Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FxYPkzZw5CzS-WYcxD4X2nOV2RI.cer
File: FxYPkzZw5CzS-WYcxD4X2nOV2RI.cer (raw, json)
Hash identifier: o6wdHruSQy8iAov8jiZ6pSbmpUJ4oMJGSPdcJbCjyKA=
Subject key identifier: 17:16:0F:93:36:70:E4:2C:D2:F9:66:1C:C4:3E:17:DA:73:95:D9:12
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A0D3FF5BB1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/89/660561-0d28-40d9-9b83-b61a842efd3a/1/FxYPkzZw5CzS-WYcxD4X2nOV2RI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/89/660561-0d28-40d9-9b83-b61a842efd3a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 07:02:00 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.84.224.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 690751495089 (0xa0d3ff5bb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:02:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=17160f933670e42cd2f9661cc43e17da7395d912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:50:25:1e:64:0b:ef:fb:c2:9c:d0:de:49:fe:
56:ce:bb:7d:d7:99:c2:b9:ef:ef:e1:11:e2:1a:d3:
9c:83:a9:19:8f:9f:e0:6b:03:5a:f2:ee:35:33:76:
7b:55:d1:bf:c3:fa:a1:c3:22:1f:f6:9b:32:df:fa:
8e:51:0c:9e:72:fc:53:05:64:14:98:f6:7d:55:20:
a1:a9:1a:3c:8c:ba:57:cf:59:a0:b8:62:79:4e:72:
37:d3:f7:47:15:16:50:bc:ae:d4:11:9f:de:0c:2e:
2a:b1:96:79:b4:80:95:87:34:42:27:33:2f:45:2c:
39:33:ae:12:66:bc:fa:83:d0:bd:51:c5:cc:7c:e9:
c9:15:6b:45:b0:68:c9:aa:81:b1:56:80:fe:ab:b6:
51:69:03:bf:71:cd:12:8a:d3:ea:6f:79:ae:e9:b1:
17:02:89:20:85:60:4d:35:19:f0:8d:ae:10:28:da:
3a:71:71:44:df:53:c6:48:a4:0d:6f:2a:f0:d4:e9:
bc:0e:d5:83:ad:fb:b3:f9:11:50:40:e7:66:b1:2c:
58:fe:e7:28:9c:36:6d:90:e8:2b:14:6a:df:3f:e0:
62:33:c7:a7:4c:10:bc:e4:7e:54:f2:05:ed:e7:44:
ce:2a:64:b5:f3:3b:0e:ce:27:b5:b8:eb:11:93:d3:
c4:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:16:0F:93:36:70:E4:2C:D2:F9:66:1C:C4:3E:17:DA:73:95:D9:12
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/660561-0d28-40d9-9b83-b61a842efd3a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/660561-0d28-40d9-9b83-b61a842efd3a/1/FxYPkzZw5CzS-WYcxD4X2nOV2RI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.224.0/22
Signature Algorithm: sha256WithRSAEncryption
04:3e:ce:de:0e:75:a5:78:53:83:81:d1:5a:18:23:62:af:74:
1a:1a:35:21:57:6e:85:a1:60:b3:45:46:73:95:43:27:ff:16:
6e:0b:ee:b4:40:78:c4:5e:47:4c:15:f3:60:e7:51:89:f1:39:
01:5d:6b:ec:f3:fa:10:4c:70:5b:11:93:15:91:98:02:91:fa:
29:b2:06:cb:85:4a:10:03:a6:63:47:c6:f3:54:08:0f:93:0a:
86:49:82:0c:4c:b8:55:70:b6:05:e7:c9:80:60:66:ad:66:5e:
e2:96:6a:b4:af:1d:6f:1e:fd:56:c9:95:31:a7:39:ca:13:f9:
52:88:66:7c:05:d6:0c:6f:6a:b8:c7:1a:48:aa:2d:21:25:3a:
80:ce:07:04:f7:45:c2:2d:0c:00:67:b8:e4:7f:d0:d2:78:e1:
ed:69:05:56:31:b4:63:ed:ab:8a:27:8b:84:32:54:b2:4a:eb:
9a:31:94:8f:b2:4c:4c:9d:5b:ad:6d:68:89:9e:72:5e:d7:08:
4a:f7:a5:db:b0:22:17:9f:82:56:f5:21:f3:a7:87:81:34:ea:
b4:64:73:5e:56:df:8a:46:23:4f:9f:5e:85:50:fb:95:73:25:
a5:1d:0b:1b:5b:89:fc:d8:43:12:7c:b9:f1:05:a3:94:6c:b1:
cb:f0:52:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:38:23 2025 by rpki-client