Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
File: Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer (raw, json)
Hash identifier: /qbxlyMPTvLUrpRenCAltqrymZgHRMiFfSlRT2bAoM8=
Subject key identifier: 37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228E270F6336E19906037E93D692711B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:49 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 31.14.36.0/22
IP: 45.132.24.0/22
IP: 185.155.52.0/22
IP: 2a0e:65c0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:27:0f:63:36:e1:99:06:03:7e:93:d6:92:71:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3718b734349bf327d9453b96501e44b192e55142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fa:d3:55:5b:6f:04:57:fe:bc:07:67:4f:41:
41:49:4b:6d:d0:8f:d1:6b:1c:51:e0:00:e0:42:58:
c2:5e:bc:8c:4a:5b:6e:27:74:6b:ce:7f:4a:90:2b:
ea:45:8d:b7:90:9d:81:00:97:82:ec:10:63:ba:bf:
9c:7b:b8:86:0f:34:3f:2c:42:18:6c:af:a3:02:c8:
bc:b8:68:36:6b:53:92:7d:ba:c1:d7:65:50:13:b8:
27:0e:ee:43:59:99:8a:45:f4:b9:7f:ff:bd:6b:22:
a6:11:1a:52:9b:2d:49:c4:d0:f1:31:67:ca:d8:14:
18:30:69:dc:b0:bf:b5:4f:11:19:b8:ae:60:4a:e4:
af:7e:fa:62:47:c4:32:56:69:e9:26:68:e2:f3:d0:
5b:12:41:60:e8:b2:c8:8c:02:9d:ab:e4:60:00:4a:
9e:1a:4a:3a:7a:6c:9e:20:4b:7e:6b:7d:1f:99:c5:
89:ad:b2:ff:fc:9b:55:51:93:ae:b6:b0:49:08:a7:
33:be:63:a2:96:df:41:eb:97:f3:73:0a:94:4c:fe:
cf:7b:2c:e4:58:72:c1:0d:5d:1d:11:2f:9c:35:58:
19:bd:68:9f:43:5d:27:04:86:9f:c5:d4:a2:7c:d8:
d6:c2:2e:d7:b5:2b:9e:fc:69:3d:2d:f8:b8:1a:03:
f6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.36.0/22
45.132.24.0/22
185.155.52.0/22
IPv6:
2a0e:65c0::/29
Signature Algorithm: sha256WithRSAEncryption
9b:0b:9b:47:8c:98:9f:fe:cd:0f:32:b5:f7:be:7b:4a:93:6e:
d7:66:8d:07:b7:d7:02:dc:98:e4:29:64:c0:7a:6e:b1:bf:1d:
19:bb:8e:b4:ad:ed:98:92:b0:19:26:fe:59:c0:2e:14:4e:34:
0b:cb:d4:4e:97:33:ae:ee:88:96:82:5d:83:db:74:77:a2:9f:
ae:68:26:68:a0:2b:9f:52:a7:b7:fa:95:17:45:35:de:6b:b3:
03:ab:50:71:75:77:76:06:7c:b5:77:13:2b:1c:4f:d8:2b:25:
94:65:9f:f5:31:27:01:e0:1b:0f:4c:64:97:dc:58:f9:10:46:
7f:ab:95:f4:da:f0:af:34:7c:70:3a:8f:d0:28:de:76:0e:2c:
81:19:c0:ba:48:14:41:bf:d2:45:ec:8f:fb:2c:57:3a:7f:7f:
77:00:7f:15:b9:4a:51:4c:07:77:1b:d4:77:65:93:f1:47:9c:
1d:9b:d4:33:c4:d0:ad:c7:c8:67:f4:6f:29:aa:5c:d1:7a:63:
21:31:b6:d9:ee:3b:21:2c:b5:e2:59:75:0f:64:a2:3c:48:24:
59:54:04:c4:17:a7:22:da:80:9d:c3:a5:6c:4b:eb:11:26:3f:
2e:68:80:8e:66:49:e7:df:0b:b0:19:84:b8:22:24:42:d8:bc:
89:d4:49:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:04:56 2025 by rpki-client