Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/U0nC0Auka-kkS3YZS6oQ8zzjRiw.cer
File: U0nC0Auka-kkS3YZS6oQ8zzjRiw.cer (raw, json)
Hash identifier: MO8jb/1RZcOGaRFOKaCjKNw2WhTfurD2LUa74Cm5Eqg=
Subject key identifier: 53:49:C2:D0:0B:A4:6B:E9:24:4B:76:19:4B:AA:10:F3:3C:E3:46:2C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D6DBD2B4D701EB35686DEDB91F62ED
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/55/f8ae47-0ed4-4681-9c12-fa1260850709/1/U0nC0Auka-kkS3YZS6oQ8zzjRiw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/55/f8ae47-0ed4-4681-9c12-fa1260850709/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:47:51 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 176.123.222.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:db:d2:b4:d7:01:eb:35:68:6d:ed:b9:1f:62:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5349c2d00ba46be9244b76194baa10f33ce3462c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:aa:aa:11:f5:66:06:22:15:0e:df:33:24:89:
bb:5b:53:9b:f1:d6:0f:6a:0b:1a:f4:15:ff:57:1e:
3e:f2:40:35:58:e0:d1:12:04:2d:e8:77:6a:8e:d5:
06:40:30:2d:75:f8:a9:e6:76:26:2b:10:9c:a7:9a:
62:49:e7:3d:1e:07:4d:11:c5:2f:35:bc:34:ac:94:
63:d1:82:02:87:bb:8d:7e:45:7d:6d:22:72:cb:db:
a5:7f:3f:76:0a:01:11:71:dc:6a:5c:9e:2b:b3:fa:
32:b3:da:c7:09:51:e7:a7:db:26:89:7e:bc:59:ad:
c9:66:11:c1:26:62:96:e5:41:8e:09:8e:57:dc:8b:
a5:8e:a0:e6:78:2e:8b:94:a1:46:d0:96:50:26:79:
d9:7b:bd:b9:4b:69:0a:76:b1:1f:30:2a:c4:85:a2:
47:9e:81:d4:3d:7f:ed:79:9a:bb:84:28:84:45:ca:
8a:96:83:ba:c6:4d:ac:35:b0:55:7f:7b:35:18:82:
86:e9:e8:c0:48:16:60:7b:03:ef:9f:f9:87:ea:f8:
06:b7:e3:95:eb:26:23:0c:4c:66:db:a5:2f:6a:f6:
e2:06:40:29:23:47:9c:bb:51:fb:e0:21:13:19:ef:
dd:a8:9f:67:87:22:0d:2b:70:08:27:61:b0:91:84:
36:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:49:C2:D0:0B:A4:6B:E9:24:4B:76:19:4B:AA:10:F3:3C:E3:46:2C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f8ae47-0ed4-4681-9c12-fa1260850709/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f8ae47-0ed4-4681-9c12-fa1260850709/1/U0nC0Auka-kkS3YZS6oQ8zzjRiw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.123.222.0/24
Signature Algorithm: sha256WithRSAEncryption
43:8f:09:99:db:74:0a:56:af:a4:b4:83:a5:00:fc:c5:2a:b2:
96:55:ec:f3:72:7e:04:0d:d9:eb:02:86:9a:37:b3:7b:d1:01:
7a:6e:31:ab:09:7e:20:50:61:dd:4f:64:42:5e:1e:6a:7b:17:
90:1d:7a:4e:90:d6:4a:f4:60:95:76:97:17:57:85:d1:38:7c:
d0:13:23:e6:ab:3e:6b:aa:ec:f6:87:d5:1e:c5:a1:df:42:4a:
7b:c9:2f:86:e9:43:ee:88:5b:0b:7d:8d:29:ce:5e:e3:67:3f:
51:0a:c8:23:d1:89:a7:46:b7:bd:a8:eb:77:a7:1a:e3:57:dc:
ac:5b:2f:c1:e3:90:bc:f8:3c:58:71:d4:dd:73:c1:53:61:e3:
b7:1a:0a:3b:ac:38:8a:9d:f4:19:12:e2:45:0d:a7:df:b9:5c:
e3:6b:74:6a:0a:09:f3:9e:b9:c4:3b:85:9b:05:42:0d:12:80:
4c:36:9f:98:be:0e:5c:5d:0b:76:db:62:bc:c6:eb:d1:8c:54:
30:0c:f7:2b:fe:b3:68:e6:b6:9d:d6:a5:d5:12:0a:a2:8f:fc:
b0:4c:5a:9c:4e:fc:24:39:d9:37:9b:f5:bc:05:ae:81:2a:91:
90:9e:0e:bf:31:ef:4b:76:40:af:cf:de:34:89:d9:c8:a5:17:
f8:46:1b:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:35:48 2025 by rpki-client