Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QZYjDljezAy8-xX1aqZN7dHzifU.cer
File: QZYjDljezAy8-xX1aqZN7dHzifU.cer (raw, json)
Hash identifier: MB8XpHO9TGhm9/oxUjmwfryJbm8WKBEKxpUfo4ZOUxA=
Subject key identifier: 41:96:23:0E:58:DE:CC:0C:BC:FB:15:F5:6A:A6:4D:ED:D1:F3:89:F5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D9E32AE506541E461FD434D8B98110
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:50:01 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 45.132.3.0/24
IP: 89.106.204.0/24
IP: 146.19.193.0/24
IP: 195.128.162.0/23
IP: 195.128.178.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:e3:2a:e5:06:54:1e:46:1f:d4:34:d8:b9:81:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:50:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4196230e58decc0cbcfb15f56aa64dedd1f389f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6c:4b:3a:98:34:09:66:f7:68:a8:a0:58:55:
be:0e:8b:0b:74:d0:7c:eb:dc:0d:1c:68:ef:c1:b6:
b8:6f:d0:4c:5e:20:6c:3a:d1:57:34:c8:8a:9d:87:
c3:85:1a:60:69:cb:a2:29:21:f4:07:4a:fc:94:36:
ff:d2:14:e5:33:e0:f2:e4:ba:20:ba:58:3d:5a:d7:
8a:a6:28:74:ec:57:a1:27:c1:96:e5:34:9e:65:c1:
d3:e4:b8:97:3c:c8:b3:00:1b:c6:28:87:e5:96:42:
f4:6f:3e:45:24:95:18:5d:1f:52:02:2c:07:54:8a:
15:51:29:af:1c:75:22:1e:0c:39:43:de:7e:7d:c4:
67:fc:69:f3:15:44:80:8d:5b:ed:1a:81:a4:28:73:
dc:5d:3d:cc:ce:c2:6b:97:a7:04:6e:0d:ef:3a:f1:
61:e6:ee:df:5a:a6:35:05:60:c4:8c:2b:a3:fa:68:
9b:9d:f0:18:7f:5e:a2:6f:10:54:bb:00:9d:4d:7d:
49:fc:3d:fd:22:9f:b6:61:90:95:54:11:33:17:2e:
6b:c5:58:6e:9f:a6:15:44:cc:12:a1:a4:c8:c6:6d:
04:09:1d:a3:9f:84:72:2d:c0:f4:0d:d8:41:94:65:
f3:56:fb:30:6c:b7:e1:85:98:47:d5:ff:ff:82:5c:
17:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:96:23:0E:58:DE:CC:0C:BC:FB:15:F5:6A:A6:4D:ED:D1:F3:89:F5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/da96f5-3f33-46f9-a514-2befffd57fb7/1/QZYjDljezAy8-xX1aqZN7dHzifU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.3.0/24
89.106.204.0/24
146.19.193.0/24
195.128.162.0/23
195.128.178.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:20:2d:01:0d:70:51:b5:27:1d:8e:bd:64:04:32:4b:d5:63:
14:f4:56:ec:3c:37:4c:9d:01:98:12:22:59:08:88:8e:9e:40:
69:d2:fb:84:d7:ce:b4:35:a3:b3:a9:2f:f3:49:b4:49:3f:cd:
09:19:ab:18:aa:0d:ed:6e:54:e3:9e:53:e7:41:a1:26:4e:fa:
fe:47:50:08:f6:5e:91:e1:3e:93:2d:4e:9f:ea:1e:bc:e8:bd:
2a:1e:55:9b:64:a9:89:30:21:dc:26:d8:96:ae:71:36:36:cb:
99:73:12:e1:4b:c2:29:3b:69:67:15:a4:f5:77:52:6e:f7:d5:
9f:8c:84:c0:ea:bc:23:37:80:fe:79:d7:08:d0:44:de:1c:b9:
c6:0c:56:b6:10:9a:6b:5b:f9:87:f0:27:2a:98:35:72:ed:3b:
a2:34:44:59:0d:43:da:32:84:ab:ce:41:a5:5a:9d:40:44:1e:
c6:4d:1b:e5:56:95:86:95:34:00:a1:f2:c6:0b:b7:da:c8:68:
79:3e:33:ef:96:d6:8c:43:ff:37:79:26:0d:fb:47:df:c6:cb:
71:b4:4e:1d:c7:fe:70:cd:63:b4:2a:45:82:96:de:ac:07:f1:
ff:7a:c7:f2:d9:b0:31:ee:35:94:61:21:20:2b:7b:91:0b:cf:
4e:82:e7:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:48:46 2025 by rpki-client