Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
File: 68ZkA60MRTevnDKw3vDFKsKqsQQ.cer (raw, json)
Hash identifier: 060NvKL16fwSSOa4ZkW5Ug2nxtvJDkTgCIRmS2271jY=
Subject key identifier: EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D9797E20AA8BC2928057CD4DFE4300
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:34 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.33.92.0/22
IP: 2a00:cc60::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:79:7e:20:aa:8b:c2:92:80:57:cd:4d:fe:43:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ebc66403ad0c4537af9c32b0def0c52ac2aab104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:54:18:36:8f:ae:73:e2:80:2d:2d:2c:7e:9f:
0f:a4:98:fb:6e:d2:45:04:1a:e0:2f:09:5c:01:62:
ef:7c:71:7c:da:7b:61:72:10:ff:a7:05:92:1f:70:
eb:f9:5f:30:ae:14:7e:79:e7:db:f3:ab:8a:2e:ec:
56:29:9e:6f:61:51:55:b8:af:a0:b9:1d:39:56:fb:
96:9c:87:85:72:f4:95:24:1d:b5:3e:bd:c8:39:fe:
c6:26:60:7e:07:1b:68:ec:ee:08:de:9b:d5:b4:b3:
8b:b6:24:f2:c5:7b:db:6e:8e:12:de:06:a7:55:30:
f6:2f:41:25:e7:ac:f0:36:a3:b0:e3:13:dd:e6:94:
38:5b:45:4b:bd:3b:be:8a:67:17:30:2c:c3:23:27:
5a:be:f3:db:8a:ae:db:7b:f8:27:f7:90:7f:44:df:
b2:eb:56:13:e7:86:b4:31:b8:5d:12:25:b8:ca:fb:
d8:3e:ed:0f:c5:46:a8:ba:9e:a9:6f:4b:21:f3:2e:
54:75:2a:72:22:c5:12:f0:0e:77:e4:4a:80:3c:7e:
c8:26:aa:bd:99:c6:68:1c:a0:07:b7:d6:c8:fb:fd:
c1:3d:25:c8:65:02:80:14:a0:62:e3:c5:45:c1:2c:
d9:da:10:16:a9:9b:44:07:51:44:2b:61:f4:dd:8d:
37:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.33.92.0/22
IPv6:
2a00:cc60::/32
Signature Algorithm: sha256WithRSAEncryption
89:d3:e9:95:60:a7:5e:24:27:49:c1:82:92:c3:9f:fe:d7:33:
8b:82:28:69:e9:4d:79:7c:5d:95:c0:6f:74:8a:6c:90:5e:da:
5a:6c:35:a6:2f:db:b7:30:cb:75:c4:e1:82:bf:d8:23:6d:c1:
5c:1a:04:8f:9a:94:19:8f:be:4b:96:16:fb:05:94:d1:d9:c4:
d0:8a:8d:6b:36:3e:de:a1:90:52:a0:a7:c2:1a:5b:97:fb:e6:
7d:54:b7:95:ba:5c:ba:cd:9e:28:c7:92:c0:26:3c:1e:36:ce:
46:29:42:24:4f:de:17:11:84:31:0a:26:20:3d:e5:a9:46:6d:
55:f2:ec:99:2d:5c:17:9d:6f:09:01:c9:04:50:0a:08:b1:0a:
36:80:9b:d1:2d:72:88:b6:fc:24:84:80:a4:eb:1c:30:9c:36:
8b:71:7b:e9:2f:6a:f4:2f:55:ae:65:56:0b:c4:ce:c4:3d:88:
7c:2a:6b:78:79:e3:25:42:79:d6:22:df:87:47:88:a6:5a:fd:
71:3d:e7:d5:ed:a8:eb:94:81:0f:f9:ab:e7:19:a1:da:c8:6a:
9e:f8:5c:3b:2a:b5:d4:df:77:9e:74:e9:c9:d0:9a:2f:3d:bb:
ed:29:4b:33:da:8a:bb:99:13:33:a0:38:ce:fd:69:b9:d5:32:
b4:89:d2:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:11:13 2025 by rpki-client