Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/J5b1HKVJfo-Gq5_he_7qpz2vosQ.cer
File: J5b1HKVJfo-Gq5_he_7qpz2vosQ.cer (raw, json)
Hash identifier: gcJZlfgnjo9D8uaa1YLsNFjhx3xifeECtBbyFSmt2yI=
Subject key identifier: 27:96:F5:1C:A5:49:7E:8F:86:AB:9F:E1:7B:FE:EA:A7:3D:AF:A2:C4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: B2A9CD65E5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/af/0474eb-2384-48fa-ab70-cc9e95196212/1/J5b1HKVJfo-Gq5_he_7qpz2vosQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/af/0474eb-2384-48fa-ab70-cc9e95196212/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jun 2022 10:30:18 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 176.113.84.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 767352989157 (0xb2a9cd65e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 2 10:30:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2796f51ca5497e8f86ab9fe17bfeeaa73dafa2c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:34:be:42:d5:4f:d7:b1:d0:49:3d:e5:91:81:
ef:d4:18:5c:19:8d:23:a9:41:7e:94:f7:e0:72:90:
a2:a4:7f:4d:cc:08:3f:73:52:c0:4d:8d:66:c2:3d:
34:20:62:6e:86:7e:ec:b7:1f:0d:12:42:25:14:b0:
d3:dc:33:44:2b:61:38:e3:39:fd:fa:d5:d7:55:c6:
91:a4:2c:7e:8e:15:90:00:d2:52:69:88:0d:19:a2:
80:8d:cd:06:f8:d9:1e:20:c8:c4:8d:82:8f:1e:78:
5b:86:18:f9:ad:ce:20:7f:b4:b6:16:82:64:b1:95:
34:fd:e5:40:b3:05:a7:3c:c4:ee:4d:a5:4b:fd:2a:
c8:56:6e:37:19:4f:03:d8:1b:85:d9:9e:82:4c:41:
ca:b6:b2:62:cd:83:7f:56:e7:ff:92:52:9e:96:72:
ff:91:4c:51:cb:92:3c:a1:d1:30:ec:48:74:67:d2:
83:d1:2d:fe:08:db:de:21:8f:cb:5e:ad:64:bc:dd:
c2:53:0c:af:b3:02:f8:04:ea:f5:c6:3d:19:5d:a7:
d1:e9:25:cf:c5:af:e5:75:00:2f:14:b5:e8:9d:4f:
0f:b7:1d:72:07:a7:62:9f:d6:dc:4a:84:93:96:3a:
eb:db:85:dc:fb:d5:97:71:15:f9:12:e0:fa:00:c2:
5e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:96:F5:1C:A5:49:7E:8F:86:AB:9F:E1:7B:FE:EA:A7:3D:AF:A2:C4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/0474eb-2384-48fa-ab70-cc9e95196212/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/0474eb-2384-48fa-ab70-cc9e95196212/1/J5b1HKVJfo-Gq5_he_7qpz2vosQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.113.84.0/22
Signature Algorithm: sha256WithRSAEncryption
12:f6:d1:c2:bb:34:d6:a6:98:df:f6:46:ff:0b:03:6b:e7:42:
6e:0c:7e:51:62:ac:3f:35:2a:4a:0e:3b:be:ba:ba:41:4d:f1:
84:1c:5a:fa:aa:46:7f:c3:3b:96:ad:a6:90:66:fd:f9:3e:a7:
99:9c:1d:ca:e0:46:de:0c:73:54:56:a4:91:e1:ac:fc:9d:ff:
73:67:cb:42:a8:7b:a8:16:18:19:62:0c:36:9d:13:ed:ff:cc:
8e:38:90:8d:ee:b4:9e:27:05:7c:76:83:1f:33:b2:9c:18:bd:
4d:b4:58:53:f9:68:9d:6f:b2:98:89:e8:27:92:46:94:84:16:
25:51:1f:35:09:cf:bc:59:01:f0:ed:ab:fb:0c:68:90:ba:f5:
52:da:d8:5b:0b:19:8b:27:e9:f3:62:72:44:33:10:37:41:8c:
62:aa:84:70:1e:f0:e6:e1:e8:93:2f:7b:6c:71:99:43:bd:f2:
68:72:bd:f0:21:67:7a:e2:e7:c2:30:99:d0:c3:54:83:75:5f:
15:9a:af:d0:81:89:ad:e9:76:15:c4:21:a1:29:25:01:98:da:
f3:b2:19:d6:ad:93:7b:cc:03:5b:e0:f3:fb:ad:08:d7:2c:dc:
5c:f1:7d:97:be:d1:ec:1b:4f:50:69:3b:2f:e4:d9:d5:c3:56:
43:ac:28:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:47:55 2025 by rpki-client