Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/r0DPJba2uDvE-haThFv2N1l0Eso.cer
File: r0DPJba2uDvE-haThFv2N1l0Eso.cer (raw, json)
Hash identifier: Pw2BUjq80MGouY7aF5FFPJkqhMDXoBIl++1Abx7kDwE=
Subject key identifier: AF:40:CF:25:B6:B6:B8:3B:C4:FA:16:93:84:5B:F6:37:59:74:12:CA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856AF4E86ED47F63435BF8B804901B6B13
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/48/c6371f-7d1d-4e4b-888b-61fd0b521b62/1/r0DPJba2uDvE-haThFv2N1l0Eso.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/48/c6371f-7d1d-4e4b-888b-61fd0b521b62/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 01:31:53 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 185.215.114.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6a:f4:e8:6e:d4:7f:63:43:5b:f8:b8:04:90:1b:6b:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:31:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=af40cf25b6b6b83bc4fa1693845bf637597412ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:8c:9e:9f:f6:5e:e5:05:49:4f:d3:c0:7b:5e:
19:bc:66:49:62:15:c0:ea:77:c8:70:4b:a0:a5:77:
f0:92:e9:23:07:85:cb:4d:43:63:46:11:2b:5a:1f:
57:55:22:bd:8c:94:d3:a8:f3:05:00:dd:35:e1:74:
6c:9a:6c:3b:3b:86:74:8c:0c:4a:1c:85:c8:d9:3e:
5b:74:04:5d:a4:88:89:ba:17:53:61:2f:32:c7:46:
0b:ef:a9:e7:49:8d:64:f6:33:97:89:00:83:62:5c:
9c:60:3e:b8:40:8b:13:bc:39:de:c1:d1:1c:d2:20:
81:29:b1:9c:f0:4d:55:ca:56:04:d2:06:67:f3:0c:
64:aa:b6:7d:45:c7:05:91:da:8c:a1:67:42:0a:13:
41:6f:30:db:40:e7:dc:b8:cb:03:0b:d4:18:3b:83:
9a:c5:5a:b7:8b:b3:91:9e:90:1d:db:a7:ca:b2:ec:
a2:4f:14:c5:61:93:c9:31:e5:84:c1:b1:a1:62:ee:
49:8d:ed:2d:25:b7:2e:26:89:b5:75:9d:a5:ae:67:
64:e9:cc:37:7f:38:49:68:e8:95:fd:be:b6:85:20:
79:85:21:56:0b:b6:91:dc:ad:a3:85:b8:4c:71:85:
0f:54:0b:b9:93:f5:b1:86:a0:bf:c6:6f:96:aa:dc:
d7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:40:CF:25:B6:B6:B8:3B:C4:FA:16:93:84:5B:F6:37:59:74:12:CA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c6371f-7d1d-4e4b-888b-61fd0b521b62/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c6371f-7d1d-4e4b-888b-61fd0b521b62/1/r0DPJba2uDvE-haThFv2N1l0Eso.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.215.114.0/24
Signature Algorithm: sha256WithRSAEncryption
51:35:e2:d4:87:8b:5a:0e:97:5d:28:7b:78:a4:4e:fc:0c:7c:
f5:47:a1:c5:2d:2f:83:e9:25:59:15:81:e0:e8:e4:96:0b:25:
ef:87:78:51:66:8f:88:27:d2:83:d4:22:a3:e4:65:b7:31:44:
d2:d7:de:23:cf:6e:2a:0d:7f:68:cf:7c:6b:68:3b:23:55:55:
bb:f2:4f:19:c3:3a:3f:fa:e9:28:7c:8f:64:41:d7:3e:57:29:
21:96:5e:8e:97:fe:03:9a:4a:27:5e:b9:5d:67:03:7b:b0:3f:
13:2c:ea:8f:fa:1e:f2:77:6e:6d:4e:15:ec:36:a6:13:f8:3e:
a3:20:d5:13:a6:be:6d:23:56:89:ea:51:32:db:43:31:fc:a9:
7f:f2:7a:42:12:d1:93:33:80:74:6f:7e:b4:ac:8f:2a:60:1a:
c4:27:4a:e9:c7:54:74:78:7f:9b:82:a7:3b:7d:46:45:67:bb:
d3:2b:83:84:57:fb:dc:e8:77:4b:1c:66:25:b3:ba:b2:28:a3:
05:a0:95:dc:e3:21:79:86:e0:c0:1e:36:2c:26:41:57:b8:f2:
b9:f6:23:a3:ca:15:96:27:b3:a8:c4:31:af:f1:69:8f:0e:26:
da:a6:92:6c:7a:1e:b4:24:1b:ee:15:be:1e:53:bb:71:b2:de:
f5:d0:93:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:49:54 2025 by rpki-client