Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tkGHdrlK1_-vLBc7FQaqBWuZHlU.cer
File: tkGHdrlK1_-vLBc7FQaqBWuZHlU.cer (raw, json)
Hash identifier: FLzVXDhvXLGEwna6is7PwChKUO+yBaR2je5SWzXTUr8=
Subject key identifier: B6:41:87:76:B9:4A:D7:FF:AF:2C:17:3B:15:06:AA:05:6B:99:1E:55
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: AA44253BB1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/60/3ca360-2d61-4b32-90d0-1568c37f2b99/1/tkGHdrlK1_-vLBc7FQaqBWuZHlU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/60/3ca360-2d61-4b32-90d0-1568c37f2b99/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 15:06:44 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 185.134.144.0/22
IP: 2a0e:2ac0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 731287731121 (0xaa44253bb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:06:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b6418776b94ad7ffaf2c173b1506aa056b991e55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:bd:28:1d:7b:2e:ce:44:a6:df:0b:fb:33:2b:
5a:be:44:92:58:07:d8:df:34:5c:bc:17:28:d6:61:
4c:0a:17:1f:05:f0:2d:e7:08:43:e0:fe:02:93:d5:
2c:82:00:82:5b:f5:30:83:db:dd:a7:9b:b8:ff:a4:
fa:47:2c:fa:30:6a:22:73:2c:44:c4:3a:56:e0:5b:
4c:ea:fd:75:27:94:30:e0:62:a1:7c:bf:4b:cb:48:
b6:88:01:b2:8b:81:dd:15:03:77:54:88:c0:63:4c:
b2:fe:a3:9d:dc:d0:52:9c:ed:55:8d:17:8d:68:37:
e0:90:ae:89:6c:96:e8:1b:30:55:20:cb:e4:b2:72:
47:77:a7:43:10:52:f7:f3:70:45:0c:01:4a:c5:8c:
a7:d1:4c:19:ab:64:9f:99:bf:5f:7b:dd:b7:36:0b:
bc:43:18:83:a5:77:ec:7e:09:5a:2d:09:2b:4d:7b:
28:ad:1f:7f:01:bd:c0:45:35:6d:18:f5:c3:e6:73:
6c:e0:5d:3e:48:4c:2f:16:23:cf:9a:04:52:bc:7a:
b9:73:42:a4:a8:27:4d:16:28:e7:f7:d6:81:a2:df:
13:de:50:0d:e6:06:c4:22:48:72:81:7b:52:7b:f6:
6d:9b:b4:78:47:1f:33:68:23:a5:ff:12:2c:a2:b8:
ca:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:41:87:76:B9:4A:D7:FF:AF:2C:17:3B:15:06:AA:05:6B:99:1E:55
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3ca360-2d61-4b32-90d0-1568c37f2b99/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3ca360-2d61-4b32-90d0-1568c37f2b99/1/tkGHdrlK1_-vLBc7FQaqBWuZHlU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.134.144.0/22
IPv6:
2a0e:2ac0::/29
Signature Algorithm: sha256WithRSAEncryption
1a:9c:90:62:f5:c9:ba:0b:3c:14:28:0b:28:dc:44:7c:a5:ac:
3b:47:0e:99:38:15:d2:27:a4:75:5a:76:54:78:4b:1f:24:97:
e2:5f:21:f4:a6:ba:55:59:df:2d:37:1b:71:1d:bd:e8:60:c4:
f7:8b:c3:d9:b2:f1:44:c6:44:09:7a:e5:6a:03:b9:19:dd:b0:
4f:a4:82:d2:32:ea:7c:54:9e:00:49:f3:65:8f:6d:b6:98:71:
51:b9:94:d5:c1:c4:8f:da:f4:03:0f:ef:1a:fd:d2:6e:57:9c:
4c:cb:46:e3:23:08:1d:49:76:71:a7:eb:c7:25:26:07:b8:c9:
8a:92:1e:77:63:c0:64:fa:36:9f:f3:1f:e7:4c:90:bb:89:4c:
d9:a0:d0:25:09:a8:82:3c:fa:ed:9d:5d:fa:88:2d:59:70:20:
d8:3b:9b:fd:8b:e8:78:35:07:f6:9b:28:27:cf:bb:16:98:c0:
77:54:a6:4b:d9:cc:d4:9b:8a:f5:09:ba:55:82:29:3b:46:49:
02:55:09:21:ec:10:c8:b3:44:9a:4c:6f:c4:0c:38:28:58:cb:
df:d8:bb:52:50:c6:da:65:01:d5:b8:1a:05:de:5f:06:9c:a9:
45:e5:fb:99:f5:44:d3:54:7b:f1:a7:5f:39:00:99:b1:96:63:
a8:f6:c2:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:50:06 2025 by rpki-client