Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mZGj6HndRdmEELBIuC4673R9nxM.cer
File: mZGj6HndRdmEELBIuC4673R9nxM.cer (raw, json)
Hash identifier: DLzRykoLHyfi5EhSkS1ix8r6yLC0KDq/XAPlgArKCAY=
Subject key identifier: 99:91:A3:E8:79:DD:45:D9:84:10:B0:48:B8:2E:3A:EF:74:7D:9F:13
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01873801BF3C7469E7ABA4443E6410BE96D8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7e/74f64b-1734-4a40-b467-dc26c2d98bc7/1/mZGj6HndRdmEELBIuC4673R9nxM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7e/74f64b-1734-4a40-b467-dc26c2d98bc7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 31 Mar 2023 14:10:51 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 2a06:bd40::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:38:01:bf:3c:74:69:e7:ab:a4:44:3e:64:10:be:96:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 31 14:10:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9991a3e879dd45d98410b048b82e3aef747d9f13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:31:67:fa:e6:03:6e:6a:3c:d9:84:e7:81:63:
d0:e2:f9:da:74:32:41:75:c8:bb:27:7f:2b:2c:03:
91:78:8f:be:cc:fb:72:ed:54:62:a1:57:1a:c5:83:
04:73:2d:01:99:32:f7:1d:3b:c4:5c:62:21:5d:6d:
2f:f2:ce:6b:06:b3:0f:fd:8b:d4:d3:ba:cb:9b:1d:
fd:15:73:e9:47:0f:34:50:8d:52:51:ac:4f:55:d8:
21:6b:0a:e7:db:24:7a:a0:a7:e9:cd:ec:50:a2:38:
8c:1d:37:44:60:33:3d:b7:a5:6a:47:03:60:2f:4e:
b7:22:0e:54:b4:ad:62:ba:27:9a:77:9d:e0:b0:2c:
77:76:3d:45:ed:24:d1:b2:99:a8:1c:e5:80:5a:b9:
a0:f3:13:de:7e:02:b8:94:b5:b6:0f:fa:53:8b:c1:
6d:2b:08:ec:d5:ee:0b:de:ff:a0:55:41:1b:89:68:
07:b0:be:19:23:df:ac:d1:20:f4:e8:41:ef:c8:4d:
a4:4b:f0:f4:e6:6f:f9:34:1d:e3:1b:ed:f1:ab:3a:
9f:df:43:00:11:e1:f6:24:37:da:d9:5a:82:64:3f:
56:fc:98:99:0e:be:ee:c6:c2:49:bc:f2:b2:96:d5:
cf:48:e6:13:54:6c:2b:39:2f:b8:56:35:05:d5:91:
86:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:91:A3:E8:79:DD:45:D9:84:10:B0:48:B8:2E:3A:EF:74:7D:9F:13
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/74f64b-1734-4a40-b467-dc26c2d98bc7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/74f64b-1734-4a40-b467-dc26c2d98bc7/1/mZGj6HndRdmEELBIuC4673R9nxM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:bd40::/29
Signature Algorithm: sha256WithRSAEncryption
7c:a9:f2:76:c2:8a:f2:ec:08:75:f9:07:77:48:5a:a0:48:3b:
59:c6:55:74:7b:b3:dc:13:b3:90:8d:73:06:06:13:4f:86:4b:
fc:2c:24:20:bb:d5:11:80:bf:44:69:06:91:07:46:c7:28:d0:
3a:b1:f9:13:96:14:b9:f8:ff:07:aa:e0:a6:cb:a0:84:65:b7:
fa:32:9b:9e:e4:1f:23:9b:a4:f8:05:50:15:08:b4:fe:3f:08:
94:6d:c3:3c:99:c3:ef:f0:b5:de:e8:2f:f8:15:71:dc:6c:6a:
cb:f4:34:5b:98:96:28:56:b5:f4:77:f8:f9:0b:ce:0e:8f:b5:
fa:f0:33:74:03:55:af:51:57:db:ec:ed:4c:af:a9:38:c3:75:
14:11:9d:c0:21:af:d4:c2:21:b5:16:cb:65:fe:2b:41:b8:65:
f7:ea:9f:95:eb:89:5a:69:60:72:cd:81:70:7e:1e:32:84:4b:
4a:b9:cc:47:bf:ba:2d:7f:05:d0:a2:54:72:47:e3:82:08:3c:
13:d0:a7:72:86:ab:53:5b:02:9f:92:a0:84:c1:e4:60:ac:00:
b3:05:e0:00:06:29:a9:fa:53:a0:49:0b:01:20:15:b9:ba:91:
bf:cf:3a:e7:99:b1:31:50:51:4e:2e:ca:3f:3e:1a:67:f3:67:
60:e4:b2:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:30:53 2025 by rpki-client