Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.cer
File: 5nP_ENelVPxRp_mcH2Hhzu-Zhbw.cer (raw, json)
Hash identifier: dEanLcpSQwlweEt5erq+FQdUBCf3b29LgRRg3SN+pEo=
Subject key identifier: E6:73:FF:10:D7:A5:54:FC:51:A7:F9:9C:1F:61:E1:CE:EF:99:85:BC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221FF3FC70806F9924CE7DD61EBAAB63
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:26 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.7.212.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:f3:fc:70:80:6f:99:24:ce:7d:d6:1e:ba:ab:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e673ff10d7a554fc51a7f99c1f61e1ceef9985bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:00:c8:8c:a9:c3:b0:7d:e3:9c:e2:b9:2c:d8:
a4:13:90:6e:ac:3c:f7:e0:de:6e:d4:36:04:95:32:
6b:04:46:92:47:48:7d:94:a3:01:85:76:d9:94:db:
96:65:39:16:a0:71:d5:8b:7b:5c:d8:02:ff:fc:06:
6b:1e:ff:52:96:eb:54:66:78:db:56:43:4a:c0:0e:
20:1b:82:8d:ef:e6:eb:b0:db:ba:b3:16:bb:1b:b6:
d5:79:e0:36:bd:20:2b:f5:ee:e0:b4:2d:cd:3e:13:
33:aa:58:93:ff:31:13:bf:9d:65:7f:ce:5e:d1:c5:
17:1c:0a:18:90:52:f4:63:b1:6e:d9:5b:47:d0:2e:
ae:eb:7a:d4:14:80:2e:5b:8a:0f:4f:a9:65:0d:36:
b3:d2:03:88:54:99:9c:61:87:f2:10:ac:a6:e4:3a:
1b:20:12:a6:da:b2:9e:49:9f:df:df:6d:c7:11:47:
81:28:63:ff:cc:2e:db:74:4e:ef:b5:05:e7:18:44:
b3:9c:bf:ae:b2:af:5e:0c:a8:d5:23:79:39:28:83:
d9:51:07:5e:bc:7f:99:f8:1a:d1:95:85:7f:7f:89:
32:0f:b6:fe:d4:3d:4c:0a:60:f0:58:c5:c0:c4:5d:
55:32:7a:fb:ca:d4:bf:a6:2c:d4:7a:b9:40:9d:76:
90:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:73:FF:10:D7:A5:54:FC:51:A7:F9:9C:1F:61:E1:CE:EF:99:85:BC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/cbe7e5-dcc8-4265-8d7d-48ca33675a50/1/5nP_ENelVPxRp_mcH2Hhzu-Zhbw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.7.212.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:e5:c8:61:f9:4e:5b:2d:64:92:08:38:11:4a:f7:3d:8c:8c:
e9:c2:ab:8b:be:0f:3c:0f:63:8b:5e:e8:76:b2:99:7e:98:32:
c1:9d:5d:88:8e:17:94:a3:bf:b1:52:be:0a:fb:29:e3:a8:e4:
30:19:86:83:14:c4:34:94:81:f9:ec:26:f8:03:a0:8e:c7:fa:
d3:e4:ac:f9:5f:83:ff:ef:63:ee:48:7f:ae:03:ac:ba:f6:9e:
1f:4d:82:fb:d0:e7:9e:fc:e1:7b:ce:58:95:87:cd:80:1e:c4:
0e:d4:db:77:c3:67:f9:9f:70:a4:e1:e4:63:c5:d0:3b:f7:de:
78:f3:66:2d:f5:13:58:e2:b9:b8:0b:9b:7f:23:c8:a1:cc:bb:
26:20:1a:ee:8a:fb:27:21:2d:ea:ef:e8:d8:a9:1f:b4:b2:d5:
d6:db:c9:00:3f:ed:1b:e0:d2:30:cf:6d:d9:03:d3:61:2e:67:
29:ac:d1:cd:50:5c:b5:dd:1c:ea:98:df:cd:51:95:b6:e3:f3:
ef:06:9a:14:d7:5a:3c:18:9f:9f:71:8e:82:c8:21:f6:e7:38:
b2:ec:16:48:2f:1b:f9:7b:62:2f:28:52:5a:0e:74:fd:7f:10:
a0:dc:16:89:cb:c8:c0:f1:d4:be:15:9c:69:a2:ef:c9:22:2b:
1b:cb:b0:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:20:38 2025 by rpki-client