Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer
File: brZPqOBaLX9WSs8omudXxATN2dA.cer (raw, json)
Hash identifier: YsVLLWhcCMPqdErWWE/5CfXlFDuthGMqYLB+zyXMBCk=
Subject key identifier: 6E:B6:4F:A8:E0:5A:2D:7F:56:4A:CF:28:9A:E7:57:C4:04:CD:D9:D0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B622C3A581ADD29D51DD00C1FD8E6D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:50:35 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 164.152.232.0/21
IP: 194.164.246.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:22:c3:a5:81:ad:d2:9d:51:dd:00:c1:fd:8e:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:50:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6eb64fa8e05a2d7f564acf289ae757c404cdd9d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:30:28:79:3a:0a:c1:4b:db:cb:a6:77:23:3c:
dd:bc:93:bd:74:b4:e9:60:db:42:ca:5d:56:0f:fc:
dd:b1:06:e0:cd:fd:21:82:ba:b4:82:06:35:74:c8:
24:e9:97:e4:21:ad:ea:ed:0f:0d:ea:d2:16:67:fc:
c2:39:27:ef:c1:2a:1c:7c:45:5f:a6:48:40:0c:65:
9a:5b:fc:a2:15:c5:66:c1:2f:31:6b:d5:f5:52:f1:
ee:2b:ce:0c:df:6e:d4:8b:51:e0:d2:88:4e:6c:f9:
95:e8:d3:e2:d0:7f:69:9a:d6:1e:ac:46:8c:05:18:
2e:fc:98:79:e5:e4:ff:71:aa:69:a2:ec:58:1b:bb:
8c:4b:bf:e8:f8:f7:40:51:14:ab:18:18:cd:b4:e9:
64:c2:53:e3:ad:9e:ca:aa:d1:c2:86:04:cb:2c:fa:
8f:f4:6f:74:cf:ff:ba:22:08:1e:4a:ea:13:43:21:
5f:41:a3:eb:b6:9c:93:c7:69:be:65:64:62:e4:59:
f2:84:23:fa:d0:dd:fa:15:eb:53:21:b6:60:14:b3:
ed:9e:03:b0:bb:6b:5b:55:0c:c5:94:30:a7:e0:dc:
31:6f:0c:81:1a:40:02:70:33:16:87:47:61:9f:bd:
c5:36:ba:dc:35:9c:93:c3:31:54:e6:be:07:d0:7f:
41:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:B6:4F:A8:E0:5A:2D:7F:56:4A:CF:28:9A:E7:57:C4:04:CD:D9:D0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.152.232.0/21
194.164.246.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:5b:09:52:00:61:e8:84:02:d8:5b:f8:98:a3:54:70:fa:ca:
cd:54:04:89:9e:5d:03:13:c0:35:ca:11:00:97:08:aa:d6:a4:
1c:ce:64:cf:80:8e:9d:40:c9:ba:d1:83:cb:99:bf:db:25:46:
0f:c5:e8:c5:4a:f7:e7:f2:12:7e:85:56:1e:52:0c:54:86:77:
e8:b6:91:72:57:82:c0:b6:03:03:83:15:4a:5f:f6:ac:ff:9b:
98:b1:32:48:9d:f9:40:24:14:83:a6:61:ad:b2:36:84:eb:18:
b8:59:59:e8:c1:f2:27:2c:17:0b:0b:e0:fe:27:e0:f5:25:9c:
6c:fd:47:06:0d:0d:39:7a:36:0a:5b:b8:9b:2b:bb:fc:7d:79:
b1:97:26:d0:ac:af:47:c0:ae:a1:b3:66:78:54:bf:8e:38:dd:
89:e5:49:e3:44:2e:8f:af:33:c3:67:ea:b8:9d:c0:31:aa:ee:
eb:77:c7:ba:3f:8e:1d:71:9a:a3:89:f6:6e:05:ff:22:de:24:
ac:65:54:21:93:81:2b:3e:72:0c:ef:43:ea:dd:86:60:a5:8d:
a9:bc:8d:0c:96:a4:26:26:2b:82:eb:07:ad:49:4a:e9:f9:68:
b6:27:e7:0a:f9:c5:d6:6f:e4:6f:6d:5b:74:66:79:10:dc:e3:
47:ba:90:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:44:18 2025 by rpki-client