Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
File: XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer (raw, json)
Hash identifier: gvKeiAPi5n1sa4gDKOM+w7I+NMjWSUjzb5kSLB36RmU=
Subject key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C3A58C243DD9EAA718D72789A6766
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:47:51 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 45.151.68.0/22
IP: 88.218.40.0/22
IP: 103.75.68.0/22
IP: 103.76.128.0/22
IP: 185.173.144.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:3a:58:c2:43:dd:9e:aa:71:8d:72:78:9a:67:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:44:2f:07:2f:37:fe:f7:f3:f9:b1:b0:1d:dd:
5f:2e:6a:4f:3e:5f:d3:26:ab:62:93:d0:fb:33:74:
ee:68:5c:ca:ed:b2:d9:58:29:70:38:b8:e9:72:4b:
c2:bf:3c:66:b9:0b:d5:73:ff:d0:92:89:37:ec:68:
49:f0:fd:e9:a8:d1:9d:19:26:d3:49:30:75:c9:6e:
66:dc:6d:b0:08:0e:7f:41:5c:45:40:2f:76:22:38:
5d:d0:a5:0e:cb:34:18:c2:1c:26:6e:47:6e:ce:91:
20:49:7c:a2:92:93:bb:02:c9:cf:85:fe:2b:fb:42:
5f:a9:25:42:4f:2a:58:d0:de:60:5b:1f:eb:44:a5:
8b:cf:2a:d9:c3:e2:c6:b4:f1:73:86:48:9f:e6:bc:
d9:42:03:c0:7e:20:95:0e:f8:a7:1a:78:c5:65:63:
4f:ea:3f:a3:e0:ae:3c:70:ce:eb:30:be:2b:0c:3c:
3c:41:51:2e:a9:a5:8f:e7:40:f0:5a:ca:0c:44:a8:
4c:74:04:8a:13:80:eb:5f:e9:5f:55:42:81:19:fa:
fd:67:b6:11:31:ec:3d:29:22:70:7b:46:9f:20:0d:
76:bd:ce:57:bf:44:43:15:5c:0a:f9:bf:6e:c3:b8:
9a:de:bd:da:85:05:75:c7:7b:5f:74:21:b5:f6:00:
d5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.68.0/22
88.218.40.0/22
103.75.68.0/22
103.76.128.0/22
185.173.144.0/22
Signature Algorithm: sha256WithRSAEncryption
22:09:a3:8f:b8:e8:5f:ec:5e:92:96:00:31:24:13:6c:e1:45:
7f:1d:a6:75:2c:2d:11:79:2f:50:ce:a2:d2:21:55:2c:61:5d:
98:87:b4:48:eb:4e:2a:17:4b:d8:d8:c1:14:2e:8e:58:41:3b:
4f:64:2a:30:1d:48:4f:01:37:f1:6c:e8:fc:43:af:a9:bd:ea:
64:db:c0:ec:fd:05:a4:39:61:c3:90:47:16:27:3f:94:78:de:
5c:6d:60:76:37:72:fd:96:1c:eb:45:37:e3:cb:32:6b:6c:01:
72:d6:2a:c4:06:88:bc:e8:93:af:4f:81:ed:77:66:25:f2:64:
48:15:4c:05:2a:f2:cc:c4:69:3e:b1:bf:14:d4:da:48:57:8f:
93:c4:e8:2d:e3:f5:e2:64:da:71:de:5c:7f:1e:49:00:e3:8b:
82:f5:68:11:8a:d0:0f:f3:61:6a:95:55:cd:43:2e:e4:0c:ec:
75:91:05:d6:b8:44:d9:db:92:31:b9:bc:a3:7a:65:1f:e3:03:
8d:90:e3:aa:32:e5:87:26:17:94:7f:f4:ed:3c:4e:54:23:e3:
ec:9c:fc:61:d2:21:15:72:6f:e3:db:99:6b:da:fd:30:3c:13:
46:d3:6c:85:53:d1:98:ea:c2:b1:d2:ea:10:53:aa:c5:86:16:
98:e8:00:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:18:35 2025 by rpki-client