Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CVi1S_7piWxK2n3Bizt_lxnaBGs.cer
File: CVi1S_7piWxK2n3Bizt_lxnaBGs.cer (raw, json)
Hash identifier: aXqh4vlb2zaAQpqcRXviM9CkBwv1RdQgr8t4u6ui9dU=
Subject key identifier: 09:58:B5:4B:FE:E9:89:6C:4A:DA:7D:C1:8B:3B:7F:97:19:DA:04:6B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942143D69F41A3A57DA16E0A2DCA7323D6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:01 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.0.237.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:d6:9f:41:a3:a5:7d:a1:6e:0a:2d:ca:73:23:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0958b54bfee9896c4ada7dc18b3b7f9719da046b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:eb:32:e5:02:2d:3f:f4:d4:a3:2f:cc:8d:97:
60:5d:d2:69:3d:8a:41:b2:30:c6:0b:07:5a:77:18:
7a:61:6a:76:65:82:e9:47:8d:d4:6f:7c:18:40:33:
9b:9b:a1:c9:29:6d:96:f6:c6:dc:21:fd:73:63:b4:
2d:67:ee:7e:2e:b0:e1:01:21:c1:da:4a:d4:f7:e6:
2e:95:cf:bb:e0:9b:25:c1:e6:cf:f5:72:c1:af:5a:
70:36:f4:f2:08:e5:83:52:53:af:20:23:b9:50:2a:
8b:34:c6:f1:30:09:9b:7d:9a:79:69:3c:a2:ef:ce:
51:22:b3:48:a4:cd:b4:6b:b1:b9:d9:09:c4:1e:55:
cb:1f:a6:0d:ce:be:49:97:bf:49:bb:8c:a4:5e:fe:
1f:fd:e3:be:93:50:87:e8:30:80:be:eb:29:d1:84:
81:62:a3:06:77:59:36:4a:96:61:3f:38:c8:25:d2:
c2:7b:d9:ea:8a:4f:5a:75:a0:37:bd:64:3d:4e:af:
5e:cb:c4:94:38:88:17:0d:47:82:fa:44:d7:99:81:
a0:ef:73:a5:ff:2a:c2:c5:49:70:19:b7:40:18:39:
10:0a:52:dd:97:44:54:ab:d1:f0:fe:87:85:d9:7d:
55:31:75:18:c6:5c:94:53:fb:ac:f8:a5:7c:fc:4e:
17:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:58:B5:4B:FE:E9:89:6C:4A:DA:7D:C1:8B:3B:7F:97:19:DA:04:6B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a60f86-8b94-410a-bfd1-ff4c7183024f/1/CVi1S_7piWxK2n3Bizt_lxnaBGs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.237.0/24
Signature Algorithm: sha256WithRSAEncryption
50:a5:ad:2e:9a:5b:fa:db:35:db:7b:71:74:04:14:d6:b5:20:
53:15:86:a5:c1:1f:0d:7d:b2:c6:60:bb:b0:df:8f:b8:2f:11:
ef:fb:31:7c:46:f1:35:98:10:29:f9:18:46:68:51:a7:93:91:
12:33:7a:a1:9e:2d:57:10:ec:f4:61:c7:0b:7f:9f:c3:4d:d4:
0e:78:2a:11:55:f9:6c:2d:a7:cf:8f:1e:b9:c8:99:c8:4e:ca:
69:8e:74:45:fc:69:c3:60:f2:ff:ec:09:a9:2e:d9:d7:62:a7:
27:fc:43:79:37:bd:51:05:1b:de:b9:5b:34:72:fd:53:08:5a:
1f:fb:59:57:af:b9:6d:25:13:59:49:26:01:d1:c9:22:d2:b3:
21:5e:5f:16:82:6a:e6:3a:96:1b:48:ed:41:f9:ee:28:09:e3:
8e:6f:ac:39:a3:17:0c:65:ba:3b:1e:09:b0:35:6b:e4:70:44:
02:4e:8b:17:68:1d:48:d6:eb:74:65:4b:7f:13:30:5e:63:f5:
f4:69:05:48:94:ef:75:3b:b8:da:dc:dd:9d:4d:cd:75:64:d4:
2e:95:1c:d8:be:91:8b:8b:1e:5a:17:ac:99:45:bd:fb:77:cd:
df:a9:cc:79:f0:a9:5f:d1:c4:fb:ad:49:1f:86:5c:b7:49:ed:
6e:c8:3c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:44:40 2025 by rpki-client