Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CGC3hKxPNYW5ESbLy4zz994Z0e0.cer
File: CGC3hKxPNYW5ESbLy4zz994Z0e0.cer (raw, json)
Hash identifier: SgoJfb8OWBSo05uzMSSv2TikMuvPcvpYd1hpuCnP0Rk=
Subject key identifier: 08:60:B7:84:AC:4F:35:85:B9:11:26:CB:CB:8C:F3:F7:DE:19:D1:ED
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: ABB43D0642
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3e/48f857-a436-4e42-b5c5-9491dc6c69b5/1/CGC3hKxPNYW5ESbLy4zz994Z0e0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3e/48f857-a436-4e42-b5c5-9491dc6c69b5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 10 Jan 2022 15:27:40 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 2001:678:f30::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 737463305794 (0xabb43d0642)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 10 15:27:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0860b784ac4f3585b91126cbcb8cf3f7de19d1ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:11:e9:83:4d:8a:51:0d:b2:20:65:17:72:47:
d6:b5:0c:79:75:80:21:34:f3:bd:a0:4f:86:6f:02:
ef:26:b4:77:c5:aa:c3:25:de:6a:59:99:a6:e6:53:
81:52:7d:c8:cb:06:33:3e:19:c5:09:8d:df:72:22:
cd:ae:27:7d:16:dc:74:0f:8e:39:c7:1b:f5:af:31:
e6:c2:e8:98:e7:df:ee:ad:20:80:cc:8b:c6:bb:b5:
90:64:7d:1b:a0:1a:e5:dc:2b:95:6e:ce:37:57:6a:
0c:75:ef:59:b0:ce:e1:7d:fe:3b:10:17:ed:36:56:
b4:97:e7:3f:c8:3e:a2:0b:cc:50:fa:c2:00:fc:26:
4a:fb:76:a1:06:5c:0e:dd:b3:45:59:a6:c0:b4:da:
59:86:28:4b:bb:6c:78:9d:2f:b8:ce:b2:7d:6b:25:
cd:36:87:6d:29:a8:ff:92:17:c4:be:be:da:64:02:
8a:96:6c:5b:91:f5:de:ab:77:71:ef:18:16:d5:d5:
ff:df:21:45:2b:2e:7c:64:45:2d:ac:26:9f:88:e3:
72:7b:97:d7:82:bf:27:af:50:ba:f6:27:f7:7e:13:
f1:36:12:b4:7e:b6:5b:05:04:f0:1f:40:91:e2:18:
52:6c:d9:14:08:dc:6a:85:96:e1:71:49:f4:d1:8d:
02:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:60:B7:84:AC:4F:35:85:B9:11:26:CB:CB:8C:F3:F7:DE:19:D1:ED
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/48f857-a436-4e42-b5c5-9491dc6c69b5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/48f857-a436-4e42-b5c5-9491dc6c69b5/1/CGC3hKxPNYW5ESbLy4zz994Z0e0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:f30::/48
Signature Algorithm: sha256WithRSAEncryption
44:91:16:ee:a8:23:6b:c6:5c:c9:dc:3e:d1:7c:58:5e:72:87:
fa:96:6b:7b:0c:fe:04:1f:3f:c6:fb:be:5b:c4:71:30:cc:4b:
d6:ab:09:43:a4:c8:77:4a:ac:83:1c:e0:49:5b:9e:58:7b:03:
c7:4a:27:0c:5c:d7:ef:dd:75:a3:67:ef:59:dd:a9:de:0d:36:
5b:38:00:04:22:6e:8e:5a:75:9a:8a:b7:8e:03:9d:29:eb:65:
56:f3:7c:e7:00:31:57:63:f5:b4:62:a3:ad:6b:32:c8:05:81:
65:e4:bd:3b:8d:16:3e:7e:b4:cb:b2:89:9c:82:94:48:4a:a0:
f7:fc:3b:08:42:42:1e:04:7a:fa:2a:d3:1a:8d:cc:69:bc:53:
06:70:81:15:52:95:a4:72:80:6f:ab:70:1f:77:7f:f7:f2:e3:
12:de:44:02:c1:cc:5f:91:31:8a:56:ca:22:cc:2c:c5:cb:fd:
ff:ec:d8:e0:ad:43:74:ba:89:91:ac:bc:c2:c4:bd:e5:6b:b5:
48:5e:01:b5:b3:06:27:04:4a:5b:1f:ab:c7:76:06:0f:ec:81:
98:60:1c:3c:71:bc:ea:f1:25:7c:7e:63:58:4f:1e:1a:2e:30:
ba:3e:cf:12:c1:fb:f5:5e:99:ec:11:88:2b:63:f5:25:a1:4e:
c1:92:dd:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:45:21 2025 by rpki-client