Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/i5-at1BeNEcz-9IR9wQay_m49lI.cer
File: i5-at1BeNEcz-9IR9wQay_m49lI.cer (raw, json)
Hash identifier: 0V2CcN+5bEY3wydd81whdwUCGfX76mQQcMpx0iBO+jQ=
Subject key identifier: 8B:9F:9A:B7:50:5E:34:47:33:FB:D2:11:F7:04:1A:CB:F9:B8:F6:52
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856B632CAECC0E582F18FA2C7FB5F8B5A6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6b/a97415-2601-4110-8e41-22ad1bc99c75/1/i5-at1BeNEcz-9IR9wQay_m49lI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6b/a97415-2601-4110-8e41-22ad1bc99c75/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 03:32:19 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 193.35.224.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:63:2c:ae:cc:0e:58:2f:18:fa:2c:7f:b5:f8:b5:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:32:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8b9f9ab7505e344733fbd211f7041acbf9b8f652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:69:ea:b5:dd:29:fd:2a:d1:27:2c:c2:f3:d7:
57:6d:a3:d7:0a:73:28:75:40:f1:48:52:a8:8a:f1:
9b:d4:5c:50:45:8b:9e:59:c6:5e:71:15:7d:42:14:
42:58:f5:34:54:e2:b0:61:45:26:df:10:6e:b1:a4:
14:25:0e:b3:d2:1b:5b:0b:07:4a:c8:60:30:7d:91:
64:a7:59:d7:6c:bd:2b:79:20:9b:36:5e:26:c1:ec:
b8:6a:92:26:18:3d:9a:57:c8:5b:08:ee:10:33:75:
68:be:67:e6:f6:0c:af:e0:fb:58:03:d4:19:c1:ee:
55:8c:0c:24:a0:8d:52:bc:87:c1:95:db:c7:d7:90:
68:de:76:9a:40:d9:5d:35:8b:10:27:81:eb:9f:24:
16:75:e7:2b:c3:4a:68:60:f5:0e:18:54:27:12:a9:
9c:f8:0a:07:73:52:a3:37:86:af:ac:47:60:aa:b3:
c8:6a:6a:9c:d0:e9:55:80:f7:fd:54:8c:17:cf:df:
fb:32:85:6c:58:86:52:1d:7a:2d:e3:00:f8:10:9b:
48:46:49:3f:10:51:33:e0:c0:a7:cb:4e:46:8a:2a:
be:86:5e:56:48:75:20:32:55:e3:2c:b8:2b:a5:05:
66:a2:47:53:4c:5d:c0:76:30:6a:c0:19:99:9d:18:
f2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:9F:9A:B7:50:5E:34:47:33:FB:D2:11:F7:04:1A:CB:F9:B8:F6:52
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/a97415-2601-4110-8e41-22ad1bc99c75/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/a97415-2601-4110-8e41-22ad1bc99c75/1/i5-at1BeNEcz-9IR9wQay_m49lI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.35.224.0/24
Signature Algorithm: sha256WithRSAEncryption
41:6f:40:2f:04:b3:12:c8:c0:10:68:f6:8b:9e:66:aa:37:1a:
f8:f0:30:24:93:6b:3e:db:e7:fa:24:d8:84:79:24:0c:b4:ba:
b5:6c:eb:d7:ea:f0:b4:e3:f7:97:62:78:64:a3:22:3b:d3:4c:
26:f0:2a:28:a1:d3:c7:0b:d8:ec:ff:10:58:f0:86:8b:0f:9f:
94:bf:d9:ab:80:cc:c6:2c:6e:2f:7f:1e:30:54:34:d4:30:57:
30:13:bd:85:6d:93:69:c4:5a:63:b7:05:62:0a:61:67:fd:24:
c3:be:6c:d2:60:32:bb:c6:1b:01:5d:b1:c1:f3:86:8a:20:05:
b6:7e:36:a1:67:b4:c7:08:ce:69:f0:d7:09:ca:fa:70:82:d1:
82:5a:c1:ea:eb:29:7f:65:ce:8c:fc:4e:4d:f4:c0:bf:c1:9d:
5b:35:3a:f4:6a:e2:7c:98:03:50:fe:be:9b:2b:6c:e3:51:99:
c5:44:1e:90:ea:c2:68:95:75:c6:e6:7f:58:a6:5d:46:41:4e:
77:26:d6:73:43:cc:0f:de:e2:9d:79:7e:69:9b:26:c8:d1:d0:
88:18:47:29:6c:28:1a:39:ba:d1:c1:b3:f7:53:a5:dc:72:5c:
a1:32:d3:16:a4:0c:06:d4:d7:82:9c:c6:31:7b:44:0e:ff:09:
fe:70:27:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:17:03 2025 by rpki-client