Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tN1tZY4UVx6Dn3gT2jHyIXQigY4.cer
File: tN1tZY4UVx6Dn3gT2jHyIXQigY4.cer (raw, json)
Hash identifier: RWSpl16+jKab85rGFI2Pdcm/Lu+Ln0gboZ9ClLUyn+Q=
Subject key identifier: B4:DD:6D:65:8E:14:57:1E:83:9F:78:13:DA:31:F2:21:74:22:81:8E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B3D82A7D0E25BD5B2513B96DABE4A5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:49:13 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.213.52.0/22
IP: 2a0b:8340::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:d8:2a:7d:0e:25:bd:5b:25:13:b9:6d:ab:e4:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b4dd6d658e14571e839f7813da31f2217422818e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:00:73:5d:bc:d4:c5:1a:3a:8f:6b:81:40:2c:
63:92:04:39:17:8c:ec:91:2c:92:b3:11:9b:57:c8:
24:40:80:33:56:6c:1e:29:53:09:52:7d:cd:0e:d6:
d0:e6:53:60:52:5c:df:23:d6:d4:ab:0c:c6:47:6e:
99:f3:f5:98:74:0e:f7:f8:9e:db:09:c1:13:fd:bb:
5b:aa:9f:df:5e:7d:a7:c4:98:94:e6:09:82:83:f2:
cd:82:78:10:06:c6:a3:12:cf:af:7a:d4:09:f8:53:
58:dd:3e:ff:29:f3:8b:a2:a7:39:c5:e6:6d:c8:40:
3c:51:50:ef:f8:2e:e5:cb:57:34:5b:33:10:85:f3:
8a:92:65:fb:86:86:26:9b:15:e5:56:99:14:8b:a9:
ff:0b:40:3d:eb:06:77:e6:66:e8:c8:37:62:d6:71:
c2:59:92:bb:05:00:d3:75:78:ac:4b:eb:b1:fc:43:
66:17:18:74:9c:c1:fb:17:3c:d8:a0:38:3e:ae:4a:
c2:31:bc:01:04:b9:d3:67:d0:c0:e8:d8:cb:e1:0b:
f7:27:7f:80:2e:fa:dc:d5:99:b1:3d:54:8f:90:a9:
d8:d8:db:c2:29:0a:27:2e:56:f8:2c:9c:b4:12:a3:
a4:f6:9d:ba:5f:2d:7f:42:90:05:49:0d:a2:47:9e:
1c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:DD:6D:65:8E:14:57:1E:83:9F:78:13:DA:31:F2:21:74:22:81:8E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.52.0/22
IPv6:
2a0b:8340::/29
Signature Algorithm: sha256WithRSAEncryption
87:28:61:7d:02:e3:c9:74:93:04:fe:ea:66:5c:06:23:bd:e4:
e3:25:75:ec:61:07:07:ce:21:32:21:05:c8:dd:07:de:13:09:
a5:79:b9:04:1d:9a:ab:b8:c6:33:28:22:66:fc:95:ef:65:9a:
c6:35:6d:6d:76:41:db:5d:1a:91:70:49:dd:0e:7c:20:90:62:
36:26:f4:2e:11:ee:b6:21:4c:c4:8d:24:67:7f:f0:ad:db:5b:
84:23:b2:5b:01:d3:40:99:31:9f:21:a8:fc:54:d6:5e:62:84:
78:fd:72:54:d6:76:51:b0:c7:6a:48:33:a3:70:e1:fc:f7:34:
30:2e:ef:6d:3e:6f:ac:22:a0:07:a4:10:bf:b6:ed:44:4c:67:
94:59:f4:ac:7b:58:e4:d1:91:2c:a6:5f:41:9a:ff:99:09:83:
0f:43:4d:bf:20:dc:a0:5c:f2:0d:c0:e2:7f:86:8b:01:8c:ae:
2a:11:ad:05:d6:3f:a1:3b:b4:4a:cb:50:08:27:7d:b5:ff:fd:
da:98:aa:91:ac:2d:a3:6c:39:f5:06:7b:88:4d:47:ea:54:a4:
fa:2f:e2:11:38:a8:89:5f:f0:df:21:84:a3:5f:14:21:34:30:
08:95:f7:92:07:53:dc:09:dd:7c:94:5e:b2:d5:52:0a:21:66:
02:03:fe:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 06:18:39 2025 by rpki-client