Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/m0fuHxfJh967LAINi18ti9rb63c.cer
File: m0fuHxfJh967LAINi18ti9rb63c.cer (raw, json)
Hash identifier: dd38x1Y7oLvSVM154yXf5Ze2mueJ/UocT+5Gdn7/Yd4=
Subject key identifier: 9B:47:EE:1F:17:C9:87:DE:BB:2C:02:0D:8B:5F:2D:8B:DA:DB:EB:77
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C9C732BCD8A453F3A30A443EC3897
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:48:16 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 217.8.118.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:9c:73:2b:cd:8a:45:3f:3a:30:a4:43:ec:38:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b47ee1f17c987debb2c020d8b5f2d8bdadbeb77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:87:26:3f:57:8d:b8:52:db:31:11:4a:fc:50:
44:ff:da:3a:fa:b6:aa:05:b7:3e:34:0b:b5:ff:e8:
0f:3a:5b:54:36:51:cc:23:2f:34:2b:5e:78:e0:5f:
80:f5:35:20:92:a6:5f:77:15:9d:35:7a:23:57:af:
45:fd:9c:c5:62:87:e4:98:09:86:0a:ed:8b:fb:7e:
60:a6:ff:98:57:8e:90:e6:ff:c8:ce:a6:3d:67:b9:
ec:db:7d:cd:6e:37:4f:43:12:60:e0:39:86:f1:77:
38:be:e9:87:d3:35:55:35:be:a3:93:ec:d6:f9:22:
8f:89:2f:fb:37:12:29:ec:ea:60:f9:a3:4f:4d:0a:
7e:ee:8f:ac:2c:56:5a:49:f4:26:8b:99:49:17:59:
4b:fc:28:21:b5:1d:df:48:3d:dc:b7:dc:65:91:ab:
6e:96:e3:3d:15:d8:61:87:d3:4b:03:89:ad:97:2c:
7a:d3:d5:34:54:c3:34:bc:b5:c6:9a:3e:af:b8:80:
70:27:3d:bf:1f:0e:94:c0:1b:0c:e1:df:de:e6:c0:
96:e9:c2:28:b4:dc:3f:25:3c:8e:97:a2:9f:44:3c:
73:ab:88:29:ee:07:da:61:c4:2d:4c:68:f6:d6:0d:
2e:1a:14:84:6d:0b:2f:a3:ba:28:ff:0d:3a:9d:f1:
f9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:47:EE:1F:17:C9:87:DE:BB:2C:02:0D:8B:5F:2D:8B:DA:DB:EB:77
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.8.118.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:97:97:a2:23:ed:1e:2f:c1:8f:ae:90:cd:aa:7f:cc:6d:1c:
7e:e6:2a:7c:fc:3d:7a:6c:e9:fa:93:9b:b8:8e:6a:f2:0c:d5:
7e:1a:9c:4e:f7:f7:a0:8b:41:63:a7:9e:c1:d7:4b:7f:c1:2e:
a4:29:92:45:7b:50:67:aa:38:0b:a0:92:2c:e3:2e:3f:c4:d2:
f3:0b:81:a6:d9:1b:53:3d:5d:e2:cb:d1:94:fa:71:94:db:76:
38:98:79:55:b7:45:43:38:47:39:58:c5:0e:6a:ac:6c:8b:55:
f2:00:55:e2:0f:2e:33:2c:27:4a:51:8e:c8:72:0b:7e:b7:8f:
c2:7e:dd:fd:a7:b5:7d:33:c9:95:49:21:02:59:62:ab:b7:cd:
c3:06:cf:00:52:aa:9f:79:4a:c7:69:a2:33:0c:fb:b1:b1:c5:
8f:9d:0b:ab:4d:e4:1d:5c:d7:63:0b:5f:6b:5a:61:04:26:c5:
23:29:29:36:ce:36:0b:4c:8c:04:dd:fd:58:bd:f0:7f:30:78:
9a:51:38:f1:af:4e:ed:4b:d5:0a:e1:0e:ab:ac:76:05:92:82:
f1:39:74:a1:7c:1d:f1:96:c4:8d:a4:b0:0c:7b:fb:e9:80:67:
f0:bb:08:f2:df:84:8f:13:6f:b4:d1:67:e1:a4:dd:d3:29:23:
44:6a:71:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:14:22 2025 by rpki-client