Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82BUCSXbyxoJ-2XzspAD1o8j3ms.cer
File: 82BUCSXbyxoJ-2XzspAD1o8j3ms.cer (raw, json)
Hash identifier: V+w/49cmcBJq/KuCpvzEgwf9S7GAQ75ifrZEansVFHo=
Subject key identifier: F3:60:54:09:25:DB:CB:1A:09:FB:65:F3:B2:90:03:D6:8F:23:DE:6B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421440E838262867784A7CF971C628F69
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:15 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.169.80.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:0e:83:82:62:86:77:84:a7:cf:97:1c:62:8f:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f360540925dbcb1a09fb65f3b29003d68f23de6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ed:dc:9b:de:78:3e:61:14:db:42:4c:aa:a1:
7a:0a:5d:43:fc:2e:f8:fc:18:b0:8a:5f:ae:30:bd:
da:f6:bc:e1:29:8a:cd:41:3a:05:4c:57:c3:4a:38:
0a:0b:1c:a5:ab:29:3b:8f:b2:98:61:f4:31:5f:a4:
6c:9a:2f:1d:c2:84:28:87:ef:d0:81:f4:fc:3d:4a:
05:1a:ef:e9:07:d3:36:b6:9c:98:6c:f4:96:d5:39:
e2:d5:8a:4f:ed:54:da:e1:29:c9:ad:9c:19:a0:69:
14:f0:3d:91:9f:0f:7c:11:c3:5c:b0:3e:6f:13:9a:
41:80:3a:17:3a:95:34:10:b5:03:6b:4f:7c:8d:88:
1c:ff:4b:58:6c:d6:3a:f0:10:19:47:58:13:2e:0d:
d8:98:90:69:bc:0d:74:fa:16:da:ea:9e:27:ee:a6:
82:05:16:08:42:4e:d9:84:03:4e:6a:26:98:f9:2a:
c3:b8:0b:70:cd:32:9f:f2:1b:49:db:a9:54:b1:8a:
03:6b:93:73:42:0b:bd:4d:5b:e0:1d:1a:e4:4d:bd:
ca:0e:f8:59:6d:6b:48:30:35:28:a0:55:94:34:6c:
70:1e:69:84:e7:c4:fe:23:cc:cb:cd:ae:1b:6f:40:
3f:b7:be:78:cb:ab:0b:16:12:d3:fd:bd:8a:73:9d:
8c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:60:54:09:25:DB:CB:1A:09:FB:65:F3:B2:90:03:D6:8F:23:DE:6B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4dae7f-ba0e-4277-9e92-b4f007ef7e86/1/82BUCSXbyxoJ-2XzspAD1o8j3ms.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.169.80.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:85:2e:ef:56:d8:bb:35:af:89:fc:d2:f9:49:11:1d:4b:0e:
a8:df:72:6d:c1:d0:17:27:b6:0c:79:a5:68:39:b3:79:ca:5a:
29:88:8b:ef:1a:33:a8:01:7b:62:5e:e4:13:69:c8:89:a9:ce:
9e:46:2a:77:25:50:8c:13:6b:1b:6b:87:5b:34:5d:8e:1e:30:
12:68:55:cf:60:db:78:bc:f1:7c:59:c7:d3:04:05:02:67:18:
35:26:4d:00:d8:42:4d:c7:95:74:29:14:32:2a:cc:d4:bd:da:
70:14:4d:47:92:48:d6:d8:32:07:33:15:82:83:b3:9e:e4:66:
b5:14:f8:72:72:2c:aa:ec:dc:b7:55:9c:ba:b9:8f:92:b5:ec:
17:7e:43:d5:66:6f:a3:6d:3d:eb:9f:67:32:48:8b:cc:8d:a1:
b4:a4:2c:52:6a:b6:5b:6d:ca:0c:83:76:04:fd:bc:5b:3b:9c:
f4:dd:df:7b:03:0f:08:f8:f7:39:ed:a4:e7:8c:20:4b:eb:c8:
61:66:44:9a:e2:f4:79:26:09:4c:54:79:b6:e9:54:11:a5:d3:
80:fb:a8:6d:7c:a3:b9:62:67:46:3b:f7:2d:c8:49:65:99:5a:
22:6c:b4:f0:fa:49:38:40:46:8e:57:01:04:e3:75:65:15:d1:
2e:5f:df:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:13:07 2025 by rpki-client