Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_qLamRGzG_Ww1hSRL9v5W_HXA1s.cer
File: _qLamRGzG_Ww1hSRL9v5W_HXA1s.cer (raw, json)
Hash identifier: lnYfHa6fS0Ivc5MVFr1xDedjI1OWuFSHbBcdPpjF57c=
Subject key identifier: FE:A2:DA:99:11:B3:1B:F5:B0:D6:14:91:2F:DB:F9:5B:F1:D7:03:5B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D7838029789854739D1A1A3601222A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b8/1f4d56-bdd9-4116-954c-2240d27402fe/1/_qLamRGzG_Ww1hSRL9v5W_HXA1s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b8/1f4d56-bdd9-4116-954c-2240d27402fe/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:48:34 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 195.35.100.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:83:80:29:78:98:54:73:9d:1a:1a:36:01:22:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fea2da9911b31bf5b0d614912fdbf95bf1d7035b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:da:b1:22:ed:93:12:f3:2d:12:35:95:dc:2a:
5d:9d:87:a7:dd:64:77:90:22:85:2e:02:48:d9:f8:
81:1d:71:f7:35:c9:7c:97:b9:bd:18:00:2d:2d:9c:
13:79:bc:49:06:9a:81:ae:a1:2f:dd:8b:70:de:1c:
15:64:e3:b3:0d:70:e9:82:61:fe:e1:e9:cd:e7:42:
09:43:56:f0:07:89:ae:24:18:9c:87:53:dd:49:78:
65:17:e0:87:50:ec:db:8b:25:37:f7:81:50:be:43:
16:e3:7f:8c:0c:53:96:b7:53:ba:9f:64:d9:96:3f:
d0:4c:da:27:f0:96:51:e3:22:cd:32:7e:24:d2:64:
db:66:dc:ea:d8:fa:1d:e9:dd:a0:b2:11:44:87:f9:
37:d9:8f:fd:23:bb:67:e1:2a:55:e9:72:1d:87:6d:
73:6f:c9:c0:e0:7d:b4:56:bf:cf:23:2a:f7:cf:17:
85:08:21:af:fb:e8:70:bc:e3:ba:e7:d1:ad:5d:57:
c6:1c:70:3b:aa:c4:b8:e4:bd:66:61:ff:41:90:7a:
c6:4d:64:36:6a:a5:cd:77:46:08:52:56:5e:5e:de:
99:5f:c2:65:f4:57:58:47:5a:38:aa:eb:2a:26:19:
64:a9:92:0c:02:a7:7a:ba:1b:6f:50:5c:4b:50:94:
ce:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:A2:DA:99:11:B3:1B:F5:B0:D6:14:91:2F:DB:F9:5B:F1:D7:03:5B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1f4d56-bdd9-4116-954c-2240d27402fe/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1f4d56-bdd9-4116-954c-2240d27402fe/1/_qLamRGzG_Ww1hSRL9v5W_HXA1s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.35.100.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:31:6f:73:49:35:66:d7:85:f7:19:02:15:e3:4c:6e:c4:52:
94:9e:e4:89:b0:5c:33:5e:fe:ce:b8:e0:70:97:62:12:ac:30:
4c:f3:6d:c8:a5:21:b0:4f:ae:fb:d2:5b:ca:11:aa:85:22:bf:
3f:8a:ee:58:f8:ed:34:0c:43:40:4e:8d:29:44:e5:61:54:cf:
78:8e:26:33:f0:8b:67:42:fb:f6:56:34:b4:58:54:33:f7:f1:
39:4f:a8:19:70:e1:2f:f3:24:b7:0e:11:27:2a:5b:86:7c:90:
ea:0b:bd:70:37:a7:e7:87:53:83:9e:54:e7:ae:65:b3:f3:68:
f5:c5:0f:a9:21:8f:9a:d4:59:5f:17:3c:48:16:6f:b8:30:db:
83:51:72:66:36:a8:53:86:63:bd:cd:78:c0:67:56:13:94:cd:
3f:c8:e0:b8:e1:c9:c8:94:9c:46:b7:bf:c1:ea:88:2c:74:d7:
94:20:ae:da:b1:0f:89:0b:da:1d:c3:bf:b8:3e:28:ff:4c:ed:
0c:ac:ba:ea:28:4f:2d:ed:54:92:8f:bd:62:3b:c3:ee:10:6d:
1c:db:0e:9a:9a:8c:2e:bb:32:0d:ce:c3:d8:47:04:5b:25:ce:
2a:3a:5e:24:c0:35:9f:fd:08:4f:c6:d7:d7:e9:4b:f1:1a:77:
5c:47:5e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:43:27 2025 by rpki-client