Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qIAb4jY_IRvS9XgYrer5wNvhS9s.cer
File: qIAb4jY_IRvS9XgYrer5wNvhS9s.cer (raw, json)
Hash identifier: Rbhv0LqUUP2KvfX0eH0EuxF9HvAF5rmxpmZ9Tz7yGko=
Subject key identifier: A8:80:1B:E2:36:3F:21:1B:D2:F5:78:18:AD:EA:F9:C0:DB:E1:4B:DB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942068244C1C556EB5C55078FEED6F5BF4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:48:03 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 82.115.214.0/24
IP: 185.66.202.0/23
IP: 185.237.4.0/22
IP: 2a07:e3c0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:24:4c:1c:55:6e:b5:c5:50:78:fe:ed:6f:5b:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a8801be2363f211bd2f57818adeaf9c0dbe14bdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:36:85:87:3e:3f:7c:25:1f:b5:af:5e:7e:3a:
da:2d:e7:38:42:af:b8:d5:eb:0a:4b:1e:a6:0d:7e:
57:da:ff:24:f8:7f:a8:8d:87:c8:1e:4a:6b:4f:08:
7a:47:c4:d0:e8:db:1c:0c:c0:e7:7e:8b:dc:91:8d:
c2:4c:d1:2f:8e:10:c5:e4:2a:30:36:99:a3:8f:f7:
84:8a:8e:47:50:00:ba:92:4f:06:ff:3e:4a:3a:3e:
cc:f2:69:0f:d6:68:2b:d3:ec:64:6e:db:f2:54:31:
f3:19:11:9d:88:44:a3:be:79:26:52:b9:9e:8b:98:
95:a5:a2:e7:38:24:39:59:04:e5:7c:db:83:fe:13:
2a:cf:70:4e:07:32:5a:f2:23:67:63:dc:d3:26:09:
87:31:d1:df:8f:13:35:77:99:e3:0f:06:34:4c:08:
b9:36:ab:c1:e4:43:27:89:97:a4:78:0e:ac:61:b0:
05:27:7b:5e:9a:47:1f:7f:4f:f6:f7:29:fd:95:d6:
cc:c6:b6:57:a1:8f:3d:d8:a4:ec:6b:67:3c:d6:5e:
ab:92:c4:85:b5:eb:20:57:70:9f:ee:e7:13:a0:5f:
52:c6:0b:6b:ae:58:79:17:30:e2:77:27:37:fe:16:
6d:6a:e4:99:bf:3c:7f:8e:a6:cb:eb:7d:d4:ed:ea:
b9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:80:1B:E2:36:3F:21:1B:D2:F5:78:18:AD:EA:F9:C0:DB:E1:4B:DB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/811e73-cf30-494d-acac-8420ae9e0622/1/qIAb4jY_IRvS9XgYrer5wNvhS9s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.214.0/24
185.66.202.0/23
185.237.4.0/22
IPv6:
2a07:e3c0::/32
Signature Algorithm: sha256WithRSAEncryption
26:98:82:8c:b0:68:e8:11:7d:50:8a:c1:94:f5:a0:10:c7:e2:
f6:af:bc:97:af:9e:c1:46:0c:7e:4c:18:57:0e:c1:19:36:33:
1c:66:ee:bc:85:97:b6:0a:e4:b7:f0:9d:fe:8d:d9:1f:9d:af:
c4:8d:2f:f3:1a:bd:43:8f:04:05:2b:0a:06:24:a1:28:c5:10:
cb:9f:ec:e2:0d:3a:ba:69:e6:11:82:ea:79:e7:00:b5:6e:5f:
c0:b8:a3:5e:f9:09:7a:57:5e:4f:a1:f5:56:ef:f4:82:96:3a:
83:a9:02:1c:84:e4:10:7b:e3:e0:a5:e4:3e:a7:9b:f8:d4:67:
43:7c:5b:53:35:12:c0:7e:51:be:1d:36:a7:47:09:81:14:a4:
1f:0a:f9:f5:02:19:67:ce:95:9d:ae:5c:c6:3d:54:00:1c:82:
d3:83:6f:b8:15:a7:c5:c9:a7:8c:97:36:e4:22:bc:b6:e5:1c:
2c:9b:64:6f:84:74:09:e7:f5:c3:e0:b9:98:4d:39:15:b7:30:
bf:b5:f9:4a:ca:1e:de:17:79:13:0b:2e:1a:d3:0d:34:e4:51:
4d:2d:48:46:38:17:e5:fa:ce:68:7e:22:88:e2:77:91:a8:67:
e8:eb:aa:8b:0b:0f:bd:ca:b3:43:76:c8:ed:73:19:0b:83:4b:
22:b2:c6:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:41:08 2025 by rpki-client