Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/B1u0EyX9YF4guvwvBllFQ57AX-A.cer
File: B1u0EyX9YF4guvwvBllFQ57AX-A.cer (raw, json)
Hash identifier: VMx49/zXk7fCSoJhZtEHF1XXiWeF/sYeGIgWHKZVACE=
Subject key identifier: 07:5B:B4:13:25:FD:60:5E:20:BA:FC:2F:06:59:45:43:9E:C0:5F:E0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019428284430C6F6114401D29FD555E1AE27
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/58/985a27-0818-4ca5-a377-061f5cc6ad52/1/B1u0EyX9YF4guvwvBllFQ57AX-A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/58/985a27-0818-4ca5-a377-061f5cc6ad52/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 17:55:15 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 212.46.63.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:28:44:30:c6:f6:11:44:01:d2:9f:d5:55:e1:ae:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 17:55:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=075bb41325fd605e20bafc2f065945439ec05fe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a7:ba:32:c3:d9:1e:8d:dd:c0:9c:bb:83:02:
e4:b2:14:60:dd:de:c1:ac:b6:13:44:5a:c0:a1:f2:
ce:70:a1:4d:f2:e8:27:1f:30:2e:01:10:d2:00:71:
57:ab:f0:9c:73:9a:78:71:33:1b:87:7c:c3:f2:28:
22:11:30:69:53:23:1c:b1:9e:fc:83:69:47:ce:f1:
81:85:2b:29:94:56:2c:f1:56:23:1d:df:b0:a4:db:
50:00:f2:81:66:d3:7f:ed:30:05:09:e8:ca:16:9d:
8a:bf:b3:32:3a:aa:f6:47:3d:b9:70:d3:3c:a8:7a:
d4:bf:bb:03:85:55:3b:d8:ca:41:57:a4:39:a1:5a:
3e:1d:33:db:38:d9:78:3c:fd:6a:3f:b1:d5:4c:f5:
a6:69:46:af:30:bb:b6:f8:63:a1:36:7c:26:0a:f3:
9d:28:ac:5e:61:a8:37:5e:67:04:e7:fc:6c:34:e1:
28:e7:88:a3:5b:f0:07:ca:64:53:55:fe:70:b7:c1:
04:b0:79:5d:99:e9:71:db:db:19:23:0d:da:0e:fe:
a5:3e:f1:01:e1:52:66:e4:08:da:b4:d8:22:6f:98:
cb:13:e4:1c:03:74:5e:20:e7:0c:82:ae:d4:bc:31:
6f:7e:3e:3c:aa:5d:4d:16:f9:6d:2b:15:30:d0:e4:
0f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:5B:B4:13:25:FD:60:5E:20:BA:FC:2F:06:59:45:43:9E:C0:5F:E0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/985a27-0818-4ca5-a377-061f5cc6ad52/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/985a27-0818-4ca5-a377-061f5cc6ad52/1/B1u0EyX9YF4guvwvBllFQ57AX-A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.46.63.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:77:c8:18:a9:3f:28:48:c5:ad:39:1f:6c:db:19:ae:fd:b7:
03:84:63:1b:57:f4:c6:02:b7:4c:6a:c7:63:71:b4:6f:4c:47:
78:d4:58:f7:3e:05:67:91:eb:d5:55:ab:90:9e:00:4f:da:db:
6b:14:0e:54:fe:6b:ad:d1:e1:64:f2:b3:74:29:0e:ff:cb:78:
3d:c5:8b:f1:a0:a2:a3:a7:a4:8a:98:6f:6f:2b:5e:d2:06:80:
f9:ee:0d:78:83:70:53:10:ba:bc:18:50:dd:4d:bd:1a:5a:73:
8f:64:91:81:b9:e9:98:ce:0a:84:30:df:74:a8:bb:bb:d6:59:
eb:37:ed:eb:a0:b2:c8:d1:e3:c1:7c:10:50:69:de:77:ad:c5:
6b:ea:d9:65:54:62:5d:95:ce:f9:bd:18:0b:78:22:46:82:a3:
13:67:6f:ec:f7:16:45:b9:1e:91:4c:b5:59:9f:6c:4a:aa:a5:
03:ef:66:5d:8c:8b:48:6e:92:d4:8b:25:67:23:03:c0:ec:f7:
46:51:11:49:ce:a8:b4:b0:e1:5d:aa:5d:86:21:6d:d5:59:da:
3b:b4:ab:40:82:ae:94:dc:26:90:81:a7:8f:d8:70:70:a6:c1:
5b:c2:f8:5e:40:5d:0a:0d:82:0b:b9:23:fa:0d:61:92:47:3d:
f3:38:69:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:17:41 2025 by rpki-client