Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer
File: BIr2Zb-LGGtwIgdZ0mxXj0C18-M.cer (raw, json)
Hash identifier: vreYErEQp+WwNx3QRE4IcfTmcmUtW1bBkUTObb6s7v8=
Subject key identifier: 04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420684077E0A7F5997F23A65997BA9178
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:48:10 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 31.6.0.0/18
IP: 178.208.160.0/19
IP: 185.29.164.0/22
IP: 185.150.136.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:40:77:e0:a7:f5:99:7f:23:a6:59:97:ba:91:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=048af665bf8b186b70220759d26c578f40b5f3e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8d:46:8d:42:10:d4:18:ad:02:86:ba:66:6b:
99:3b:0e:0b:1a:f7:58:2e:03:2e:83:68:bf:8e:35:
d3:dc:77:5f:98:9c:e5:4f:7d:7d:df:f5:d2:24:a3:
d0:37:ae:78:ee:8d:86:05:e5:7f:95:8b:0c:c2:5a:
51:ce:06:08:0d:8f:4e:e5:d2:2c:7b:66:d2:da:79:
56:1c:12:ff:0a:d9:a6:33:a5:52:d1:20:4f:19:91:
59:26:1f:25:78:a4:8c:d7:43:ce:3b:cc:c4:51:3c:
ea:a8:52:36:e9:a4:4a:9e:0a:c6:c8:b7:92:88:8c:
a9:7e:f0:08:18:d7:c7:e5:32:b5:31:09:79:18:bf:
1b:85:80:5a:54:75:05:ed:ac:a4:a2:d0:a2:63:02:
ff:49:87:34:b8:b6:fb:e9:ff:e3:52:08:10:77:95:
c8:6a:c4:2c:40:47:66:e9:d2:81:7b:a8:d9:81:e5:
6d:a2:5c:b7:f4:36:a3:ff:4f:40:62:86:a3:8b:81:
d1:e3:ab:59:e5:6e:98:38:bb:eb:32:de:c0:d2:ef:
53:7b:50:3d:b0:52:e4:e3:78:bd:30:74:7a:a0:24:
36:d3:93:46:43:6b:6d:0c:17:7c:8d:45:b7:14:d1:
a8:d1:46:5a:8c:db:bc:87:5d:4c:a3:ee:51:11:f2:
0d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:8A:F6:65:BF:8B:18:6B:70:22:07:59:D2:6C:57:8F:40:B5:F3:E3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/82a9bf5b-39c1-4050-b073-48075b861d87/0/048AF665BF8B186B70220759D26C578F40B5F3E3.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.6.0.0/18
178.208.160.0/19
185.29.164.0/22
185.150.136.0/22
Signature Algorithm: sha256WithRSAEncryption
93:78:3a:75:3a:92:e1:38:3b:2c:58:81:0a:18:de:4a:dd:a2:
45:1b:b0:c1:00:af:60:6f:f5:b8:ee:bd:2e:17:cc:c2:2c:5e:
44:40:70:ad:41:64:0b:6d:b1:be:ef:b6:be:7b:bb:2f:a5:b8:
e2:da:b9:05:22:ff:59:13:1d:68:ce:93:6d:f4:c8:6b:e5:07:
45:57:97:e3:50:9f:27:29:8d:b5:54:f5:17:a9:1b:25:e4:05:
ac:2e:08:55:bb:a9:b8:53:7c:6f:89:2d:85:e6:c8:d4:70:31:
06:09:33:2b:40:fb:d0:41:05:04:03:97:45:c1:64:35:b9:69:
51:ff:b1:c9:77:51:bc:7c:fa:1f:05:2d:28:1c:c8:35:49:d9:
f9:5d:56:97:cd:d6:36:2c:63:05:5e:c9:63:c3:ec:17:94:84:
00:0e:63:54:94:2d:24:07:49:3b:a6:60:6f:61:3a:28:88:df:
9b:da:45:89:e7:be:b4:8b:e5:47:ce:25:0a:4c:48:a5:6e:6b:
66:41:54:7d:71:f0:87:fd:dc:13:cc:fc:bf:68:34:11:16:d6:
6b:e1:31:ce:88:82:df:1c:e3:5a:9b:6a:28:03:1b:c9:66:b6:
a5:04:fd:83:7d:c0:87:73:1b:9b:b6:29:22:e1:1e:63:46:b8:
9e:67:26:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:51:40 2025 by rpki-client