Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Z0UxRRZIP-J8BTDMuXB8N20g5_A.cer
File: Z0UxRRZIP-J8BTDMuXB8N20g5_A.cer (raw, json)
Hash identifier: V3NDqzn64vApoWgg7NbSYqkucInmwrZV3gyCNj3qmvo=
Subject key identifier: 67:45:31:45:16:48:3F:E2:7C:05:30:CC:B9:70:7C:37:6D:20:E7:F0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194236A37075D9267866FFDAC7BCEAF2B9A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:49:11 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.3.178.0/24
IP: 2a11:f640::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:37:07:5d:92:67:86:6f:fd:ac:7b:ce:af:2b:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6745314516483fe27c0530ccb9707c376d20e7f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:8e:67:02:70:7e:c5:c8:bc:bf:cc:5b:bc:cd:
d7:ed:e7:e6:f5:d5:c5:b1:9c:62:f3:13:e5:e1:20:
ec:aa:d8:90:d9:2c:e5:18:44:bb:7f:c1:8d:3f:d7:
7f:1b:a6:27:fe:f9:84:eb:79:56:de:e5:77:b4:7d:
e1:51:7b:a3:a5:7c:23:f1:f9:cf:ef:ef:4a:a1:30:
f1:55:34:8b:fd:7a:65:53:d6:0d:eb:1d:65:83:31:
ca:f9:6a:5c:e2:2d:c6:12:27:08:06:de:8d:95:bd:
96:c3:4a:62:fe:ec:0e:41:fc:ee:c8:7e:5d:0d:a5:
00:c1:58:8d:68:a9:a7:d6:35:81:55:8e:34:37:ff:
63:c5:4a:4c:5a:b4:3c:70:83:a6:02:74:96:6d:09:
e0:f7:37:a5:04:21:25:76:55:6d:9a:ee:cf:4c:2b:
24:93:74:53:8e:ad:7a:f5:c5:07:97:55:e1:47:a1:
66:14:8c:8a:bc:e8:90:ef:e8:69:f2:88:5a:29:66:
80:35:82:d7:07:6c:a6:c2:1d:7a:4b:9c:c7:94:c0:
1f:65:80:4f:55:53:9f:a2:1a:d7:f3:78:f3:e1:d7:
e7:99:35:f7:cc:0f:fe:ce:e2:26:15:65:7e:22:e7:
8a:a7:2a:58:98:db:3a:17:62:e8:11:5f:e7:df:d3:
0c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:45:31:45:16:48:3F:E2:7C:05:30:CC:B9:70:7C:37:6D:20:E7:F0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/fb48fd-4ec5-43f1-93cc-8654786e20a9/1/Z0UxRRZIP-J8BTDMuXB8N20g5_A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.178.0/24
IPv6:
2a11:f640::/32
Signature Algorithm: sha256WithRSAEncryption
3c:49:03:5b:b9:26:27:c4:7b:4d:43:54:60:dc:6c:35:f7:9f:
65:cd:12:e1:4a:6a:c8:85:89:93:06:ee:c5:fc:bc:28:ba:1a:
67:ea:20:b5:17:26:bf:6c:da:b3:71:25:a4:9e:bf:87:26:29:
72:1a:b5:f3:d2:3d:f7:d3:06:6a:3d:d7:98:86:dc:fb:cf:2f:
91:62:fa:e4:86:f7:13:d4:15:84:48:18:56:25:8f:2e:64:62:
ee:72:1d:63:09:ba:1d:3b:96:bf:8b:b2:86:92:05:f1:7c:8a:
fa:8b:b1:be:e0:4a:34:50:c4:7a:c8:2d:0b:8e:4e:de:33:0e:
ee:e4:77:c9:3c:5b:2d:40:45:8e:12:f4:38:ce:5c:6f:6a:88:
15:2c:8b:78:1a:65:f1:00:d1:8d:72:20:79:f5:f0:e7:19:49:
78:6b:bf:aa:9b:78:2c:35:83:87:36:4b:b2:c1:d5:4e:27:01:
58:99:76:c2:9f:70:01:8a:c9:17:55:2e:60:97:4a:28:1c:ab:
d5:7a:84:cb:0c:0f:aa:f8:0a:fc:11:9b:c3:b2:07:58:54:3f:
0d:c8:e5:c7:ac:95:e1:a3:80:a9:1f:4a:b3:ac:cc:0e:a9:9c:
d2:a1:c7:1c:d1:0f:83:75:be:8c:9f:86:c7:dc:4a:86:c9:59:
2c:1b:70:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:28:37 2025 by rpki-client