Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DT8ijI_DZNk1lDr65HS5b_ZIVWo.cer
File: DT8ijI_DZNk1lDr65HS5b_ZIVWo.cer (raw, json)
Hash identifier: G1XngOqwsNldcDumvm1FQJnOJMD5zP7ZZ9IqRxlH/XQ=
Subject key identifier: 0D:3F:22:8C:8F:C3:64:D9:35:94:3A:FA:E4:74:B9:6F:F6:48:55:6A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A8702C711E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8f/b0e55f-4b7f-471b-b69c-7576f7d1148e/1/DT8ijI_DZNk1lDr65HS5b_ZIVWo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8f/b0e55f-4b7f-471b-b69c-7576f7d1148e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 13:59:09 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 185.210.158.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 723436466462 (0xa8702c711e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:59:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0d3f228c8fc364d935943afae474b96ff648556a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d4:81:1d:9c:09:94:be:e5:07:cd:de:30:13:
b3:9b:2a:be:a2:e5:06:f2:a1:ad:a2:6f:e8:d7:a5:
ef:2c:ec:42:28:58:25:a5:22:a3:62:e2:cf:4e:89:
9b:af:3c:a9:5c:c7:7d:d6:a2:63:55:a9:ff:90:80:
62:ca:eb:ba:dc:02:cd:14:e3:d0:b7:60:d1:a0:85:
7d:58:9f:ed:e6:ea:87:e3:7e:87:47:f1:44:64:d3:
ab:40:db:84:36:14:c1:de:37:32:0f:b7:b7:63:62:
cd:69:cd:72:79:8b:86:b1:d8:30:1e:a6:cc:8b:79:
d5:36:d5:90:49:d9:a1:40:f4:bc:ef:7e:fe:12:0b:
55:4e:98:06:e4:87:8e:fd:5b:08:56:df:80:88:b6:
4d:b5:f7:7c:23:69:a6:8f:a7:26:02:3a:61:27:16:
14:87:b2:12:59:c9:b4:5b:bf:86:cc:27:b2:c1:18:
12:3b:3d:78:64:e5:b3:7d:ea:08:61:4a:2a:8d:2f:
34:a3:11:f9:55:1c:a9:64:77:9f:ee:f5:42:51:43:
1d:76:c7:78:41:84:24:13:b8:0a:3b:7d:30:c0:30:
90:7b:0a:82:fc:a2:db:85:f4:af:f1:c5:d1:be:48:
55:d3:4d:d6:4a:b9:2d:71:ea:19:8a:ea:28:75:f6:
bb:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:3F:22:8C:8F:C3:64:D9:35:94:3A:FA:E4:74:B9:6F:F6:48:55:6A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/b0e55f-4b7f-471b-b69c-7576f7d1148e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/b0e55f-4b7f-471b-b69c-7576f7d1148e/1/DT8ijI_DZNk1lDr65HS5b_ZIVWo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.158.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:c1:50:5a:b6:49:74:3c:21:80:c3:0c:d0:00:5f:9d:cc:f4:
e6:44:2f:92:a9:51:c7:8f:45:10:a0:f5:ae:46:8a:a3:23:28:
08:f0:0e:c3:6e:93:6c:3e:52:99:a4:41:03:1e:8a:27:6e:9d:
e9:cf:dc:6d:8b:cc:b7:2c:99:7c:c0:74:39:c7:28:dd:b8:8c:
41:7f:c1:61:3f:74:58:57:34:78:23:37:27:67:bb:1f:88:e1:
c5:40:d9:90:91:51:07:d7:56:d1:a0:56:8c:57:8c:51:15:50:
93:1b:cf:8a:98:99:91:c2:14:d3:4c:e6:77:58:35:75:8b:ab:
6a:a6:5d:f1:34:e9:0c:ae:cc:f6:49:1f:d6:81:52:31:26:e1:
b8:ca:d5:ad:42:17:fd:bf:02:b2:e9:15:9b:87:2c:d1:76:d8:
06:55:46:1d:36:3a:73:23:f6:d1:60:88:ff:97:6a:93:89:81:
06:0b:e7:c3:d7:3e:4f:36:e3:69:45:01:14:e7:c6:28:63:8c:
53:a5:12:65:d3:9b:e1:3d:3c:09:d3:99:0f:e3:9e:59:95:f6:
29:3b:58:f7:3e:a1:e3:9d:f9:c9:fa:3f:e7:7d:b0:c0:5a:2e:
9a:8d:a0:bc:84:c9:04:13:99:dc:6f:50:73:4d:78:81:75:0b:
b1:03:11:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:41:36 2025 by rpki-client