Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JE16OJlktk-Oo1cranljuJQT19k.cer
File: JE16OJlktk-Oo1cranljuJQT19k.cer (raw, json)
Hash identifier: PdvSZ6ta3XV+LJBfALk4QdT/gduGQUaF/wPqm44F4co=
Subject key identifier: 24:4D:7A:38:99:64:B6:4F:8E:A3:57:2B:6A:79:63:B8:94:13:D7:D9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A5EE84BA70
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/98/8ed162-11bd-4d6e-abd1-fc4ddb9e5317/1/JE16OJlktk-Oo1cranljuJQT19k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/98/8ed162-11bd-4d6e-abd1-fc4ddb9e5317/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 11:55:51 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 176.118.193.0/24
IP: 2a0c:a300::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 712671279728 (0xa5ee84ba70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:55:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=244d7a389964b64f8ea3572b6a7963b89413d7d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fa:b7:86:7f:a3:c3:a5:e2:20:08:8e:3a:f7:
a5:d4:4a:dd:a7:73:c1:5e:7d:76:7a:5f:e7:a7:fd:
85:54:c2:d0:c6:50:d2:ca:5e:2a:60:97:fe:3c:66:
cf:4b:a8:12:54:e0:83:f5:fc:d2:55:c6:34:6d:03:
2d:3f:f6:c6:be:d2:23:97:97:63:a8:a4:d6:31:df:
8c:8a:da:27:86:78:4b:1c:24:06:6b:d9:d0:22:0c:
9b:af:d4:bb:68:46:9b:34:31:62:cb:fb:71:a0:d4:
c1:ae:b1:87:6b:20:3a:b3:4d:c2:fd:d7:85:14:47:
a7:e8:8b:30:06:56:8d:68:20:bd:d8:d8:2d:e2:22:
2d:0c:e5:73:f1:32:66:7f:41:54:77:a1:74:c0:11:
2f:7d:fe:76:75:5a:60:e3:a3:84:7f:9d:cf:6e:19:
de:91:36:a6:4e:38:37:87:c9:8a:6b:96:0a:2e:b7:
54:53:ba:4f:5d:4b:f9:08:31:89:94:8c:51:97:c1:
b8:2e:2f:b6:90:30:2e:0a:d4:ad:66:2e:04:76:92:
3d:54:e0:82:96:bd:f7:9a:32:7a:10:b4:f7:55:e0:
d5:7a:26:38:cc:ee:22:91:b8:e5:89:d4:85:d0:4e:
0c:75:2f:e9:57:ea:49:e6:9c:76:11:18:df:ff:cd:
b8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:4D:7A:38:99:64:B6:4F:8E:A3:57:2B:6A:79:63:B8:94:13:D7:D9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8ed162-11bd-4d6e-abd1-fc4ddb9e5317/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8ed162-11bd-4d6e-abd1-fc4ddb9e5317/1/JE16OJlktk-Oo1cranljuJQT19k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.118.193.0/24
IPv6:
2a0c:a300::/29
Signature Algorithm: sha256WithRSAEncryption
54:58:bc:d1:7b:bf:6f:7f:f8:d1:c9:77:7a:25:74:7b:2d:ba:
eb:25:65:c2:23:83:61:7c:64:d3:d5:b8:cc:31:44:87:5e:d8:
60:eb:51:f8:bc:00:57:73:f4:2d:ff:7d:d4:ab:11:cc:d7:a3:
50:96:3d:f4:4b:cb:a8:04:1e:40:90:b3:e1:e8:0a:89:22:ca:
ee:05:82:7f:d3:55:eb:09:4f:e4:93:b7:61:5c:07:49:f9:1b:
6d:f8:3c:9d:ec:9b:44:3a:e9:5b:69:05:08:41:c4:06:c3:85:
9c:39:42:71:60:b6:75:69:12:05:ea:85:90:c5:11:4d:7b:e0:
b7:85:3f:9f:ae:e3:1b:73:cf:7f:a8:7a:61:bb:42:aa:1f:38:
bb:26:7e:bd:5b:c0:d1:53:56:06:a7:32:d5:b1:f6:ad:02:49:
23:1e:fa:35:f6:3f:97:84:ac:92:f9:0e:cc:10:17:8c:31:1d:
3a:50:37:73:12:4c:61:e3:55:13:7e:c1:e7:6f:fd:e9:a3:91:
ff:0c:bf:ca:1d:8b:e8:ce:e4:60:01:7a:ca:9b:16:30:45:fa:
35:50:34:aa:2e:0e:e1:ca:33:92:d1:2a:aa:dd:12:1a:50:8b:
5c:8f:94:2d:d3:0c:f7:e0:af:38:28:c3:bc:01:24:1f:99:75:
3e:af:f9:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:43:36 2025 by rpki-client