Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6mfoTDX7Ff41IsnKLcf7OYV55fk.cer
File: 6mfoTDX7Ff41IsnKLcf7OYV55fk.cer (raw, json)
Hash identifier: iWxIEBgAc0vCA+eQpn0QCoklKCuFCR3MI1eRm9tjXHI=
Subject key identifier: EA:67:E8:4C:35:FB:15:FE:35:22:C9:CA:2D:C7:FB:39:85:79:E5:F9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856FAF9102975FE019534CB8ED6D22AD24
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/93/859aaa-da65-4116-8b90-2802131004aa/1/6mfoTDX7Ff41IsnKLcf7OYV55fk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/93/859aaa-da65-4116-8b90-2802131004aa/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 23:34:15 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 5.172.178.0/24
IP: 2a11:4900::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:af:91:02:97:5f:e0:19:53:4c:b8:ed:6d:22:ad:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:34:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea67e84c35fb15fe3522c9ca2dc7fb398579e5f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:3a:c5:d6:48:1b:20:7b:f3:27:0f:a4:7e:17:
13:53:95:ec:63:6d:d8:56:22:48:d4:6c:ab:ce:5a:
23:a6:20:9c:8e:f9:fa:23:52:7b:d4:8f:2f:bc:bd:
c8:8e:76:ad:a4:b8:52:38:42:80:49:fc:b4:d2:68:
60:6a:00:b4:61:50:76:54:b9:0e:b0:4c:53:a7:04:
fe:b0:43:58:5d:59:e5:f2:76:5e:2e:23:93:e3:53:
e5:55:b9:e6:2a:bd:87:1f:de:84:4c:44:e4:27:f3:
26:d3:1f:dc:61:72:4e:9d:84:04:38:e1:9c:e8:d9:
45:6f:23:95:49:38:9f:7d:4e:b1:b4:b5:86:ec:e7:
59:25:60:63:89:c9:53:a6:6f:4c:70:55:08:e2:dd:
1e:45:2b:54:16:4d:ec:43:4b:8e:2a:9a:73:d4:e1:
36:40:5f:f4:5e:ff:db:d7:cf:d4:a9:c9:67:82:99:
d8:9d:5c:cd:5d:47:6f:4e:8a:5c:7e:1c:96:33:ef:
9f:d0:76:4b:47:f8:39:2c:3d:b7:64:bd:52:f4:88:
4a:82:68:2b:bd:66:ab:06:f4:bf:ba:24:a7:d1:b2:
2d:f2:e9:41:fa:f2:7a:c0:e6:ce:08:00:70:11:2b:
5a:56:bd:c9:2d:88:38:a8:56:39:76:1b:11:f0:62:
7a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:67:E8:4C:35:FB:15:FE:35:22:C9:CA:2D:C7:FB:39:85:79:E5:F9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/859aaa-da65-4116-8b90-2802131004aa/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/859aaa-da65-4116-8b90-2802131004aa/1/6mfoTDX7Ff41IsnKLcf7OYV55fk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.178.0/24
IPv6:
2a11:4900::/29
Signature Algorithm: sha256WithRSAEncryption
82:d5:e5:64:84:f8:0a:65:2b:3b:d3:90:07:ff:95:ce:5c:ff:
9c:3c:d4:0b:53:96:72:6f:91:21:5d:c4:33:a2:98:2f:ff:8f:
61:0b:b8:5e:92:41:c3:23:37:25:15:9b:ac:b7:32:62:65:47:
4d:f0:12:10:d7:3d:e0:c8:b8:d8:7f:ef:d3:a2:fd:0d:6c:f6:
45:fe:b3:80:23:af:37:2d:f7:63:2e:ab:39:b6:e5:36:8b:24:
c6:09:66:f0:26:61:38:d4:28:4a:e3:5d:4c:be:81:1e:e3:40:
bc:4b:bf:6c:3c:b5:a1:ea:5b:b0:c9:86:e6:71:2f:50:d0:9b:
11:e7:5b:f8:fe:f0:e0:87:6e:b2:33:ff:11:28:13:29:e4:c7:
4d:36:b5:3c:78:66:25:08:60:cf:41:6e:64:71:c4:75:95:51:
ad:dd:2b:fb:1f:f8:5d:e3:d2:11:44:91:99:21:40:df:f5:1b:
3a:44:84:18:93:1d:57:5c:32:88:a2:46:11:70:94:06:fd:15:
a7:ca:71:40:ef:cf:3a:ef:86:b2:e4:01:0c:86:c4:88:bc:0c:
c2:95:98:c6:68:96:1e:43:dc:4e:5b:c7:f3:9b:60:68:a3:a4:
32:df:8b:fb:8e:79:24:c4:11:19:a5:a0:21:42:63:92:5a:6b:
da:0c:23:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:11:53 2025 by rpki-client