Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qBfHRT83fpy2-uXIk8Bno-HTUUU.cer
File: qBfHRT83fpy2-uXIk8Bno-HTUUU.cer (raw, json)
Hash identifier: bFiNrM8PkxCn67LUf6PyjkE3gd74cOuZT06YzTSH/3Q=
Subject key identifier: A8:17:C7:45:3F:37:7E:9C:B6:FA:E5:C8:93:C0:67:A3:E1:D3:51:45
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C5E62C33464D815B877EB0910235F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:48:00 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 62.85.160.0/19
IP: 185.210.172.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:5e:62:c3:34:64:d8:15:b8:77:eb:09:10:23:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a817c7453f377e9cb6fae5c893c067a3e1d35145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:38:a2:20:5d:64:49:7b:2e:f0:8b:a8:43:2f:
82:85:60:a8:c5:50:e9:a9:00:1b:bc:b0:cf:c6:48:
3c:d1:6d:40:f5:9f:a8:95:22:94:3c:d9:c9:ce:44:
16:79:23:b2:21:20:39:14:03:c5:c3:f9:11:20:7e:
78:07:e5:67:87:16:65:57:11:5a:e6:28:3d:6e:34:
21:43:95:8b:1f:39:d6:28:41:e0:12:f4:98:50:4c:
70:ac:20:99:dd:94:61:b2:f2:d1:c8:b9:c1:61:96:
09:a6:90:91:06:6f:f8:10:e1:d8:51:1d:e8:0b:18:
f6:1e:18:ee:e4:c6:ed:31:c1:18:a5:c5:d4:fd:01:
2a:9a:a4:55:f0:d4:6d:88:e8:08:ce:52:6f:fc:59:
8d:96:3d:00:09:b0:0e:66:c4:29:6a:94:ca:dd:2c:
21:3a:c7:f2:05:1d:03:71:52:ef:6d:ce:0e:56:26:
be:7d:bb:f5:a1:2c:39:3d:6c:87:cc:00:83:41:14:
8c:b4:93:b6:1b:ca:7f:cb:56:82:88:04:23:fb:f2:
2d:7a:04:b3:82:dd:00:92:29:9c:2f:28:4c:c9:08:
80:f5:bf:b4:6e:c9:ac:71:63:b2:f2:1c:1a:62:dc:
3e:82:b4:51:bc:18:55:e9:c5:3b:d5:25:2c:49:e9:
64:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:17:C7:45:3F:37:7E:9C:B6:FA:E5:C8:93:C0:67:A3:E1:D3:51:45
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/95aa24-e84f-4245-9227-dec68083f8f6/1/qBfHRT83fpy2-uXIk8Bno-HTUUU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.85.160.0/19
185.210.172.0/22
Signature Algorithm: sha256WithRSAEncryption
88:68:b0:cf:9a:14:33:76:4b:f4:f3:00:52:82:69:76:18:e2:
3e:ce:c2:cb:88:66:54:9f:e8:12:62:ab:54:22:c3:60:32:5e:
c7:6a:e4:0f:9a:f0:5b:0f:2e:9a:de:45:ae:6c:c1:12:aa:a2:
b3:e9:c4:a3:e4:2f:55:49:78:f4:f2:2a:da:82:7e:d3:00:b4:
3e:5b:8b:bc:10:48:b4:c3:17:b5:e8:5e:a8:3a:6c:f9:47:8a:
5c:58:70:ed:14:78:a9:81:f5:2e:35:37:9a:dc:6f:99:dd:d9:
66:5e:56:26:95:6e:48:26:99:d6:32:3d:be:83:52:5c:d4:78:
f7:26:38:27:7d:7b:40:3d:2d:02:34:88:66:1a:36:e4:6f:ab:
34:92:6b:7d:76:9b:8c:a2:83:c8:a8:28:7a:ab:59:29:01:d2:
5f:51:fa:d0:7e:09:49:21:a8:9b:e3:38:a4:b2:cb:0c:4b:67:
4b:ed:f6:3e:10:35:57:82:36:20:82:8b:e9:92:6b:5b:47:7a:
f7:52:f3:21:23:51:71:6b:06:62:21:ad:29:9d:10:08:de:0a:
c6:3d:cb:29:e2:ec:02:99:72:d7:c4:d2:40:1b:a8:79:e3:96:
54:1a:4d:a6:13:bc:48:43:50:63:35:95:b9:55:9f:6b:e1:91:
0d:26:41:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:15:08 2025 by rpki-client