Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fbujEpPJUGip-ZcayNOfo58e2g0.cer
File: fbujEpPJUGip-ZcayNOfo58e2g0.cer (raw, json)
Hash identifier: mVTAfWQQegQYHm23/QtLSnmmNViW6Jsu7E4qu14yqLc=
Subject key identifier: 7D:BB:A3:12:93:C9:50:68:A9:F9:97:1A:C8:D3:9F:A3:9F:1E:DA:0D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A4038BD3B4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2c/c6cdb2-ff83-491c-b396-e14de8c7f0bb/1/fbujEpPJUGip-ZcayNOfo58e2g0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2c/c6cdb2-ff83-491c-b396-e14de8c7f0bb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 10:00:25 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 185.118.125.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 704434131892 (0xa4038bd3b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:00:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7dbba31293c95068a9f9971ac8d39fa39f1eda0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6a:43:32:ea:16:d4:d9:f6:da:c4:09:70:82:
15:92:8c:2e:dc:f7:22:42:0c:ad:f6:ca:cf:95:4b:
c1:2e:40:16:cd:7d:cd:5c:57:29:95:bb:65:cb:d6:
db:41:84:72:64:a9:d2:bc:02:8b:70:a6:a6:92:ea:
a1:8a:0c:5c:7f:56:d3:42:1e:47:dd:d4:b4:75:75:
27:25:2c:3f:46:5a:54:67:41:3a:de:c6:68:98:dc:
7b:e1:67:15:73:94:1a:74:1e:7a:d3:e7:01:14:4c:
7d:ea:cf:c6:93:70:78:d4:f7:08:b4:d8:ff:67:77:
78:c5:75:b3:89:12:bc:ac:9c:87:88:81:6d:66:02:
b0:7c:59:b9:77:3f:02:74:66:4e:7b:77:42:50:74:
42:ea:02:08:76:7a:d1:bf:31:c7:f4:57:6b:59:2f:
35:d4:cf:86:0a:ba:cf:50:0c:15:3d:1b:a2:0f:39:
67:e5:c2:a9:5e:20:a1:c4:f4:6b:21:0c:ff:cc:bd:
2e:e6:6c:93:7d:76:03:61:50:ac:6c:ca:1f:8d:39:
6d:9b:ab:01:3b:e1:a6:e4:a9:c5:0f:ee:2a:f5:9b:
30:47:56:48:ea:c7:79:ca:38:6a:7a:ca:99:ec:35:
fc:01:ab:17:e0:6c:5e:5b:a1:fe:dc:f5:6c:6f:cb:
b6:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:BB:A3:12:93:C9:50:68:A9:F9:97:1A:C8:D3:9F:A3:9F:1E:DA:0D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c6cdb2-ff83-491c-b396-e14de8c7f0bb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/c6cdb2-ff83-491c-b396-e14de8c7f0bb/1/fbujEpPJUGip-ZcayNOfo58e2g0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.118.125.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:c0:fa:4f:29:8d:d9:02:16:e1:6a:34:c0:66:42:2f:58:30:
d3:0f:a6:6d:44:fb:af:6c:fa:17:61:84:e3:ad:b2:08:a2:e2:
1b:39:e6:4c:8c:f7:3c:c0:47:5a:66:9b:1e:c7:03:64:91:92:
e9:a7:5f:8a:ea:e8:bb:5e:93:a1:2c:4e:54:48:05:4d:51:15:
94:07:6d:26:44:7b:8e:75:a0:f6:a7:fa:45:da:14:58:34:3f:
03:7f:cd:c7:b8:36:36:a4:31:38:f8:f3:53:f2:2c:78:e3:9a:
2a:e5:5b:8b:0a:7c:9f:47:39:c7:c6:58:f6:c3:f0:3d:df:08:
92:68:fa:82:db:dd:08:ae:5f:3e:f2:f8:4d:90:50:a8:7b:b8:
ee:23:17:7c:b0:40:d8:5e:c3:13:15:2a:40:19:c1:ee:1f:e0:
25:36:70:bd:36:29:e3:e8:7a:1a:7e:19:b7:05:d7:96:f6:a4:
4a:ce:ed:a0:31:b4:d2:5b:de:82:cc:90:23:76:d5:a3:62:cd:
c6:b7:5e:a5:ce:e9:e4:e1:f0:49:24:27:31:e2:89:c0:15:25:
10:79:81:eb:b9:d2:99:f3:8e:12:ca:10:8a:43:5f:42:78:06:
de:a9:8b:fc:3c:06:20:07:61:02:49:26:31:37:85:29:f2:a5:
76:30:80:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:52:13 2025 by rpki-client