Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CgZJmLt4Ll-8utrbmsJpC5w5gRg.cer
File: CgZJmLt4Ll-8utrbmsJpC5w5gRg.cer (raw, json)
Hash identifier: CYGdn08OynYPQaoeIw9jj4EoRh5Yssk+gGGnNCJh1lk=
Subject key identifier: 0A:06:49:98:BB:78:2E:5F:BC:BA:DA:DB:9A:C2:69:0B:9C:39:81:18
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856D1B5D4EC8E80AD9EE43FA1E4A837893
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/91/8fb472-f992-49b6-9850-bc1c21a4dc48/1/CgZJmLt4Ll-8utrbmsJpC5w5gRg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/91/8fb472-f992-49b6-9850-bc1c21a4dc48/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 11:33:08 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 194.79.252.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:1b:5d:4e:c8:e8:0a:d9:ee:43:fa:1e:4a:83:78:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:33:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a064998bb782e5fbcbadadb9ac2690b9c398118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:81:f2:68:2c:05:ce:f3:93:88:b8:29:44:18:
3c:57:68:fc:46:a8:87:a3:c1:12:92:b9:9f:7a:2c:
c0:c7:ef:b5:c2:0e:fc:eb:71:e3:f7:d7:8f:17:d6:
bf:53:34:e7:16:bb:1b:26:92:dd:a3:e9:67:f8:d2:
8d:ad:1b:c8:36:ba:b7:3d:51:da:87:3f:31:74:df:
69:13:53:0e:5e:2e:b1:69:42:cf:f5:e9:6e:29:6f:
af:0a:a2:37:47:3c:37:b7:4d:94:17:b1:0f:25:15:
d1:05:cf:6c:b2:06:ef:71:c6:51:58:96:b2:94:e0:
f7:59:06:92:14:3a:83:65:c5:0b:7d:3f:c2:c7:84:
85:75:36:33:b5:c1:3e:95:d0:ab:21:1d:d4:f6:88:
09:b4:34:78:98:6f:e9:1b:4f:51:6f:57:11:65:9c:
e2:e8:bd:d3:fa:00:6b:92:db:d0:78:60:2f:ed:61:
b1:40:84:a1:46:9b:4e:0c:d6:61:f5:65:87:a9:be:
fa:7f:0c:35:ac:61:4c:ab:b7:8d:3a:d8:e6:ef:20:
6c:b8:f2:fc:51:9a:32:e7:83:eb:8d:8a:83:22:78:
e9:6e:f7:0d:63:6d:01:c3:2a:56:e0:65:00:f7:2a:
13:0f:6b:96:0c:36:84:53:03:f2:99:b0:d0:c6:95:
a2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:06:49:98:BB:78:2E:5F:BC:BA:DA:DB:9A:C2:69:0B:9C:39:81:18
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8fb472-f992-49b6-9850-bc1c21a4dc48/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8fb472-f992-49b6-9850-bc1c21a4dc48/1/CgZJmLt4Ll-8utrbmsJpC5w5gRg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.79.252.0/23
Signature Algorithm: sha256WithRSAEncryption
19:69:92:f5:df:5a:b5:2b:cc:91:67:4a:54:bc:ac:14:43:77:
f9:86:a5:34:a9:c6:91:70:ec:7e:f9:45:8a:83:77:65:8a:13:
ef:61:a2:5a:13:81:a7:c2:3f:89:42:82:8a:d3:69:c3:c4:cc:
bd:77:0e:bc:70:0c:1b:b1:29:27:2d:96:c7:ec:4b:ad:82:ca:
6d:ff:94:cf:3d:49:4d:5a:0b:de:b3:b3:e4:44:cf:91:97:21:
d2:70:96:52:c0:54:cf:df:16:84:86:1d:1a:4b:00:6b:47:bd:
e8:08:25:41:6f:26:f9:d1:f4:bf:76:6f:9b:af:d6:a5:20:68:
de:ad:a2:00:25:f9:ae:ce:66:df:80:0c:d8:10:71:32:c9:3a:
e7:c4:d3:b9:d8:d1:b9:e0:ef:40:ca:6e:fb:15:2a:e3:ef:de:
39:00:20:80:74:90:5b:fb:28:a0:47:8b:36:e4:7a:e8:57:7c:
a8:42:b8:d2:22:cf:6a:b9:9b:03:50:36:46:fa:74:bc:99:ea:
6d:a5:68:da:6a:7a:ee:84:b6:f2:83:f6:b7:3d:89:80:40:71:
44:41:b9:37:1e:57:4d:28:b7:65:4c:18:1f:e6:d4:c0:b8:4b:
c8:c4:ec:18:df:50:79:02:42:4b:60:a5:22:d5:5a:e1:a1:8a:
b5:96:66:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:28:50 2025 by rpki-client