Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/B7gNX0qckt2SpGBXGeCujRpiwEM.cer
File: B7gNX0qckt2SpGBXGeCujRpiwEM.cer (raw, json)
Hash identifier: N5pnxbqxeUg5bHhPQElXt6SHnRNGWv/YjcQvCs4XuSs=
Subject key identifier: 07:B8:0D:5F:4A:9C:92:DD:92:A4:60:57:19:E0:AE:8D:1A:62:C0:43
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B1B71209C344B590555065A43D73FD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:02 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.176.190.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:b7:12:09:c3:44:b5:90:55:50:65:a4:3d:73:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=07b80d5f4a9c92dd92a4605719e0ae8d1a62c043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e4:98:c4:bc:51:1d:ca:d1:f9:c8:fb:24:e4:
4a:cd:e5:ef:93:09:47:55:6e:3a:6b:a9:61:43:3b:
21:15:cf:e5:29:51:d1:09:97:0a:18:15:26:17:37:
97:c9:25:e6:fe:55:3a:5e:81:e7:2e:44:43:f7:63:
b6:26:83:0f:5b:9b:97:b0:82:44:e8:ae:c8:30:dc:
b5:db:ed:4e:96:51:63:f9:44:10:ce:c0:14:e0:9f:
0a:2a:00:74:a1:f3:34:4b:f1:77:80:18:45:f6:93:
be:66:b5:0a:cc:22:24:7d:57:49:c5:8c:df:5f:7f:
cc:c7:80:cf:d9:48:8c:c9:39:fa:aa:64:a0:5c:10:
b5:c2:c6:bd:d1:bc:09:f3:db:5c:10:d5:15:b4:6e:
a2:e6:be:9e:33:e7:1f:81:3e:a2:12:b0:75:e8:cf:
80:8a:fa:81:e9:10:db:28:cd:53:fa:46:7b:0c:eb:
54:d3:29:b5:ef:7e:17:df:b2:4b:ba:2c:f1:77:46:
c5:2e:20:d0:31:36:e6:89:1d:b8:25:9b:3e:c9:d5:
be:91:f8:d6:cd:ce:67:7a:7d:a7:d8:46:17:eb:10:
5c:23:bc:e7:b9:da:41:8d:57:bc:62:e8:b9:d4:58:
90:8f:25:b7:a2:99:be:1b:5f:04:f9:30:dc:5d:53:
dc:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B8:0D:5F:4A:9C:92:DD:92:A4:60:57:19:E0:AE:8D:1A:62:C0:43
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.176.190.0/24
Signature Algorithm: sha256WithRSAEncryption
92:18:30:47:c1:ef:04:92:81:b1:cf:0e:85:0a:b4:2c:08:bc:
26:b4:43:39:8c:ec:a0:f0:50:d4:9a:96:9c:ae:89:35:77:38:
13:ba:26:99:15:aa:68:e3:9f:06:61:81:d1:88:8e:20:75:af:
1f:69:5c:5a:fa:a6:96:8d:73:d0:4f:d9:bb:10:c4:0e:5f:a3:
e3:3f:c7:b2:04:56:b3:42:7f:e0:47:4e:f0:8f:a1:e5:fe:47:
7e:47:d3:a1:cc:1b:d7:a8:59:dc:83:2a:38:c9:2c:b0:7c:97:
86:e4:9b:b0:a8:12:e9:03:52:b6:97:71:41:e3:b8:36:db:61:
9d:e2:a5:5f:19:24:18:f4:0d:98:b8:9a:62:6c:01:8a:f6:5f:
fe:78:9d:31:a3:6b:11:98:1f:45:9f:09:6a:ae:9e:e0:dd:3e:
f6:54:c1:58:fe:20:db:ad:9a:5e:cb:93:fb:1c:e3:6e:32:3a:
45:23:04:6a:f1:0e:04:ec:af:7c:09:cd:47:d1:37:ac:6f:06:
7e:2d:af:f4:53:2e:77:ea:c6:79:00:6b:7c:7f:d6:9b:72:9b:
a8:b2:26:17:e9:89:de:e1:4f:8d:3b:23:33:7c:0f:3f:03:5e:
a1:b2:5e:49:14:b4:b4:9e:37:57:b0:0a:e7:90:02:a4:b7:06:
76:97:e9:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:30:36 2025 by rpki-client