Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer
File: XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer (raw, json)
Hash identifier: xAWnjoV4LRdtR3+CZjWMm2NmNpLST/JXDQv4rrKqouU=
Subject key identifier: 5E:06:6D:E9:82:9B:76:1E:DC:E1:71:E8:EA:3C:59:35:E4:4F:4E:9A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266B8E4232D6525884C25D849A0A46A5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:49:30 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.120.173.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:8e:42:32:d6:52:58:84:c2:5d:84:9a:0a:46:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:49:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5e066de9829b761edce171e8ea3c5935e44f4e9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6f:45:13:df:15:1a:55:db:30:00:11:f4:2c:
59:cd:45:e4:a4:e7:e4:3d:7a:c2:28:6d:f1:f3:9f:
e8:31:7b:3f:e4:55:f2:8d:cf:03:85:71:04:cb:44:
8f:1a:20:6c:49:ea:f6:b2:62:9e:48:e7:b4:1b:c2:
57:ae:42:3c:24:ef:24:91:f5:80:75:1f:4f:8d:af:
91:45:8f:61:88:18:74:a6:03:ef:bc:fe:94:ee:2e:
60:fd:ee:ea:8a:a0:94:ff:fb:e4:cd:22:84:b9:b7:
47:01:56:e0:f7:cc:0d:a3:fb:73:02:17:ee:5a:a1:
72:77:8b:44:6d:26:a3:ef:ef:65:b7:59:68:05:cc:
fc:8d:af:53:3c:d3:67:54:e9:a9:f0:ca:15:7c:26:
79:e0:26:ff:8e:e6:4e:f5:b7:6a:b5:6c:6d:6f:20:
aa:32:e5:cf:84:4c:ab:ac:ed:91:53:06:61:50:a0:
9d:9c:9c:9f:f1:58:42:fb:f8:36:f2:31:2a:b4:be:
cf:57:50:28:c6:5b:9a:17:54:cc:0b:4b:4a:a4:41:
5f:d1:bb:46:3a:e1:00:c4:aa:a0:a7:b0:2f:78:2f:
e2:54:e1:be:24:f4:c0:c4:1e:e7:17:57:dd:55:5d:
22:63:5c:54:cd:d1:d2:0d:bb:39:6f:90:8a:2c:01:
0f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:06:6D:E9:82:9B:76:1E:DC:E1:71:E8:EA:3C:59:35:E4:4F:4E:9A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.120.173.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:a7:06:b8:cd:46:55:da:ef:e5:21:e2:64:6b:58:f4:26:10:
00:39:0c:e2:bd:a7:a9:fa:f3:24:48:c4:72:af:fb:1f:af:a4:
c1:6f:7e:d4:37:e4:31:a5:d7:8d:86:72:73:7a:39:be:6f:d4:
3f:99:38:5f:a7:b3:75:e7:db:8f:7f:37:27:d4:f2:75:f9:66:
ba:fd:a8:16:fc:cd:0f:2e:ba:f1:0d:d5:d7:e0:34:c4:00:4a:
95:17:96:02:06:71:23:d0:ef:6b:c3:4e:c9:e9:9a:ad:1a:ab:
81:18:b8:ce:81:10:ca:c5:f9:21:7a:e5:26:62:b7:f2:41:71:
59:81:64:41:f1:7d:64:3e:2a:5c:f3:a1:ef:90:36:e4:62:47:
17:7d:f9:e6:e9:05:bb:1f:38:d4:4f:ac:e1:1f:a6:c6:22:92:
d4:6f:c5:b6:33:aa:e0:50:23:2a:d7:e6:af:2f:52:5b:fd:c5:
67:d3:6f:d0:49:b4:fb:ed:78:02:f4:1a:47:df:9a:26:85:09:
fe:54:d7:cb:80:83:62:25:bc:e9:2b:43:50:9c:97:90:22:fb:
47:ff:5d:d1:51:78:87:22:ac:cc:62:cc:c9:bf:77:8b:53:c2:
c5:0a:1c:aa:73:7c:dc:75:e7:07:14:ea:27:c6:b6:07:b2:3c:
e2:93:86:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:26:39 2025 by rpki-client