Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/i5k5NI9Nv9sQH096N8ecBHR9DQM.cer
File: i5k5NI9Nv9sQH096N8ecBHR9DQM.cer (raw, json)
Hash identifier: z6QwPRWjgbg068dgcwBP/SmKlpvvQFvrwoyQdgkQ/Hc=
Subject key identifier: 8B:99:39:34:8F:4D:BF:DB:10:1F:4F:7A:37:C7:9C:04:74:7D:0D:03
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC80225C23B480C1C577F559014A0CAF0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ad/597190-d6ef-457d-b46b-ee5c6aeca3e9/1/i5k5NI9Nv9sQH096N8ecBHR9DQM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ad/597190-d6ef-457d-b46b-ee5c6aeca3e9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 02:30:33 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 91.196.7.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:25:c2:3b:48:0c:1c:57:7f:55:90:14:a0:ca:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 02:30:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8b9939348f4dbfdb101f4f7a37c79c04747d0d03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:17:06:87:db:6e:a1:7d:3f:b5:1d:d8:71:93:
20:1a:eb:6c:0c:af:0b:93:52:b1:b2:37:36:8f:26:
a8:f3:c5:68:6e:04:9c:15:d0:0f:d3:3d:ab:36:16:
e0:fa:04:ef:48:58:35:6d:af:71:04:6d:af:04:34:
e0:57:33:1e:f0:5e:fb:88:b3:5e:7f:2e:f5:24:75:
d8:b0:7c:a3:40:91:78:43:1a:c0:ac:48:ec:2b:c2:
98:ed:c0:b9:9b:3c:5d:4a:81:83:ab:b3:5b:0b:b8:
91:d0:cb:f6:61:a9:f6:7e:95:c0:cc:93:1d:13:c9:
f2:74:60:a2:2a:88:20:7a:d3:f8:a5:7c:b5:65:7b:
ec:10:2e:6c:5a:0d:28:c1:3f:44:57:42:a3:6a:a7:
91:f3:c6:37:4f:d1:5a:20:25:64:dc:c3:cf:ee:ae:
97:eb:88:27:43:00:fb:11:75:92:45:cb:67:42:13:
b6:ba:5e:cf:97:a1:8b:e8:f6:35:b4:de:6d:a1:57:
92:ed:51:d0:be:a8:1e:0c:38:e8:5c:5f:0f:2c:94:
f1:ce:21:3a:c6:f3:dc:01:2b:80:cc:33:ea:e6:97:
6f:92:60:86:5f:36:35:45:c0:b3:37:7a:d8:c4:05:
fa:6f:8b:68:f9:c4:05:39:28:0b:35:67:7b:33:16:
b1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:99:39:34:8F:4D:BF:DB:10:1F:4F:7A:37:C7:9C:04:74:7D:0D:03
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/597190-d6ef-457d-b46b-ee5c6aeca3e9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/597190-d6ef-457d-b46b-ee5c6aeca3e9/1/i5k5NI9Nv9sQH096N8ecBHR9DQM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.196.7.0/24
Signature Algorithm: sha256WithRSAEncryption
93:e8:76:f1:4d:2a:b5:6b:1c:0d:5c:52:60:bb:85:5e:d2:4f:
d1:f8:4d:7e:ac:78:47:f0:1a:1f:29:1a:8f:28:36:dd:ad:99:
61:75:59:a5:8e:62:ab:56:eb:45:d4:fc:ee:9d:06:e8:52:ad:
4b:c0:fe:69:ac:29:b1:5b:3c:99:5a:bf:ae:38:aa:a4:d2:f4:
db:e6:06:b8:34:7f:49:5c:f3:e4:75:7f:1b:e7:d7:87:d0:ac:
4e:b8:89:df:26:cd:7b:18:2c:7a:25:07:d8:79:02:92:3f:fa:
57:bf:b5:5b:6b:a5:18:4e:46:9e:0f:3b:79:13:d2:1b:99:d7:
2b:54:af:99:5d:00:ca:67:ed:16:3a:f4:ee:7f:3f:a1:c8:d4:
65:3c:ad:2f:ac:60:7d:f5:48:f4:4d:24:00:dd:7a:35:fe:c9:
fd:84:6b:d0:a4:23:b3:e7:6b:ba:45:5d:82:bf:dd:dd:78:b0:
33:87:46:a6:9f:65:50:d8:21:1e:fe:cc:7e:a6:de:ba:c2:35:
bd:bf:9a:f7:96:7f:1f:e2:4f:cb:0e:c9:87:f4:75:ba:dc:83:
1a:0c:db:01:5f:42:cb:98:64:6f:ea:5a:3d:e0:7f:ad:ac:20:
ec:4a:fa:9a:db:55:cb:b4:39:34:b8:ca:28:d6:48:0e:d2:fe:
53:a0:fe:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:20:41 2025 by rpki-client