Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6AIkMlKcjDzGq3ECROXwNSA-cKE.cer
File: 6AIkMlKcjDzGq3ECROXwNSA-cKE.cer (raw, json)
Hash identifier: QODwZ6tJurnSAA+2HvOQFrwD0GiBn7GWOAuK2GQZKIw=
Subject key identifier: E8:02:24:32:52:9C:8C:3C:C6:AB:71:02:44:E5:F0:35:20:3E:70:A1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856FAFAE2593F208B40CA7FCB8A850D80A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b9/1d29a0-da4b-41a1-b564-49cc67ba1b63/1/6AIkMlKcjDzGq3ECROXwNSA-cKE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b9/1d29a0-da4b-41a1-b564-49cc67ba1b63/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 23:34:22 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 91.190.154.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:af:ae:25:93:f2:08:b4:0c:a7:fc:b8:a8:50:d8:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:34:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e8022432529c8c3cc6ab710244e5f035203e70a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1b:5c:f2:f5:30:33:d3:57:4a:e6:31:8f:d6:
39:3b:bc:9f:53:59:f6:76:68:ee:af:ba:9e:87:b1:
17:5d:8f:d2:d9:04:51:f8:79:c6:80:47:32:d8:e2:
53:2d:54:60:fa:b5:9e:67:30:33:74:9a:8e:0e:11:
86:d8:a3:33:a6:3d:6e:b3:fe:97:0d:a6:9b:3f:cf:
f5:0b:b4:40:c9:7f:28:ba:64:45:58:0f:a5:17:d8:
be:25:9e:da:f4:71:ec:60:13:fb:01:15:74:1c:d8:
1d:3a:27:0c:94:b3:ac:0c:fc:db:0f:69:20:49:ff:
d6:1f:51:8d:e3:69:ee:14:64:9a:ab:cc:d7:da:5a:
e2:5c:49:3a:5f:22:5a:fe:b4:1c:cc:56:04:9d:0f:
c8:a2:55:73:e6:66:e7:6d:66:79:e8:bb:fb:04:3a:
e8:f7:f8:5a:51:a2:c9:e9:f7:2f:70:e7:58:4f:c9:
b9:04:69:c1:c4:dc:67:b9:e3:7e:7b:cb:44:0b:e0:
b9:61:dc:6c:ec:ff:bc:e7:15:7a:88:e9:64:ca:18:
fc:a2:e9:9c:b0:7a:c2:67:47:42:28:4a:62:34:04:
1c:9f:38:95:c0:69:05:5f:f7:8d:8a:7d:6f:e2:b5:
14:5e:af:ab:ff:e4:40:b3:c2:11:1b:89:c3:a4:ce:
32:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:02:24:32:52:9C:8C:3C:C6:AB:71:02:44:E5:F0:35:20:3E:70:A1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1d29a0-da4b-41a1-b564-49cc67ba1b63/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1d29a0-da4b-41a1-b564-49cc67ba1b63/1/6AIkMlKcjDzGq3ECROXwNSA-cKE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.190.154.0/24
Signature Algorithm: sha256WithRSAEncryption
80:3d:99:b8:7b:79:20:30:39:fd:14:88:80:a9:f1:e0:ce:ef:
1f:bb:ce:cb:6f:dd:c3:24:34:80:58:e9:ec:41:48:37:ab:ec:
6a:d7:6c:d7:1f:74:76:6e:a1:70:63:c6:5e:3d:53:01:58:bb:
70:7a:f8:8f:75:0a:ee:6e:c7:1a:a4:13:9e:bd:9a:b1:0e:90:
d0:f4:0a:2d:28:65:a6:2a:1b:05:5b:12:4e:89:9e:bd:ce:44:
47:73:79:8d:28:85:96:8d:fc:b4:0e:94:3e:9d:5c:8b:cd:ae:
05:50:0f:e7:35:db:18:1d:6d:b2:9c:42:40:54:b3:d7:18:a8:
03:53:8f:46:63:9b:5c:52:17:aa:19:f8:e3:ce:08:13:12:36:
57:6a:fa:64:72:46:66:a5:90:9d:26:ad:b5:3a:ce:d4:cf:bb:
66:28:38:4b:60:10:91:a1:c8:bb:33:29:2c:31:93:08:c2:e4:
77:2d:8f:2f:13:09:d9:fc:93:4f:4b:57:cb:f6:46:3b:bd:64:
19:c2:cd:55:e8:57:63:af:c3:99:0f:76:f1:8f:5c:ff:73:3c:
4c:42:5a:c3:4f:99:cd:97:e5:51:ca:04:6d:bd:d9:e4:63:de:
96:74:47:60:a3:6a:b2:24:45:10:77:66:06:95:77:5f:3a:e8:
c8:35:98:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:20:42 2025 by rpki-client