Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QZHlgmJw9J6umZ1InoXezMhHc4s.cer
File: QZHlgmJw9J6umZ1InoXezMhHc4s.cer (raw, json)
Hash identifier: SBiSAtrEvd/QlTmCIMZbwI0CpbBo5C7SCXy5IMZpF40=
Subject key identifier: 41:91:E5:82:62:70:F4:9E:AE:99:9D:48:9E:85:DE:CC:C8:47:73:8B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420680982C835449671CFC173843ED2EA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:47:56 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 45.90.24.0/22
IP: 2a06:3cc0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:09:82:c8:35:44:96:71:cf:c1:73:84:3e:d2:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4191e5826270f49eae999d489e85deccc847738b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:87:3a:21:be:c8:a1:cd:ed:d7:0b:17:8f:43:
d5:9b:d4:5b:c3:98:f2:15:1b:48:2a:0c:fc:ab:68:
94:3c:f6:0a:a5:89:ce:9e:91:54:b8:dd:ea:35:bc:
e4:df:45:f9:0c:98:f3:a6:f1:a9:ca:0a:3e:8f:0d:
59:57:12:3a:ec:9d:87:3b:73:4e:ec:28:8c:a6:ad:
03:5d:22:8b:1f:12:44:eb:27:3e:3d:11:7d:c4:d3:
ac:ce:0f:fd:ec:d5:dc:55:ad:5b:2c:ae:8c:cf:e5:
a2:67:cb:c1:d0:b0:4b:b0:28:62:2f:05:2e:09:c6:
4d:23:19:76:36:47:2d:68:d6:5d:c9:77:9b:ac:04:
ea:4b:06:e8:e6:e1:98:f2:f2:27:54:a4:cc:07:9f:
40:4d:32:bf:f9:3d:1f:a2:63:fd:57:db:99:e1:43:
b0:ac:4d:b5:f9:69:a8:85:27:46:b6:60:96:2b:ea:
63:47:b4:03:3b:36:c4:b4:f1:93:fc:aa:5e:9e:6b:
24:2b:2b:7b:c7:34:7e:8b:ba:a4:0e:c1:bc:4e:01:
b9:e0:e0:30:0f:00:ee:d0:c1:fd:73:77:80:4f:0f:
dc:99:48:8b:33:8d:85:fa:8c:b7:b2:04:ac:fd:a6:
7b:e0:e7:2b:51:27:e5:fd:bf:a4:17:93:28:41:52:
7e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:91:E5:82:62:70:F4:9E:AE:99:9D:48:9E:85:DE:CC:C8:47:73:8B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.24.0/22
IPv6:
2a06:3cc0::/29
Signature Algorithm: sha256WithRSAEncryption
86:b1:8a:54:62:90:0f:d2:ab:9d:2c:e4:ce:c1:b6:49:15:e7:
1b:ea:40:bb:67:5e:6c:8c:9f:36:0c:a6:73:83:35:bc:53:c9:
6c:18:2a:50:01:68:3e:36:f4:20:cd:88:0c:8f:c4:63:e5:5b:
e0:a1:b4:cb:d5:d3:33:13:53:22:93:bc:db:69:1e:6a:d7:ec:
06:8c:b4:58:47:0f:19:e0:08:fd:ee:9a:39:53:e9:e8:da:3a:
74:d1:1f:79:c7:9b:53:fc:75:bd:79:3f:18:70:a4:4d:d7:8a:
fd:2c:50:ef:a4:24:9b:32:58:65:20:4d:f6:05:07:f3:92:3e:
e2:75:b4:f4:2d:fc:1e:fb:33:6e:e4:6e:51:ba:e0:cf:a6:15:
c9:95:2e:df:da:cf:ef:8b:80:23:03:96:b5:49:1b:fd:1d:77:
b9:d0:6a:39:e8:60:8d:a7:ae:bd:e5:ea:4a:c8:1e:58:34:94:
0f:26:5e:05:e0:eb:23:56:72:01:41:c1:8c:f9:fe:9b:6c:85:
c5:89:26:6c:71:97:93:bf:36:aa:06:b2:2d:13:55:9d:2c:ab:
f0:8f:29:16:be:18:9a:74:e4:1c:bb:3d:3d:44:97:46:71:fb:
17:88:cb:1e:bf:18:30:9a:ea:22:da:67:9a:1e:27:3e:4e:ab:
02:26:ad:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:29:44 2025 by rpki-client