Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CxhwyW7wlyOBH7iSUO6m66ljwN8.cer
File: CxhwyW7wlyOBH7iSUO6m66ljwN8.cer (raw, json)
Hash identifier: bcypqrAWqGd86rFRHmNefLlxgpwkCPAvBparrGiYu+E=
Subject key identifier: 0B:18:70:C9:6E:F0:97:23:81:1F:B8:92:50:EE:A6:EB:A9:63:C0:DF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942444C58E6FC2F224C0EAD56EF4DB57BC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:47:54 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 132.64.0.0/15
IP: 192.114.88.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:c5:8e:6f:c2:f2:24:c0:ea:d5:6e:f4:db:57:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b1870c96ef09723811fb89250eea6eba963c0df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fa:a1:7a:61:6f:09:82:db:b0:9a:30:2f:41:
cb:ed:12:99:f8:af:5b:82:cf:14:75:f4:ce:a8:5f:
45:13:a4:19:35:51:b1:16:ca:1b:4d:73:30:4a:ca:
2e:c2:57:b0:28:7b:60:85:85:46:df:c4:95:f7:ef:
c1:6a:bb:ec:f7:34:8d:01:20:13:b3:37:64:bd:9b:
59:00:18:98:c1:0c:29:c1:c3:1f:48:c4:3c:fa:7a:
c2:13:35:2c:f4:e4:8e:bc:31:85:a9:6e:a4:69:dc:
9e:e9:dd:5c:17:d9:2b:30:42:75:f7:8a:9e:c0:46:
97:3e:be:14:7c:c0:07:9e:a0:9b:63:c7:35:07:d0:
3f:d8:ef:29:70:ee:cb:ce:76:26:53:51:5f:7d:67:
3f:94:03:a6:7e:7c:c7:b0:0a:2c:ac:aa:6e:09:4a:
ca:2e:97:f4:2a:8e:fd:63:37:34:63:f7:fa:4c:77:
f2:5d:b8:47:7b:a9:6d:82:25:ee:e3:7f:96:84:b2:
da:a4:8d:a5:c5:b2:4f:b4:9f:0e:c5:76:e7:9f:89:
20:1f:34:31:eb:8d:ff:68:2c:1a:ae:cc:2d:09:26:
13:66:ed:8c:0f:b4:84:75:ea:d8:44:17:7a:d9:75:
8c:37:f5:e2:f3:4b:6e:00:a6:e5:0a:ed:1b:0f:de:
4f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:18:70:C9:6E:F0:97:23:81:1F:B8:92:50:EE:A6:EB:A9:63:C0:DF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/87702a-3af6-46c7-a123-a2e24f980b3f/1/CxhwyW7wlyOBH7iSUO6m66ljwN8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.64.0.0/15
192.114.88.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:d8:78:94:a8:f7:ec:04:c9:d7:85:0c:26:db:15:b2:bf:36:
04:f1:7a:b3:e4:1a:d9:0c:7e:8b:bc:65:81:23:88:76:64:85:
9f:92:06:16:c2:98:23:57:77:2e:aa:1e:db:b7:92:33:15:c2:
b7:44:21:16:5c:45:28:82:8f:72:85:b0:b7:7e:93:f0:23:fd:
39:fc:8e:a1:f1:28:38:79:9e:31:5e:90:f5:4f:a1:fc:e8:87:
31:67:e0:f0:c3:eb:21:62:1e:04:a8:ad:89:b5:69:40:0d:88:
ff:a7:e0:a2:bd:8f:a7:8b:99:a7:9d:9d:02:c3:7f:58:58:f0:
54:76:ac:e3:fd:49:13:c0:f5:1e:81:80:81:1e:85:54:13:4d:
74:39:cc:00:04:c5:62:9e:9c:b3:cf:63:21:c5:ec:01:0a:6d:
7a:5d:53:a7:9e:47:53:e0:69:a1:4a:8c:03:34:17:06:9f:41:
1a:5a:ff:97:a1:07:28:d3:e4:7e:41:e7:9c:eb:ea:51:69:54:
37:f6:78:fa:d1:45:da:04:7d:22:a7:d4:0a:11:e2:b3:dc:64:
9b:ba:0f:e3:14:f3:8a:8e:21:92:1a:5d:0d:cb:43:f4:ef:ac:
78:ac:c3:fd:a6:b1:04:a3:03:6e:38:4c:e1:4b:b2:86:74:e9:
02:6f:9b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:24:23 2025 by rpki-client