Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dYKIAW-fjqLrv8kSLHXKobQrXJE.cer
File: dYKIAW-fjqLrv8kSLHXKobQrXJE.cer (raw, json)
Hash identifier: PURYrD4JdUl5xfEkwb1oNE7ZwRdr1C45Za62PwnmsVM=
Subject key identifier: 75:82:88:01:6F:9F:8E:A2:EB:BF:C9:12:2C:75:CA:A1:B4:2B:5C:91
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856D897B68D2CE229CFA73F64870A894BD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ef/72d2dd-5d7a-4b67-895c-ef73916464cf/1/dYKIAW-fjqLrv8kSLHXKobQrXJE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ef/72d2dd-5d7a-4b67-895c-ef73916464cf/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 13:33:24 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 45.157.196.0/22
IP: 2a0f:a2c0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:89:7b:68:d2:ce:22:9c:fa:73:f6:48:70:a8:94:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:33:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=758288016f9f8ea2ebbfc9122c75caa1b42b5c91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:81:55:4f:22:41:63:7d:f5:ff:35:f5:dd:c8:
26:2f:1c:2f:d5:24:c9:d8:f4:b7:23:6e:0c:94:fb:
c4:83:0c:21:85:9e:18:2f:17:10:a7:3f:6f:f5:7d:
d3:6f:01:06:5a:58:97:50:d1:64:ad:e6:57:d0:c1:
39:03:3d:51:22:5b:7e:43:8a:05:ff:22:5e:62:e4:
b1:25:63:a0:ff:67:58:71:ce:d1:d2:44:45:2f:4c:
60:7c:8e:ea:85:1b:ce:f6:4d:a2:e9:a4:13:00:9c:
3e:94:26:2c:d5:e0:a2:7d:9c:bf:86:9f:00:9a:39:
94:93:0d:3a:66:8f:0b:84:56:57:26:6b:99:ee:42:
85:b7:45:b7:b9:64:25:68:ed:22:4d:02:32:63:4c:
28:9c:ed:14:de:6b:55:98:19:72:02:46:7c:7f:b7:
0a:90:28:27:31:e8:60:00:e2:9a:dd:20:c9:a2:b9:
d3:90:9b:02:a6:5d:a0:4e:fe:c0:3e:82:4a:78:b8:
30:70:e0:57:63:56:64:6b:66:f0:49:84:72:34:80:
7d:c0:70:74:30:f4:3e:10:aa:2e:46:bb:b2:56:52:
97:d4:12:c3:cd:a9:87:88:38:25:96:91:51:d5:54:
19:24:ef:b5:0a:d0:0e:d1:0e:38:06:a5:0c:47:b1:
da:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:82:88:01:6F:9F:8E:A2:EB:BF:C9:12:2C:75:CA:A1:B4:2B:5C:91
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/72d2dd-5d7a-4b67-895c-ef73916464cf/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/72d2dd-5d7a-4b67-895c-ef73916464cf/1/dYKIAW-fjqLrv8kSLHXKobQrXJE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.196.0/22
IPv6:
2a0f:a2c0::/29
Signature Algorithm: sha256WithRSAEncryption
64:04:3a:8d:d5:b1:19:e8:34:b0:a4:82:97:d2:6f:46:c8:08:
d4:d9:b4:75:96:d4:9b:bc:63:11:47:94:38:e7:59:25:c1:49:
b4:35:da:70:39:69:c8:14:19:d1:79:50:02:da:19:6a:ac:f2:
c3:c6:67:09:56:7b:f7:7c:2b:f4:30:cd:14:8d:d7:69:a3:61:
b5:a8:41:f0:a4:c6:24:24:19:d4:b2:d6:3d:4d:d4:1a:99:a8:
ad:c3:ca:2e:fd:1c:6a:42:42:d9:dc:50:85:f1:a7:97:ef:cb:
57:f8:bd:33:c6:bc:a3:59:d1:2a:5d:30:0e:4b:92:44:0a:4d:
d3:23:a1:29:fb:b5:23:15:b3:45:90:a7:19:03:ec:6d:c1:21:
dc:e1:eb:dd:2b:dd:56:52:e1:b6:2a:5d:84:a8:07:cd:d1:46:
0a:3a:6e:40:8c:c8:66:d9:3c:e7:df:9a:9c:2a:fc:18:69:94:
81:59:9e:7e:b9:12:bb:40:c5:b6:c7:20:f1:08:88:3d:31:aa:
08:f4:e1:ab:ab:71:bb:0e:c2:a4:76:b3:fc:1f:5e:77:1e:0c:
a1:eb:57:fc:fe:13:35:e9:48:05:42:b8:c6:a1:8b:c3:e9:22:
ff:4d:ba:5f:09:ea:f6:b8:8c:33:31:3d:ab:7e:ec:e4:00:35:
b7:c9:4b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:10 2025 by rpki-client