Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/n8j-NR9KA69kbqrlfAOl3310Ktk.cer
File: n8j-NR9KA69kbqrlfAOl3310Ktk.cer (raw, json)
Hash identifier: WYreeQFOLxm5u9KFRpP/IQK3qBEEUx4HC2qe5Gtmiek=
Subject key identifier: 9F:C8:FE:35:1F:4A:03:AF:64:6E:AA:E5:7C:03:A5:DF:7D:74:2A:D9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856FB0816E88D639EB47AF9DB9DCC7E60A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0e/4e56aa-d5f3-4ab9-9638-24b58fcab690/1/n8j-NR9KA69kbqrlfAOl3310Ktk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0e/4e56aa-d5f3-4ab9-9638-24b58fcab690/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 23:35:16 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 185.159.244.0/22
IP: 2a07:b8c0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:b0:81:6e:88:d6:39:eb:47:af:9d:b9:dc:c7:e6:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:35:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9fc8fe351f4a03af646eaae57c03a5df7d742ad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e6:64:c1:73:ff:4c:4e:40:f0:35:a3:37:3c:
a5:c7:eb:9a:53:6a:0e:a1:da:1c:2a:8f:7c:77:e9:
e1:5a:73:01:57:b0:bb:f8:37:11:74:bd:91:cd:ed:
e3:34:30:75:4f:09:80:fd:45:ae:26:e4:96:7a:52:
6d:44:3f:0f:48:8a:9d:bf:85:73:d4:c6:59:13:d0:
9b:ef:74:bf:fc:a0:60:3b:69:f4:c7:e0:37:3a:13:
31:06:37:8d:f1:27:95:fa:b3:a5:f7:f7:ea:50:36:
fc:75:75:d7:53:33:7c:97:75:dd:4a:5d:5d:ab:12:
41:7c:a6:e6:6a:6a:f2:53:27:9c:02:98:bc:a4:77:
e6:de:dd:bd:13:ac:32:60:be:ed:63:bc:1b:bd:47:
c4:59:c8:ee:e1:25:ba:9e:e8:7d:7b:ba:52:f8:c5:
d9:bd:99:39:41:ac:e5:bd:a8:ba:37:3a:b0:37:40:
bf:30:a9:34:c4:29:e3:1f:69:e6:3d:16:e3:dc:07:
9c:ba:0b:25:90:37:90:07:2c:34:a9:4f:22:4f:f4:
fd:75:13:dd:01:68:1b:76:ff:54:e8:55:7a:9a:37:
d7:5c:44:39:da:a5:eb:ec:d2:11:d5:09:16:72:f0:
94:16:9b:54:4d:1f:d0:c0:a7:e9:b8:21:a9:b5:26:
e2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C8:FE:35:1F:4A:03:AF:64:6E:AA:E5:7C:03:A5:DF:7D:74:2A:D9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/4e56aa-d5f3-4ab9-9638-24b58fcab690/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/4e56aa-d5f3-4ab9-9638-24b58fcab690/1/n8j-NR9KA69kbqrlfAOl3310Ktk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.159.244.0/22
IPv6:
2a07:b8c0::/29
Signature Algorithm: sha256WithRSAEncryption
52:8d:98:c0:dc:ce:c4:84:8c:e3:2a:89:5e:0e:b7:4f:12:a4:
6d:b8:19:05:a2:73:5f:08:3c:e5:b4:12:e5:ba:cf:81:48:2d:
3d:09:46:f7:d1:54:ae:c9:5a:0d:7e:48:8f:df:ec:97:94:50:
24:39:27:41:53:8b:6a:1f:d6:9e:8e:f1:c6:2e:46:f9:bf:86:
76:e8:06:9f:8c:7d:2e:67:74:a5:b2:42:ae:b7:82:9b:10:2d:
31:4c:7b:32:bb:c0:19:87:1f:9b:df:da:7c:92:bf:a6:0b:38:
c2:fc:db:ef:e5:0c:4a:87:53:fe:ca:39:d9:16:90:51:a2:9e:
e3:7b:11:5c:de:68:b2:2b:c7:d6:b4:42:8d:0a:48:4d:b9:35:
b3:13:ea:90:d0:48:68:25:a3:20:e5:66:b9:bc:2c:ec:2f:61:
47:1b:b7:f6:eb:9a:7a:40:b0:2a:81:0d:44:d4:e8:45:24:61:
0b:99:f8:0d:55:ad:ae:b5:ca:2c:2f:a7:c5:91:ce:30:70:d5:
49:06:39:ab:57:a5:b1:93:3e:3f:fe:87:0e:67:77:c1:6d:80:
a2:31:52:ef:30:f1:98:dd:2c:76:90:08:ae:ed:9b:c8:a6:41:
5b:96:0c:e0:47:64:14:bd:cf:9a:a8:7e:84:c7:e2:ad:ce:5c:
c6:39:8f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:17:28 2025 by rpki-client