Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer
File: Fni0n5riXx4SdTSxkVBErH0NnnM.cer (raw, json)
Hash identifier: 158gaEb5uP+9MJCmmLvm8JQO910Ep85WNN0TVSSYCrc=
Subject key identifier: 16:78:B4:9F:9A:E2:5F:1E:12:75:34:B1:91:50:44:AC:7D:0D:9E:73
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228E250F2C141FC95883076691E4ADA8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:48 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 147.78.52.0/22
IP: 185.223.40.0/22
IP: 185.226.80.0/22
IP: 185.249.236.0/22
IP: 193.37.52.0/22
IP: 193.38.240.0/22
IP: 194.26.176.0/22
IP: 194.55.80.0/22
IP: 194.93.36.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:25:0f:2c:14:1f:c9:58:83:07:66:91:e4:ad:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1678b49f9ae25f1e127534b1915044ac7d0d9e73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e2:ba:d4:36:f8:c5:70:5d:71:93:b8:9a:2b:
78:60:0f:c8:ff:67:29:59:15:5d:9a:d0:91:fc:b8:
73:12:86:83:f6:90:e1:4b:c5:ef:64:35:65:a2:0c:
43:46:0b:81:87:da:2e:48:5c:df:7b:ed:01:83:18:
ec:fc:c0:d5:8b:96:92:dd:2e:d3:60:02:2a:11:a4:
0e:ef:9a:b4:64:5a:14:28:59:bb:34:46:60:0b:39:
a1:0d:67:1b:dc:d9:4a:ee:67:c7:3b:93:c3:53:7b:
4a:a7:b6:d6:2f:4d:4b:61:b9:f4:d6:a7:61:9e:f5:
68:b9:88:74:34:ed:c5:c1:89:e9:3c:3b:47:d4:2f:
9a:53:ed:49:08:85:67:6b:07:56:22:01:10:6d:f8:
a8:79:03:73:84:7f:08:17:42:ca:12:56:db:80:d0:
50:d0:9d:0e:05:1f:c2:60:8c:92:ab:92:78:33:15:
2d:99:ef:b3:c6:b3:55:a1:fc:89:0a:2c:70:21:02:
3d:31:49:8d:be:cf:cc:91:4c:5c:01:c5:68:34:9d:
ad:ba:76:76:5c:1d:9c:af:bb:63:4b:0a:62:57:66:
2c:e3:6f:d6:b5:86:4e:3b:f0:42:83:bc:fd:76:1b:
54:a5:f4:d9:99:0a:40:82:31:91:c9:00:63:dd:e8:
c6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:78:B4:9F:9A:E2:5F:1E:12:75:34:B1:91:50:44:AC:7D:0D:9E:73
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.78.52.0/22
185.223.40.0/22
185.226.80.0/22
185.249.236.0/22
193.37.52.0/22
193.38.240.0/22
194.26.176.0/22
194.55.80.0/22
194.93.36.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:2c:96:70:1c:d4:f5:30:38:83:cb:fa:86:d8:20:70:95:0c:
4b:24:90:a5:30:c6:f8:73:0d:db:d7:62:5e:23:af:d3:de:dc:
29:21:4a:4e:f3:cb:c1:18:08:a9:ab:e4:46:e7:e3:ac:3f:f5:
19:bb:f0:bd:ac:b8:86:22:f7:bd:a4:79:46:f9:d4:d3:48:bd:
a7:60:b2:d8:e4:d0:63:d7:87:ec:fa:3f:e8:3c:4b:73:3a:b0:
86:02:aa:7e:4c:3d:b9:47:3f:63:36:27:73:24:01:a7:06:50:
10:14:3c:91:f4:af:3e:63:c7:c8:14:91:66:db:34:65:74:cb:
44:7e:f4:df:2b:b4:90:da:72:f9:50:28:46:85:1e:9c:d6:39:
65:a7:1b:c9:55:4d:aa:ac:c2:91:47:6e:a2:26:42:4d:ed:ae:
a9:7d:5a:4e:eb:27:b5:03:fd:b2:aa:a3:4b:f5:bf:6d:22:29:
41:93:f4:98:45:e9:6f:b7:23:e4:f2:3e:a6:c2:20:cc:ef:e9:
16:3a:ad:e8:39:98:93:59:a6:47:e3:ae:a9:61:3b:6e:41:61:
38:73:a7:54:5b:8a:b8:f2:dd:9e:4f:90:70:d3:c2:ea:80:2d:
83:4e:86:a8:b1:40:8c:24:28:d0:e3:4c:00:6a:5d:65:00:64:
0e:52:d7:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:21:46 2025 by rpki-client