Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9uwT1UthHsCkivrKEq4aAXb3PQ.cer
File: b9uwT1UthHsCkivrKEq4aAXb3PQ.cer (raw, json)
Hash identifier: PV9p108ajKmaDARA2KFjbKyOsTZdTcmuRU6S5pVdOuI=
Subject key identifier: 6F:DB:B0:4F:55:2D:84:7B:02:92:2B:EB:28:4A:B8:68:05:DB:DC:F4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC2DB2132B38DE0C999017E5ABE7E9327
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fb/bba3fd-7890-4e40-9e99-3d39c3a7e2e5/1/b9uwT1UthHsCkivrKEq4aAXb3PQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fb/bba3fd-7890-4e40-9e99-3d39c3a7e2e5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 02:29:49 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.224.168.0/22
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:21:32:b3:8d:e0:c9:99:01:7e:5a:be:7e:93:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 02:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6fdbb04f552d847b02922beb284ab86805dbdcf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c9:a9:4b:f3:7c:60:0f:c7:46:a6:77:51:66:
4c:87:17:74:b3:ca:ae:84:e6:2f:0f:81:0e:af:85:
88:52:9e:63:fc:5d:4f:49:67:16:c7:08:4a:76:7d:
7f:1e:fc:3f:0c:c4:0d:56:7b:35:a9:30:8f:4b:6c:
f8:a5:24:36:44:6e:1a:38:21:34:34:7c:f6:ce:5e:
29:6d:72:38:cc:2a:5b:98:09:1c:7b:1d:75:c7:ea:
08:95:c0:f1:8f:6c:e5:0b:2d:83:ea:cc:c4:3a:0b:
9b:15:db:63:36:e9:23:03:8f:cb:44:f4:8d:fe:b7:
5d:d6:0b:5b:7f:87:28:5e:24:b2:f6:39:fe:00:df:
e0:81:61:92:02:27:a7:4d:62:b6:e0:65:95:fc:30:
6d:ae:9e:e5:8c:e5:6c:05:77:4b:36:f3:22:21:e5:
5d:25:21:9d:33:43:e2:91:06:7c:99:28:c8:3f:88:
fc:78:33:89:81:8d:70:6b:fd:74:d0:3e:29:af:37:
4b:bd:0b:1a:13:04:a2:2f:8d:c2:b3:4f:95:b2:d3:
f6:51:f5:2d:58:e1:b3:d8:ab:05:de:72:c2:0d:95:
fb:70:8a:4f:95:53:4d:78:50:c7:a6:6c:e6:4b:1c:
f5:68:30:bf:08:08:a2:63:a3:28:e3:d5:24:d1:85:
63:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:DB:B0:4F:55:2D:84:7B:02:92:2B:EB:28:4A:B8:68:05:DB:DC:F4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bba3fd-7890-4e40-9e99-3d39c3a7e2e5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bba3fd-7890-4e40-9e99-3d39c3a7e2e5/1/b9uwT1UthHsCkivrKEq4aAXb3PQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.224.168.0/22
Signature Algorithm: sha256WithRSAEncryption
89:b5:11:ca:21:51:3b:bf:5a:6b:a0:b9:0c:05:a6:87:ab:c0:
e0:c8:2d:fc:de:20:2d:1b:e8:6a:bf:ad:e5:ca:94:c4:ad:93:
f6:f0:9a:89:06:38:be:8b:6c:22:17:ba:73:42:5e:b9:05:22:
9e:bc:8f:71:ca:30:f6:03:49:76:60:29:e6:68:96:6c:c7:e9:
06:23:68:b7:e9:1b:40:f0:8e:48:b1:db:99:5c:3c:f5:81:6f:
0c:71:ee:fa:44:cd:76:25:7c:e8:8b:1d:10:59:33:5e:a2:cf:
9a:fd:ce:c7:29:de:59:d1:e1:59:62:5f:fd:9a:52:2a:eb:d1:
10:36:1e:16:e1:b3:94:fc:84:1c:c3:d7:13:34:f6:42:a5:76:
f2:07:65:c2:cb:37:67:d3:1b:3e:3c:7f:56:ff:b1:7f:03:e8:
5f:d7:bf:cc:cf:a2:76:46:2a:06:50:1e:65:cf:d6:48:96:0e:
3d:d2:6e:a4:9e:c2:c6:43:3a:45:9a:02:02:85:2e:c5:c3:e6:
e5:bf:80:b7:b8:39:a5:2c:7d:d5:1e:bc:eb:89:e9:41:4b:27:
db:8f:12:84:85:75:a7:49:37:68:dc:63:29:1f:22:c0:e7:a0:
e0:0b:7d:1e:85:14:08:64:9f:49:c0:b1:28:75:94:ff:41:8b:
d3:53:90:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 22:55:49 2025 by rpki-client