Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7XPCZgmxsh2HpoEwLvLSb8CgD6M.cer
File: 7XPCZgmxsh2HpoEwLvLSb8CgD6M.cer (raw, json)
Hash identifier: uZMwHad/AVLHkiq6iCeNg62mLKgj+5PGcK9/S+hnaac=
Subject key identifier: ED:73:C2:66:09:B1:B2:1D:87:A6:81:30:2E:F2:D2:6F:C0:A0:0F:A3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194236A3BA8F02B2447071070418827A0E6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6e/c8ea46-9dc2-4036-9096-4cd77b38f1b1/1/7XPCZgmxsh2HpoEwLvLSb8CgD6M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6e/c8ea46-9dc2-4036-9096-4cd77b38f1b1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:49:12 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.8.50.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:3b:a8:f0:2b:24:47:07:10:70:41:88:27:a0:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ed73c26609b1b21d87a681302ef2d26fc0a00fa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:82:c0:a1:8d:44:ac:dc:f0:dd:34:d5:b1:af:
19:2b:a3:5a:e5:4c:ff:09:66:60:34:51:29:23:f9:
c6:3c:1d:92:b6:71:31:07:d7:d4:b0:c8:4d:77:de:
14:70:61:69:bb:b9:69:6e:5c:40:44:da:6f:41:ac:
6e:9d:76:37:d9:11:aa:31:df:d2:2d:1e:27:70:37:
72:81:5e:92:be:32:73:9e:ee:bb:65:d2:86:b3:f1:
83:a9:7a:0c:9b:75:9a:79:b3:fb:19:6f:b2:0e:58:
d2:61:77:0d:39:1a:b8:31:b8:9b:a2:7d:21:5a:ae:
2f:d2:a6:30:f6:ed:51:24:ec:a5:73:8e:bf:20:56:
e0:aa:c4:29:57:f5:b2:14:f6:c3:b0:37:54:b6:02:
35:4d:88:7a:4a:51:fc:1d:94:e3:74:b5:f5:27:85:
0f:98:b2:6a:36:8d:bf:87:e6:84:29:43:61:51:19:
13:bf:31:a4:4a:77:dd:3c:c9:f4:4d:d7:99:34:20:
cd:54:7f:f8:fb:b0:17:49:98:00:22:86:d8:b4:0b:
34:b3:31:46:77:db:94:ce:df:d4:bf:49:e9:0d:48:
86:86:9f:2b:cf:1f:f6:c1:20:9f:7a:94:f5:61:43:
a8:fe:d2:72:86:9d:e4:df:d7:87:29:a9:ca:9c:a9:
3d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:73:C2:66:09:B1:B2:1D:87:A6:81:30:2E:F2:D2:6F:C0:A0:0F:A3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c8ea46-9dc2-4036-9096-4cd77b38f1b1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c8ea46-9dc2-4036-9096-4cd77b38f1b1/1/7XPCZgmxsh2HpoEwLvLSb8CgD6M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.8.50.0/24
Signature Algorithm: sha256WithRSAEncryption
33:84:cd:75:cb:de:c2:ed:3a:b6:79:34:fe:0f:06:96:dd:f2:
87:8c:5b:70:ef:2a:e2:9b:e1:e2:5d:df:95:2d:3f:be:14:c2:
fc:d9:eb:3d:93:8c:27:d4:3e:93:9c:6c:22:5f:7f:cd:d6:5c:
ba:56:3d:55:2a:f8:6e:34:68:19:2d:ca:86:48:e9:0a:ae:ac:
5c:43:48:fd:fd:65:39:35:7d:06:d6:1f:ff:fb:fa:74:d4:f6:
a6:2c:97:9e:a9:fd:1c:98:8d:dd:ba:9a:8e:a0:73:62:0e:ac:
10:ff:ef:4a:41:e5:dd:4a:95:68:68:b3:d2:cc:0e:20:99:a9:
9d:0e:db:03:ef:16:92:bf:29:da:8f:f3:d4:61:51:fe:87:df:
29:ea:74:1e:e7:d4:0f:d8:fe:54:45:4e:df:e9:56:37:ca:9e:
0b:30:bd:1e:59:5c:95:cb:b5:6b:7c:ff:9a:4f:82:a3:7e:da:
ff:d1:d6:2c:83:25:2d:d2:cd:ff:75:b8:fd:6b:0b:b7:8d:79:
56:3d:78:23:7f:47:46:10:ea:3a:31:97:c2:d0:71:fa:dc:32:
0e:83:bf:3f:26:4b:ed:33:01:68:65:08:35:f7:61:af:6e:1f:
1e:81:cf:59:c8:ab:2b:d1:9b:dc:36:76:07:85:12:4f:30:a1:
55:a1:1f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:28:07 2025 by rpki-client