Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.cer
File: JLDk8YGD-9nWlQ7qQz_l0ha9XxI.cer (raw, json)
Hash identifier: oznIcSBP37dovjgwPPNRDmmbKmkLeklfzFWAIjStnvA=
Subject key identifier: 24:B0:E4:F1:81:83:FB:D9:D6:95:0E:EA:43:3F:E5:D2:16:BD:5F:12
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B6971B83A9A5841A9714E51F943EB1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:51:05 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.8.140.0 -- 193.8.142.255
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:97:1b:83:a9:a5:84:1a:97:14:e5:1f:94:3e:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:51:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=24b0e4f18183fbd9d6950eea433fe5d216bd5f12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b4:54:5f:ad:a1:e0:f7:75:8a:c2:ff:69:1a:
0d:5b:b1:e7:2f:8a:d7:db:f5:57:f6:ba:75:e7:20:
9c:4a:25:33:29:8b:52:cc:34:ce:b1:d0:13:4d:67:
76:8d:dd:02:ae:3d:b6:85:f5:d4:3e:59:ed:5f:e9:
42:82:2d:2f:a6:52:22:19:48:15:df:74:d8:36:e3:
70:7d:b0:0f:d2:ae:ef:1b:6f:4d:bb:be:9c:49:3e:
ea:7e:aa:6f:6a:ed:70:b7:44:00:82:6d:24:fb:c0:
11:a6:29:29:d3:12:d7:8e:34:89:44:ad:88:38:10:
e3:7d:f5:a4:dc:fa:eb:da:75:65:94:eb:9a:a9:69:
2c:ea:dc:54:00:11:84:be:dd:aa:d8:dc:04:49:18:
a7:0a:07:56:72:84:e1:34:c8:ea:57:89:0f:0e:cd:
2c:64:ca:0d:8d:e7:0d:b5:42:a9:d8:1e:7e:24:8e:
57:68:d8:1b:f2:8c:1d:ce:75:97:dc:e2:9c:41:65:
09:54:6a:7c:9d:91:29:57:e1:b5:9c:3a:fd:50:40:
3e:7d:1c:72:de:fa:09:46:11:7e:64:b3:dd:18:5d:
04:02:02:db:70:00:db:ba:36:c4:7e:79:e2:a4:2d:
03:46:5d:73:c1:b7:b2:96:11:e8:98:29:3c:88:dd:
8b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B0:E4:F1:81:83:FB:D9:D6:95:0E:EA:43:3F:E5:D2:16:BD:5F:12
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/849bcf-da5f-4c97-97b1-5ba5954dfc37/1/JLDk8YGD-9nWlQ7qQz_l0ha9XxI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.140.0-193.8.142.255
Signature Algorithm: sha256WithRSAEncryption
8b:ec:41:e1:ee:04:f6:0d:8c:ad:35:ef:80:bf:c5:72:39:66:
cb:63:22:ee:29:d5:26:c4:6b:11:f0:7c:74:56:6e:ef:3d:b3:
36:7b:a5:64:89:2b:33:08:d7:3c:28:01:8a:f8:bb:06:38:8a:
32:71:34:65:80:df:94:b5:fa:bf:6f:71:80:82:26:f6:ec:0c:
3a:66:78:e9:73:f9:4e:97:a2:e0:a6:64:60:54:5b:ec:3e:70:
e7:a1:5c:c5:2e:d8:5c:b3:db:74:a9:ab:78:f7:63:d9:e9:02:
89:32:34:dc:ea:1f:23:be:ff:0b:09:2e:64:42:93:b0:50:84:
5d:54:b3:f9:de:20:27:a8:62:02:2c:86:bf:b1:1f:aa:12:ca:
72:b9:4a:b6:62:e2:f7:59:8a:25:8e:c2:65:5a:fe:3e:83:94:
9b:57:a3:42:be:c8:09:64:d3:e3:1d:1b:02:f1:59:80:64:09:
4b:db:5e:0d:4c:ff:fc:77:e9:be:fc:af:aa:71:75:83:94:d9:
a2:79:e5:ab:d1:48:4d:3d:6b:0a:a7:88:ad:f6:f7:73:af:af:
bf:d2:e2:91:7c:54:19:c8:31:84:23:c3:06:47:a7:d5:df:fe:
dc:d2:d0:73:75:a9:60:8e:ca:59:8c:8d:ab:d9:a1:9a:4d:70:
68:d5:ff:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:51:14 2025 by rpki-client