Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.cer
File: Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.cer (raw, json)
Hash identifier: s+TaZnYOXW6aJQdB5IIlsg1QEK5buka2iLd7+2a2o6I=
Subject key identifier: 0A:DC:F6:2C:6B:54:11:13:9A:5D:13:09:DD:9E:D9:26:F4:31:43:20
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B27F1E6BA96EFAF5ECF7A03768F969
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:47:45 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.132.240.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:7f:1e:6b:a9:6e:fa:f5:ec:f7:a0:37:68:f9:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0adcf62c6b5411139a5d1309dd9ed926f4314320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f3:70:60:86:c0:79:9f:5c:86:cf:a6:bd:67:
f5:de:49:ad:ae:62:b9:fd:c0:16:aa:76:3c:4a:67:
12:a9:d7:8f:3b:5a:90:13:b1:2e:3a:95:da:b4:7c:
1b:2c:a1:eb:e5:1c:ec:92:5c:72:f9:5e:41:21:19:
d2:55:dc:d5:a6:90:6b:77:49:57:ae:c1:eb:4e:33:
1e:f1:90:30:47:17:c5:ee:20:c5:7c:ae:b9:85:c1:
46:66:77:ec:a8:8e:c6:d2:a7:61:1d:38:bc:58:94:
fc:8c:29:b5:30:26:42:da:48:13:d6:ff:3a:56:a3:
c4:f9:15:7f:ac:92:b0:80:6c:81:1b:9d:93:f7:b9:
24:8f:d7:3b:0e:02:d3:72:b1:d5:dd:ac:1b:c9:50:
b7:04:19:6b:84:01:2f:cc:2d:12:ca:a7:47:b4:45:
3c:65:8a:ad:42:af:73:79:f4:36:fc:b9:b0:94:c0:
29:0c:69:4e:0a:d3:af:bb:f8:49:8d:a4:ee:60:1f:
15:c8:97:84:ef:3c:3a:1a:14:ed:fa:25:c6:08:e1:
2a:0b:39:56:e0:26:ca:16:16:47:78:1a:f0:b8:d0:
1c:48:75:aa:a1:f1:27:78:c3:e4:ac:c5:8e:d0:1d:
75:46:b9:f8:da:02:f9:19:d4:ef:c1:b2:2e:47:85:
d2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:DC:F6:2C:6B:54:11:13:9A:5D:13:09:DD:9E:D9:26:F4:31:43:20
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.240.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:0c:03:26:b6:60:5c:1a:c7:01:53:96:9b:4b:26:ad:07:9c:
5f:64:1e:94:cd:27:41:db:bb:a7:fd:05:99:24:df:1b:52:7a:
86:e6:15:91:5c:9c:04:32:ab:6c:3f:33:2f:3d:af:44:bc:50:
9d:cd:94:f9:39:9a:6a:24:05:17:6d:b7:5f:00:9e:a9:26:19:
ba:bd:f9:f0:c1:27:f8:60:af:29:b6:e2:75:6f:74:e7:9e:4f:
b5:29:a7:78:e4:a1:05:62:45:a1:44:ec:80:04:42:5d:c6:b3:
95:c3:16:b3:77:af:ac:f9:41:8f:fb:75:0f:48:d2:52:1c:74:
c3:b1:ae:29:3f:13:1f:c0:99:54:34:bf:9a:00:af:5c:d1:9a:
92:89:71:80:c1:e6:b7:bb:8b:03:b8:f5:db:0e:7c:35:73:04:
09:db:24:cb:49:0a:5c:33:d7:0d:95:4e:55:17:09:da:97:1f:
8d:ee:6e:c6:eb:5b:27:12:6b:48:88:ea:72:7a:12:ac:95:0a:
d5:de:3a:00:95:1b:6e:a2:63:18:65:cb:46:30:b3:67:0e:fa:
bf:f7:af:5e:42:58:41:2f:ed:ea:31:56:53:74:40:56:2a:b7:
34:83:f1:80:49:2d:a2:c2:8e:cb:cb:6f:d3:52:3b:83:ba:a8:
0f:d9:45:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:37:02 2025 by rpki-client