Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/m1M3vRp8XunFenOwozxhIZzSqcs.cer
File: m1M3vRp8XunFenOwozxhIZzSqcs.cer (raw, json)
Hash identifier: QvyE7BAkNTLlayxPj8D4KR8mioOlviMczoU3gfpuG/4=
Subject key identifier: 9B:53:37:BD:1A:7C:5E:E9:C5:7A:73:B0:A3:3C:61:21:9C:D2:A9:CB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C4A6D173945BD0DA1E4DB54F3B737
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:47:55 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 149.153.0.0/16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:4a:6d:17:39:45:bd:0d:a1:e4:db:54:f3:b7:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b5337bd1a7c5ee9c57a73b0a33c61219cd2a9cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:74:91:90:bc:e5:86:27:79:bf:e9:2d:4e:3b:
9c:6d:fb:91:a8:4e:04:02:88:28:5e:f0:69:b7:92:
ae:91:21:cb:91:3f:55:95:db:b6:5c:fe:51:8b:96:
a1:14:ef:69:99:9b:fa:b8:d1:a9:4b:26:53:1a:17:
28:7b:2a:24:67:cd:b9:8d:aa:8b:73:d3:47:f2:93:
e9:9b:4f:57:9b:dd:15:ff:1a:3a:3f:0f:20:eb:e8:
17:b9:e0:19:aa:81:5a:7f:0f:0d:82:4b:34:e7:35:
6a:99:48:27:db:b0:ae:fe:9b:e1:0e:20:33:37:cc:
0d:a8:a5:ff:42:cf:77:c0:84:90:88:79:7b:49:a8:
ba:e4:08:ab:da:69:1a:cf:ae:d3:84:73:f4:cd:65:
08:27:3f:01:ed:97:2d:b9:28:2c:6a:dd:51:57:78:
3a:81:f2:80:e1:35:71:45:2b:1c:bc:7b:e0:5a:c8:
49:a3:a0:83:30:f0:a6:77:46:72:39:ea:55:fc:7b:
34:11:59:6f:c2:4d:d7:d0:92:42:00:f2:c1:6e:36:
33:12:df:b3:a9:65:86:25:71:aa:f1:44:5c:3e:1a:
cd:2d:51:27:c7:ed:3c:e1:cf:42:76:7f:b1:1d:6e:
76:a2:57:94:ee:6f:d6:dd:44:1e:7d:26:be:75:a3:
16:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:53:37:BD:1A:7C:5E:E9:C5:7A:73:B0:A3:3C:61:21:9C:D2:A9:CB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.153.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6f:47:12:a0:d5:c9:eb:8e:ee:a0:b8:7e:fc:66:7d:86:0e:9d:
6f:c4:7c:66:2e:aa:f2:36:aa:4d:4a:cc:cf:ab:50:f2:80:04:
79:8f:ec:6e:73:5e:3e:c1:a2:12:6b:9f:a4:fe:2d:d6:14:fe:
38:46:0e:16:94:ff:87:eb:75:9a:07:a6:62:16:58:d0:f4:c8:
ba:82:9b:d4:a4:f9:90:3d:ff:51:f6:ad:68:98:77:32:f3:a6:
6f:6a:bc:80:41:49:43:a4:b4:4c:1b:fb:f8:cb:38:45:85:a4:
3e:73:db:e5:cc:0d:e7:32:90:99:56:15:1b:2b:bd:d0:94:aa:
12:4b:a8:07:29:69:0f:ec:c6:03:72:34:6e:7d:32:dd:80:2d:
f1:b4:b8:c2:8e:66:d4:86:07:41:94:6a:5d:a4:35:6a:5a:82:
e3:65:dd:18:fb:9b:4c:5e:b7:9d:c2:1e:75:d9:51:e2:a7:76:
6b:3c:37:d6:89:fc:f6:12:18:46:cd:28:c0:e6:0a:e3:60:64:
9e:97:a3:f5:df:b6:0c:3c:e5:ac:19:bc:75:45:be:93:34:35:
1b:c2:ac:36:bc:d9:04:47:a1:b9:09:ce:9f:08:42:72:a7:0f:
00:cd:10:e3:0a:8f:b7:21:af:d0:d0:75:f5:fc:a2:6b:05:8c:
a7:65:b7:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:09:57 2025 by rpki-client