Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pENNZpHm4nwoLKo3r_kPK8VL8eM.cer
File: pENNZpHm4nwoLKo3r_kPK8VL8eM.cer (raw, json)
Hash identifier: OKkFOtZpRcejPhLGJiV+rv7bG904XnW8/E4wmblX5As=
Subject key identifier: A4:43:4D:66:91:E6:E2:7C:28:2C:AA:37:AF:F9:0F:2B:C5:4B:F1:E3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FDA59580065398AA00DCFDA04D05BB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:49:27 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.148.112.0/22
IP: 2a07:6040::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:a5:95:80:06:53:98:aa:00:dc:fd:a0:4d:05:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a4434d6691e6e27c282caa37aff90f2bc54bf1e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:05:0e:d0:70:9f:fd:fa:39:45:94:95:6e:94:
6a:cf:2f:51:d6:2c:65:ad:f1:35:7a:45:e8:74:35:
00:72:7f:f9:8b:12:19:37:6d:57:4e:7c:13:cb:cf:
e4:0a:29:eb:48:cb:66:d1:cf:6d:0b:bf:b6:9c:3c:
de:35:7a:b8:64:64:05:61:c9:91:fb:81:6e:b6:16:
60:1f:86:8a:c0:e7:0c:76:31:dd:da:b6:92:8f:92:
ac:c3:8a:83:dd:66:ad:4d:18:c7:c3:e1:60:18:e1:
04:67:84:37:c6:cd:a4:6a:8b:fb:f3:b4:47:7b:34:
df:09:5d:16:68:21:28:81:f9:2a:fb:13:2c:0a:1b:
6c:cd:42:57:b9:b8:2a:f0:bf:6c:0b:77:50:eb:1f:
12:19:90:1b:cb:26:83:b1:b7:d4:96:97:00:66:60:
1a:3d:e9:5e:c3:89:52:53:ab:20:2a:5b:5c:02:a8:
0e:9d:8e:27:85:2c:93:e1:b3:ed:a9:28:b4:9a:68:
47:47:86:05:7a:87:2c:85:d2:c8:5a:98:e2:5e:93:
3b:6b:a6:57:3a:ca:63:f3:78:74:45:9f:45:76:4a:
1f:e0:96:07:ba:27:01:ec:f4:12:64:c4:f9:5a:7d:
f1:20:c3:4f:48:87:e1:07:40:f1:76:23:55:b2:6e:
74:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:43:4D:66:91:E6:E2:7C:28:2C:AA:37:AF:F9:0F:2B:C5:4B:F1:E3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.148.112.0/22
IPv6:
2a07:6040::/29
Signature Algorithm: sha256WithRSAEncryption
55:87:68:82:96:7e:b8:67:ad:63:78:21:ea:6b:65:b9:1c:19:
d2:80:49:18:f9:8c:c7:55:6f:63:54:bb:13:0e:80:be:8b:aa:
7e:08:08:3c:65:f9:68:ce:d2:d5:eb:7e:d3:68:32:a8:fc:db:
2d:40:c7:22:8f:8e:6d:3e:2b:5c:fb:0b:62:de:6b:80:ec:9b:
ef:b4:9a:0a:47:0f:3e:5a:46:1a:7e:25:b0:62:1c:0e:44:5d:
b0:b0:21:74:29:b3:c5:ce:d1:8c:8f:59:7e:4b:89:29:77:37:
f7:f5:c2:34:ec:43:81:1f:13:1a:11:f0:8f:e2:53:fb:59:91:
80:a3:35:4d:d0:00:3a:86:27:9c:69:c4:ca:ef:6c:40:2e:9c:
3d:cb:c1:71:7b:b7:d6:7b:9f:c6:c6:c9:bf:bc:41:c8:13:05:
a3:e1:49:08:82:87:6d:37:c0:49:f4:69:94:2e:ab:9c:c3:e5:
da:c3:8c:f9:d9:74:35:b1:02:96:53:50:17:96:a2:9f:02:12:
cc:e9:60:a0:ca:ed:34:a7:91:62:6a:46:67:da:2c:da:0b:7e:
51:fd:9e:0a:b7:be:19:98:02:56:97:6c:c4:e8:69:41:8e:9d:
f8:0c:1d:4e:c3:7f:d1:85:48:bc:d6:f8:4c:fc:fa:37:75:16:
d3:3d:48:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:05:57 2025 by rpki-client