Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer
File: kar8rbbFKYTjVYnrd1jwUKrO_HY.cer (raw, json)
Hash identifier: V4FdZChAlC3ObcO/WVu68WS03Jw+N4E/esvstrce2gs=
Subject key identifier: 91:AA:FC:AD:B6:C5:29:84:E3:55:89:EB:77:58:F0:50:AA:CE:FC:76
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D5CB53A2F89B3F30E82CF4DE9CDA06
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:47:49 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 46.226.120.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:cb:53:a2:f8:9b:3f:30:e8:2c:f4:de:9c:da:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=91aafcadb6c52984e35589eb7758f050aacefc76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:27:25:f9:02:8a:1f:41:aa:34:9d:22:64:56:
a7:f4:cf:6d:fa:fa:54:9b:bb:92:68:d6:6e:56:9a:
88:24:fc:25:48:cf:c1:b1:7d:94:ee:4d:b4:e5:f9:
07:c2:55:bf:7e:a5:a4:c9:d3:eb:8c:f0:43:95:69:
cc:f4:07:8c:50:27:ef:de:e1:93:ff:48:d1:2f:4b:
6f:8d:47:71:6c:ce:2a:66:96:87:a5:e4:63:d2:07:
31:26:7f:bf:d9:f0:42:19:45:98:47:95:31:98:5a:
df:eb:07:e3:f1:3e:73:15:a7:9a:0f:98:93:d2:1f:
87:ae:3f:ea:00:af:71:2d:03:2d:1b:3d:85:3d:ac:
88:a0:ec:e0:d2:04:0c:ca:34:c6:d4:5d:44:a9:ed:
02:86:78:b1:59:fb:87:8b:e1:45:2e:ed:e8:8e:c0:
c7:b0:5b:1d:1f:35:cf:cd:d2:41:02:d1:6c:bb:97:
b7:d6:8e:ea:83:b4:99:96:1f:ea:3c:50:51:e9:b8:
b0:39:ec:ad:44:ca:fa:36:f5:c8:d3:06:52:ea:a5:
09:74:cb:47:04:6d:6f:00:4e:0c:56:43:5b:93:f1:
cb:a0:0f:c6:f1:02:dc:56:a7:ce:17:42:26:4d:76:
1e:5d:f4:c3:2e:a4:36:a8:ac:14:2a:9f:e3:a5:4e:
8c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:AA:FC:AD:B6:C5:29:84:E3:55:89:EB:77:58:F0:50:AA:CE:FC:76
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.226.120.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:6a:80:58:71:f6:bb:70:46:13:aa:82:de:c3:9e:78:0f:dc:
45:40:58:a7:30:7e:4a:84:58:f8:8a:68:fc:ef:fa:34:8c:0f:
46:22:fb:a4:16:3a:88:b0:7a:c1:55:58:52:9f:3c:42:60:99:
f7:83:eb:26:82:96:50:1c:26:be:34:83:37:27:63:11:0f:84:
01:ef:89:dc:88:9a:83:cf:47:92:52:a3:b2:48:97:7f:bb:08:
e2:4f:c8:24:be:c7:74:bf:df:33:04:cd:ae:6b:5c:6a:e7:e9:
32:dc:0d:91:fd:5f:e1:83:a3:5e:07:86:97:9d:3c:8c:2b:3e:
2c:3d:90:b1:7a:38:00:4b:3c:45:8d:6a:11:24:e1:9c:2e:ad:
e4:8c:9e:b2:6d:b9:4b:78:f2:7a:0c:ff:82:1e:23:ef:a0:74:
fd:8d:a5:2d:b8:8c:62:54:34:8e:70:8a:9a:c1:bb:bb:6d:c1:
7c:74:12:0d:9d:1a:87:06:39:5b:a3:7c:10:be:e7:f9:40:9a:
b8:b2:b1:63:a9:95:72:b8:e9:c2:de:24:17:9c:94:6c:9f:32:
d3:9a:8e:11:13:fd:9c:77:ad:54:c3:1d:70:da:d9:78:d0:48:
a8:25:83:f7:c7:07:d5:62:1c:66:e8:a6:c6:c6:36:21:dd:ac:
da:35:84:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:31:06 2025 by rpki-client