Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fOl4IyXTBUy2lWrSJwRTDekqDwU.cer
File: fOl4IyXTBUy2lWrSJwRTDekqDwU.cer (raw, json)
Hash identifier: QBeDqNmBdlyb/NqjU+UEtTKb+xGfsKPtwhgXnlS4D+w=
Subject key identifier: 7C:E9:78:23:25:D3:05:4C:B6:95:6A:D2:27:04:53:0D:E9:2A:0F:05
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221FF127AEB095775DF47DAD3CE07CC5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/fOl4IyXTBUy2lWrSJwRTDekqDwU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:26 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2001:67c:e0c::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:f1:27:ae:b0:95:77:5d:f4:7d:ad:3c:e0:7c:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ce9782325d3054cb6956ad22704530de92a0f05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:2a:0c:4e:62:08:a0:7f:1b:6e:4c:6a:32:d3:
25:67:66:83:8e:82:db:e4:15:42:2e:ad:fc:29:bf:
ba:f5:fd:91:6d:92:34:88:de:4b:f5:b3:3f:83:a3:
a7:c3:ee:83:55:d4:d0:5d:24:b3:61:6e:5a:c6:c9:
76:72:b6:b5:2d:47:92:1c:90:9d:9f:46:20:5b:65:
29:7d:ea:6e:89:71:71:71:13:d0:95:aa:f7:7a:da:
64:11:6e:9b:93:5d:34:04:45:b1:77:4f:bf:d0:94:
f1:3d:ca:a7:09:28:5b:8c:e4:d2:d4:a3:10:e9:bd:
92:86:1a:1c:23:67:cf:a9:5e:a2:24:06:4e:8d:2a:
51:88:bc:43:87:8b:46:67:66:46:36:af:30:10:c8:
7e:6b:ea:25:1a:b2:3a:c7:92:2f:5d:68:ce:5b:f0:
60:78:22:0c:9a:bf:6e:49:91:bf:65:25:f0:d0:64:
2c:c1:ac:23:d1:88:f4:90:e6:8e:07:eb:69:13:84:
d3:7c:c0:c5:d0:1e:47:53:d6:aa:d8:66:d3:1c:5b:
03:6c:ff:7e:43:93:1e:6a:08:d1:3e:df:b5:1f:d3:
b0:9b:3c:e1:4f:9b:5a:71:3a:35:b1:62:a8:4d:92:
e2:7e:df:fc:12:43:49:8d:e9:fb:a1:44:0d:10:18:
60:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:E9:78:23:25:D3:05:4C:B6:95:6A:D2:27:04:53:0D:E9:2A:0F:05
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/119402-b9bb-4374-bfea-988e770b015b/1/fOl4IyXTBUy2lWrSJwRTDekqDwU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:e0c::/48
Signature Algorithm: sha256WithRSAEncryption
a5:8c:8b:04:ab:aa:d7:65:a2:ae:94:b6:ed:7a:ba:ff:f0:75:
49:37:44:d2:02:b2:db:f1:8e:99:49:3b:04:95:c5:04:ef:ba:
eb:c3:f5:43:ac:04:f4:cd:d6:bf:1e:bf:22:33:13:3a:3d:90:
4b:8c:68:3b:2b:41:c6:d1:31:4e:a7:7d:8b:e5:52:09:1f:38:
f3:ef:8e:dc:67:56:f2:37:19:0d:c7:bf:02:aa:b7:ca:3f:14:
9c:21:31:02:29:e0:27:ef:31:fb:94:7e:55:ce:7d:5e:13:18:
38:cd:56:26:e8:f9:e7:16:e3:d1:07:95:ef:c1:f5:8b:2a:d0:
72:0d:03:89:de:21:05:30:cf:7c:09:fe:e2:47:c4:a8:a7:ed:
2a:fd:f7:d8:e6:f4:e3:8b:39:7d:20:7a:de:eb:2c:80:a9:62:
3a:6c:24:ca:22:b6:50:9f:8f:67:da:23:20:e0:8c:f8:a5:6e:
f3:48:2d:e9:43:5f:33:28:6a:fb:e9:af:59:80:0c:3a:f5:d5:
bb:cb:d7:f0:23:48:2b:7d:83:c4:04:8a:21:48:a6:82:03:dd:
3b:ec:74:70:37:75:83:37:72:17:33:a9:b7:e9:c0:9f:ac:c4:
e3:d4:34:87:c2:19:c7:f6:f2:88:b1:64:8b:27:43:e6:61:0e:
44:dd:40:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:28:05 2025 by rpki-client