Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AaKifmUDOkGN6jkmPGn7Ikke1V8.cer
File: AaKifmUDOkGN6jkmPGn7Ikke1V8.cer (raw, json)
Hash identifier: 0z6rkz8AJWIZWlnfrzx7OMx90mTUkz2nQrEdlGReR+Y=
Subject key identifier: 01:A2:A2:7E:65:03:3A:41:8D:EA:39:26:3C:69:FB:22:49:1E:D5:5F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A5D003BFA3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/44/77ba29-9cb4-48cf-a661-50e3fd66271d/1/AaKifmUDOkGN6jkmPGn7Ikke1V8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/44/77ba29-9cb4-48cf-a661-50e3fd66271d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 11:54:25 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.158.156.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 712159510435 (0xa5d003bfa3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:54:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=01a2a27e65033a418dea39263c69fb22491ed55f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d7:f9:2f:5b:a5:f9:6d:f4:a4:c0:13:9a:7c:
9d:0f:d9:55:9c:31:f1:86:3c:43:25:88:98:e5:7a:
ad:dd:69:cc:c0:76:5a:68:29:02:a6:b5:fb:a0:e8:
42:d0:f3:bb:d3:88:2f:f5:6e:2b:e4:26:17:f3:ca:
31:87:90:c5:98:d8:f1:f8:11:ba:09:92:84:6a:36:
49:10:64:ce:fd:d2:d8:25:2a:3d:9f:32:93:94:0c:
d2:14:af:20:82:cb:3a:cf:28:56:e8:13:19:ac:7c:
1b:f0:56:19:27:55:1e:d3:73:0f:d6:3c:30:2f:17:
af:50:26:b3:cc:1e:0e:49:75:c4:a1:f4:2e:8c:49:
d7:ac:61:19:9e:8f:65:fc:92:43:3c:16:97:ba:0d:
a8:48:14:16:7d:b2:4e:1e:4e:a4:3e:55:86:b6:b2:
74:2f:be:56:c6:f9:36:d3:b2:ad:52:09:db:cc:0e:
dc:2f:5e:94:75:9d:36:9e:69:bd:5f:4c:6b:1f:7b:
a7:6c:79:ab:14:4b:24:af:74:0c:7b:ff:aa:7a:af:
66:b6:8c:7d:dd:9b:a4:11:b4:a6:f1:5a:ea:41:83:
28:fb:9f:b8:33:f8:a4:df:66:07:7d:a8:a4:e9:d3:
9c:cf:45:61:51:28:3e:d1:45:9f:3d:49:52:89:db:
d1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:A2:A2:7E:65:03:3A:41:8D:EA:39:26:3C:69:FB:22:49:1E:D5:5F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/77ba29-9cb4-48cf-a661-50e3fd66271d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/77ba29-9cb4-48cf-a661-50e3fd66271d/1/AaKifmUDOkGN6jkmPGn7Ikke1V8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.156.0/22
Signature Algorithm: sha256WithRSAEncryption
07:06:47:5f:22:76:c1:db:de:d9:ce:88:d8:5c:d4:8d:2d:c7:
d8:31:a3:23:11:3f:64:be:92:96:f8:6a:30:fb:23:33:ee:3e:
c6:68:b3:12:63:48:57:9e:ef:93:62:96:05:e1:e7:d9:22:9b:
c5:e3:82:fc:28:46:7c:f4:65:59:a5:9d:2d:81:48:b7:e8:c4:
bc:3b:e7:83:a5:2d:a8:7e:2d:47:98:ff:70:8d:c7:33:91:c3:
83:80:82:05:fe:c3:a8:0b:ce:b2:99:05:ab:9c:cb:e2:d0:02:
80:a8:cc:e0:78:ce:35:f8:ce:9d:1c:8f:3e:45:a1:47:81:e1:
02:23:9a:87:67:b3:ff:d7:f4:87:a7:02:00:d4:19:8a:f5:66:
41:83:51:83:ea:08:fc:0c:37:09:93:ea:16:99:96:73:ea:ef:
8f:fc:48:e5:54:45:cc:ea:3e:f0:34:da:b9:9f:82:da:fe:c7:
1f:f2:c6:bb:36:00:8e:6f:69:25:de:6e:74:72:13:49:15:27:
78:ab:21:db:7b:22:1f:2a:96:4c:70:c6:d8:0f:ac:76:42:17:
97:a6:b2:96:c5:2b:b9:28:98:ce:46:82:52:fc:d8:e4:42:08:
98:cb:4d:0a:1f:1f:a8:d2:70:85:7c:00:ea:78:0f:6e:ef:1a:
0b:36:d1:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:54:32 2025 by rpki-client