Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YTXB97cUDIcufz_zRitO3GMddnQ.cer
File: YTXB97cUDIcufz_zRitO3GMddnQ.cer (raw, json)
Hash identifier: bF0IRzTIjfrFCNGIrS0O6pcMiDYTTlnVphnhU2BM5L8=
Subject key identifier: 61:35:C1:F7:B7:14:0C:87:2E:7F:3F:F3:46:2B:4E:DC:63:1D:76:74
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942067CA972EDADC461AF1BC5DFC4A9CC6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:47:40 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.231.244.0/22
IP: 194.147.114.0/23
IP: 194.147.148.0/23
IP: 2a0c:9300::/29
IP: 2a0f:4240::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:ca:97:2e:da:dc:46:1a:f1:bc:5d:fc:4a:9c:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6135c1f7b7140c872e7f3ff3462b4edc631d7674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:79:51:27:4b:8a:1e:15:ee:cf:e3:2f:d3:b2:
24:b7:dc:e0:ea:ff:b8:91:a0:15:67:53:bb:e7:8f:
4e:ed:8b:72:d2:21:45:60:70:88:81:5e:b2:83:a8:
1d:4e:a7:ea:03:b9:e4:a7:fe:7d:fd:61:50:04:8a:
28:09:88:2a:f2:68:08:7c:98:ae:34:fd:03:cb:f1:
42:da:85:44:3e:2b:4c:7b:c3:cf:67:eb:0c:9e:3b:
4b:26:84:40:ca:b6:19:6c:e1:e8:d7:27:5f:d8:eb:
f4:4a:ce:7e:48:3b:df:0a:06:2b:8e:37:e1:e4:61:
ff:a9:de:46:f7:02:64:15:46:b8:e6:52:af:fd:4e:
c1:2b:45:92:e3:27:59:b3:eb:39:fa:5d:d6:2f:77:
81:c0:7e:4d:33:fa:4f:5e:24:bb:36:95:84:8c:d1:
0a:5e:f2:c0:52:c6:91:9a:16:23:38:7f:04:eb:69:
66:1c:d3:b4:5d:f3:84:ec:61:f6:75:b9:74:aa:1a:
1c:47:fe:af:93:06:a9:5f:5e:26:fa:2d:c3:dc:bd:
3e:e4:1c:d1:0d:54:dd:c3:53:23:4a:cc:db:23:d1:
df:2b:e0:70:e2:07:39:d7:99:b2:c0:ee:17:f3:20:
c3:12:14:19:b0:15:24:4a:28:64:c9:7b:5c:71:5b:
ad:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:35:C1:F7:B7:14:0C:87:2E:7F:3F:F3:46:2B:4E:DC:63:1D:76:74
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/433edf-aaf8-4669-877c-e3781d8fe74c/1/YTXB97cUDIcufz_zRitO3GMddnQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.244.0/22
194.147.114.0/23
194.147.148.0/23
IPv6:
2a0c:9300::/29
2a0f:4240::/29
Signature Algorithm: sha256WithRSAEncryption
75:57:7c:d4:fa:c1:70:f0:00:5b:9d:9f:0e:7e:ef:83:3e:79:
0c:aa:d4:e3:86:bc:90:b8:60:76:8b:5b:14:d2:c5:df:f4:a2:
88:56:7a:8e:e5:6c:55:68:1d:61:22:c2:41:1e:d7:7f:0d:d6:
cb:cd:a9:b2:13:ef:0c:7f:3c:24:a7:15:35:88:b9:63:05:e6:
ae:ef:81:62:16:da:91:b4:a0:6c:fb:06:ab:49:08:f8:32:00:
37:36:dc:f1:48:cd:5b:fe:6f:9a:ae:61:5c:f9:23:c9:29:62:
8f:dc:e2:78:52:82:9e:df:0e:fd:95:a8:56:9e:c6:5f:10:59:
6d:26:7e:c8:10:62:10:2d:b2:9e:77:b7:fb:d5:48:47:c7:43:
be:ed:bd:2c:d3:64:b0:1c:f8:e3:6e:02:f9:d3:0f:ed:9b:4f:
19:b7:3e:fc:cd:a2:a1:93:10:25:b6:a3:7c:3c:6a:fa:89:b7:
07:8e:99:3e:d5:bb:a4:98:d5:b1:80:a3:3a:87:ec:37:1d:73:
e9:60:d1:67:d5:e3:1d:46:79:19:e9:98:5b:54:ce:96:2c:fb:
f0:8a:7b:f3:50:7e:c3:dc:6a:31:ff:0c:60:22:87:f6:c2:61:
23:6d:82:f2:3e:e5:3f:0f:ee:fb:b5:55:2e:17:11:18:55:fd:
47:f9:11:eb
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Apr 8 14:52:08 2025 by rpki-client