5:f3:a2:1d:8f:0d:ed:da:13:88:bc:a9:55:5c:66:27:71:d1:
80:3a:bb:49:e4:14:15:95:bb:6b:77:48:e1:0e:f7:1f:fc:7e:
ad:f6:e1:cd:13:4c:f8:62:f3:29:b1:0d:80:f3:2f:e7:82:ed:
fe:44:ca:db:74:e9:db:f4:9e:e2:b4:19:63:c2:a5:ca:da:ec:
87:43:c0:7c:35:e0:ae:f9:c9:e3:fa:ec:7d:40:1d:08:63:c1:
41:ce:09:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:59:11 2025 by rpki-client