Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kK-Yc4OGWkr8Z0A7YNPzOJ9pX1s.cer
File: kK-Yc4OGWkr8Z0A7YNPzOJ9pX1s.cer (raw, json)
Hash identifier: MBum3Iv32CoDtc2/E8jGo3LuAm6Nb7H6YAaIlhkHOas=
Subject key identifier: 90:AF:98:73:83:86:5A:4A:FC:67:40:3B:60:D3:F3:38:9F:69:5F:5B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856EFADE73B428A40E3B82C5807CEC1868
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5d/7df77e-dcd5-435a-8832-a9148c1bf5f9/1/kK-Yc4OGWkr8Z0A7YNPzOJ9pX1s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5d/7df77e-dcd5-435a-8832-a9148c1bf5f9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 20:16:52 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 185.76.149.0/24
IP: 2a09:7f80::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:fa:de:73:b4:28:a4:0e:3b:82:c5:80:7c:ec:18:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:16:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=90af987383865a4afc67403b60d3f3389f695f5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:53:6a:57:86:20:4f:94:4d:31:93:6f:84:4e:
98:51:39:20:c2:2f:01:c6:4d:a0:1f:6f:2b:72:13:
a5:5d:68:3a:9e:b0:59:65:b9:9a:07:6a:0a:06:3a:
f6:d0:84:1e:03:a4:66:3c:b4:be:b8:66:4a:df:37:
b4:14:4a:7d:de:cd:bd:d3:2c:5e:d5:f6:de:86:42:
f8:52:9c:0c:36:59:4f:58:a0:68:26:c9:ca:f5:e4:
4e:6e:52:d6:94:3f:75:ef:4e:e4:aa:0c:4d:d6:db:
00:9f:59:8c:06:2e:a0:35:33:8b:aa:75:24:f0:3f:
42:c3:fc:3b:fe:20:0c:ef:49:b1:c8:e8:bf:18:c4:
d3:54:dd:20:b6:30:29:7a:51:0e:3d:a4:e2:f1:07:
16:b9:fb:bf:f6:16:ce:82:fa:06:26:23:a1:79:ae:
a7:d7:26:6e:ee:4e:01:7e:13:d1:9e:c9:0f:43:d4:
ca:ad:e4:6f:3a:33:ca:4a:54:4a:63:9f:1b:61:5d:
b2:1e:65:bf:af:4d:68:04:99:91:91:d4:67:ef:42:
d9:eb:9e:b4:03:64:ca:93:22:3b:28:78:a3:de:ae:
84:f9:81:f3:34:34:96:88:26:6d:70:6e:d5:79:56:
24:10:2d:9b:3b:fa:c1:b8:b1:30:2d:38:cc:d4:54:
d4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:AF:98:73:83:86:5A:4A:FC:67:40:3B:60:D3:F3:38:9F:69:5F:5B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7df77e-dcd5-435a-8832-a9148c1bf5f9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7df77e-dcd5-435a-8832-a9148c1bf5f9/1/kK-Yc4OGWkr8Z0A7YNPzOJ9pX1s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.76.149.0/24
IPv6:
2a09:7f80::/29
Signature Algorithm: sha256WithRSAEncryption
80:c8:e3:f2:bd:0b:f5:bf:a2:06:dc:fa:3c:e4:4d:63:32:43:
9a:e9:dd:eb:2d:0e:11:f2:c7:5b:bf:ce:9a:ea:d5:19:41:f0:
3f:d3:db:a5:c9:59:78:a8:45:12:ce:21:fa:d8:4e:88:97:37:
0e:76:f5:cb:10:9b:bc:07:e3:16:c2:59:ed:85:73:3a:80:1a:
31:98:ba:f7:2d:1c:bb:cc:b4:00:a7:dc:42:f1:97:e3:b6:c7:
c3:01:36:72:18:0e:15:6b:96:97:e5:0b:b8:d7:95:ef:a7:a1:
3d:e0:9d:49:f2:74:2c:96:bc:5c:35:87:77:ea:85:de:45:c1:
69:c8:97:f7:4a:56:b9:29:0e:52:06:59:15:06:69:cf:09:56:
62:00:d4:25:91:0f:d8:f3:c5:0f:d5:92:08:2f:f2:37:45:eb:
96:a8:ee:0d:20:df:2a:4c:7c:1d:e2:f1:5a:cb:36:c6:79:12:
f2:d5:12:42:59:52:90:a2:73:f5:44:c8:30:dd:94:57:a4:38:
91:89:11:c9:8d:00:cd:a1:bb:b6:7b:2c:3e:9e:71:c8:8d:49:
85:cd:d9:96:f9:86:5b:b0:77:68:92:86:c4:0e:ef:96:ec:8b:
d6:4a:e4:ba:c8:4b:98:02:04:01:f5:2b:05:69:a0:d7:52:9e:
3c:e6:3b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:49:12 2025 by rpki-client