Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54ul2Y1Izr1a0EwIvwkIKxKn46s.cer
File: 54ul2Y1Izr1a0EwIvwkIKxKn46s.cer (raw, json)
Hash identifier: pyTIZYEiLPSpIJ4Ck5A1Lg6rfXus39ipdThRNXT3Byk=
Subject key identifier: E7:8B:A5:D9:8D:48:CE:BD:5A:D0:4C:08:BF:09:08:2B:12:A7:E3:AB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194222008277C0DC7E62B166E98C12D05C4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/54ul2Y1Izr1a0EwIvwkIKxKn46s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:32 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 77.81.0.0/24
IP: 195.144.5.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:08:27:7c:0d:c7:e6:2b:16:6e:98:c1:2d:05:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e78ba5d98d48cebd5ad04c08bf09082b12a7e3ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4f:31:0d:b3:90:f5:82:ce:af:c4:bd:b4:1e:
29:f3:86:2e:58:9f:ec:d5:b1:eb:d0:56:82:42:ec:
43:8c:b3:fb:e4:58:da:bd:f3:73:2f:e3:1b:5c:50:
9b:1a:11:00:90:f2:8e:db:91:23:c9:67:99:3f:73:
c8:ee:b3:e0:34:a4:b1:c6:d8:ca:c1:3b:77:97:e4:
31:c8:40:87:41:ec:95:fe:b9:fa:30:66:2d:f1:1f:
ef:06:a9:bd:e4:35:dc:22:63:84:ab:f4:7c:01:78:
12:1f:8f:d0:8d:4d:2c:e8:ce:8f:f8:51:f3:52:b4:
69:89:c9:fc:5d:72:96:d4:90:5a:52:99:08:9b:11:
eb:13:8b:60:57:80:24:96:a8:81:0b:2e:c0:03:5e:
43:22:3e:eb:07:e7:50:f1:11:09:81:c9:2a:1c:5b:
89:8c:41:12:30:c9:c4:ad:79:00:b5:c9:96:a3:dd:
e3:66:55:65:f0:95:10:95:3d:d6:8f:03:a2:9b:81:
85:cc:2b:72:bd:11:9c:64:16:8f:94:6f:0c:06:bd:
67:00:6d:16:91:fa:17:6f:01:cb:c5:c5:a9:ac:61:
d3:b2:b3:02:9f:1e:e4:a4:29:2e:f9:ec:99:72:da:
21:fe:a0:4a:29:b7:5b:99:47:c1:c5:b3:fe:d0:73:
30:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:8B:A5:D9:8D:48:CE:BD:5A:D0:4C:08:BF:09:08:2B:12:A7:E3:AB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c52293-0678-4b42-8ae0-4891653eeb67/1/54ul2Y1Izr1a0EwIvwkIKxKn46s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.0.0/24
195.144.5.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:03:a5:fe:9b:84:78:81:af:ef:ed:b9:27:5b:82:ed:10:1b:
51:06:98:bd:42:98:9e:ff:aa:b3:52:c0:b3:aa:15:61:30:6f:
e0:e2:a4:aa:1d:f3:eb:bf:38:a1:70:0b:ba:07:72:d1:c7:19:
d4:d3:da:b7:08:1e:0c:b6:a0:fa:ba:1e:c9:53:40:98:13:16:
85:1c:ae:e9:83:e2:78:e9:35:5a:fd:9a:fe:e6:e5:ff:2d:74:
63:b9:11:c9:9d:cd:f1:ac:2b:bc:08:c3:51:1e:2c:b3:d5:b2:
a3:1c:1e:dd:f4:de:e7:b4:14:73:5b:48:0b:7e:4d:36:c3:b2:
4b:e5:68:cf:21:6b:7a:34:49:21:0b:23:5f:68:f1:67:04:d8:
a1:4e:9d:96:9d:69:be:88:e9:27:b7:bc:b7:57:88:56:be:68:
59:89:01:4c:27:d2:cf:b1:50:00:85:6a:70:6f:e3:67:4f:15:
04:79:3c:14:2f:ca:34:fb:ec:4f:3e:a1:5e:3b:00:9d:89:ec:
0f:46:da:cd:93:00:29:65:0e:31:dd:b5:6a:aa:92:e0:d4:65:
81:2e:99:77:c9:2f:e1:56:24:0c:6e:e3:74:15:21:d3:85:a4:
7b:ca:52:d9:c6:93:2d:f3:f6:3d:83:3b:e1:31:ca:6c:69:cf:
c3:b6:e4:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 10:36:44 2025 by rpki-client