Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ppdJ-iM32zOnZHTrgSwDTjBQnSo.cer
File: ppdJ-iM32zOnZHTrgSwDTjBQnSo.cer (raw, json)
Hash identifier: FcBWLnrcd62z5qlxm1jPp2PsCWa+2H7uki48FAMNw1Q=
Subject key identifier: A6:97:49:FA:23:37:DB:33:A7:64:74:EB:81:2C:03:4E:30:50:9D:2A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B3B5EAB832E6D832B93EBD46B30582
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:49:04 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 156.118.0.0/16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:b5:ea:b8:32:e6:d8:32:b9:3e:bd:46:b3:05:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a69749fa2337db33a76474eb812c034e30509d2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:de:a0:ef:96:19:ab:16:48:df:59:8f:d5:60:
0e:3f:1a:4a:19:b5:c6:67:a6:09:a4:77:0c:45:2f:
aa:d7:d8:83:6e:bb:dc:45:6c:91:63:d5:c1:79:bd:
88:30:bd:a8:53:db:c7:b7:46:4e:ad:fe:dc:85:c7:
c0:b5:9f:ae:1a:6a:75:8d:cb:63:e1:59:90:d7:cf:
55:5c:bb:63:00:94:83:00:38:61:0e:5c:6d:c3:b4:
95:e7:52:a1:c6:ac:87:db:fd:48:27:9a:19:a6:33:
55:80:4b:1f:11:26:0f:c1:9e:b8:01:7c:96:12:16:
1b:7a:63:47:53:66:2a:3d:1a:c0:c1:05:af:63:26:
fb:4e:42:48:9a:22:84:d7:a9:21:a4:d2:d7:14:a0:
07:02:71:56:7b:63:87:2c:0e:6d:aa:ec:ef:5c:a3:
b8:30:be:e0:c8:02:cb:be:61:ad:b8:0d:45:f3:e3:
fa:d4:3d:8d:cf:36:28:09:22:20:be:29:d3:6e:86:
97:06:f2:f6:88:d5:08:e3:a5:be:e6:fc:b3:db:04:
3e:e0:07:a8:c0:b4:bd:b9:15:3f:45:c8:8a:55:0a:
a3:56:75:c3:6f:20:45:f3:dc:d9:c7:3f:4e:da:52:
4b:3d:cd:7e:eb:85:a2:75:30:ad:2b:99:34:2c:16:
16:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:97:49:FA:23:37:DB:33:A7:64:74:EB:81:2C:03:4E:30:50:9D:2A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b1bf57-679f-4564-b701-cb296708dec8/1/ppdJ-iM32zOnZHTrgSwDTjBQnSo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
156.118.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5e:20:13:2d:e3:50:71:30:3a:95:e3:cd:00:01:15:ed:a4:f0:
40:0d:a8:41:54:83:68:83:e4:05:40:e6:f7:ad:89:26:d4:73:
6a:fc:d6:12:c1:ab:8d:f8:21:64:12:13:9a:2f:69:d1:f6:9c:
18:4e:94:1b:eb:10:9a:fa:60:b9:2f:b0:74:58:22:19:a1:ca:
d6:f4:5e:fb:6d:4f:96:1d:69:15:59:34:cf:5f:b7:14:d1:df:
5d:ed:f5:d1:87:ff:69:98:ed:f9:66:13:aa:b2:12:0e:1c:1b:
80:cb:38:b4:31:03:2b:aa:6a:b7:26:e1:bb:35:91:cc:2e:ee:
75:6e:12:4c:3e:de:8e:f3:04:6c:0e:0f:6d:67:bf:e2:57:46:
36:c2:22:2f:86:e0:c4:56:cd:de:9b:cd:66:54:b8:44:50:03:
70:06:66:67:e4:91:1e:63:ab:dc:e6:a0:a5:22:9f:d6:86:34:
7a:fe:28:a6:34:07:cd:6f:86:fc:5b:7d:3f:37:2d:f9:67:61:
7b:d5:2f:10:46:c2:d6:98:88:65:c4:63:c4:bf:dc:20:69:fa:
0b:1b:73:66:cf:4f:32:90:db:23:06:61:0c:0c:6c:42:fe:d8:
df:36:e0:22:af:d2:7a:82:9f:28:94:6c:55:0b:de:1d:31:29:
d3:2e:c1:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:31:46 2025 by rpki-client