Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tx2wYltK6IrGpYSzacz_cNmENq0.cer
File: tx2wYltK6IrGpYSzacz_cNmENq0.cer (raw, json)
Hash identifier: rkUL3G04QG5wSfBLg2kVFgGSJlEnC5cShV9qYemMLw0=
Subject key identifier: B7:1D:B0:62:5B:4A:E8:8A:C6:A5:84:B3:69:CC:FF:70:D9:84:36:AD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856ED409B4604050EADE45CDA47811DFDA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/42/04b923-66f1-4ecd-9c80-1d024eb358a5/1/tx2wYltK6IrGpYSzacz_cNmENq0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/42/04b923-66f1-4ecd-9c80-1d024eb358a5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 19:34:28 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 178.212.79.0/24
IP: 2a11:eb80::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:09:b4:60:40:50:ea:de:45:cd:a4:78:11:df:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:34:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b71db0625b4ae88ac6a584b369ccff70d98436ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e7:83:b7:37:b8:54:5b:2f:02:f8:c7:1e:fb:
f9:fe:ac:ad:61:c8:66:92:b4:a1:74:59:5d:ce:11:
e7:4d:a1:43:d3:3c:4c:48:7e:4e:79:81:ad:f6:2f:
d4:56:90:88:b9:43:7c:59:7b:52:c9:e2:07:73:d3:
9c:1d:ce:57:a1:8c:56:53:68:29:14:41:d7:40:3f:
d5:21:44:66:fd:31:6b:3a:36:44:1a:dc:74:b7:eb:
9f:2e:71:93:a0:78:80:5c:18:01:2f:de:73:3c:42:
46:b3:bb:29:fd:9b:4c:3d:cc:5f:ad:b8:b8:02:6a:
61:0c:07:d7:d8:59:0e:0c:24:00:dc:8f:c1:f4:5f:
9d:76:5e:3c:3a:f3:5c:fd:c6:a2:ac:c3:95:db:40:
2a:25:b0:ff:cf:e7:c4:d4:1d:bb:aa:e1:91:1a:10:
f8:c6:48:7c:06:ef:41:57:4d:3b:73:6a:36:93:ff:
dd:af:0e:ad:8a:02:de:6c:2d:7d:de:67:f3:70:42:
eb:c5:c8:80:67:b4:0b:80:38:07:ea:ed:4e:8f:22:
6f:d3:e5:50:0a:fd:a2:f6:42:3c:d1:2e:0a:0c:c0:
62:b2:b8:3d:b6:0f:c2:7c:69:a1:db:af:f6:a8:54:
6e:76:79:c4:69:cd:7b:05:5e:d1:0c:7e:40:f4:01:
22:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:1D:B0:62:5B:4A:E8:8A:C6:A5:84:B3:69:CC:FF:70:D9:84:36:AD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/04b923-66f1-4ecd-9c80-1d024eb358a5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/04b923-66f1-4ecd-9c80-1d024eb358a5/1/tx2wYltK6IrGpYSzacz_cNmENq0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.212.79.0/24
IPv6:
2a11:eb80::/29
Signature Algorithm: sha256WithRSAEncryption
73:b7:b4:2b:3f:c6:99:ca:d9:7f:eb:f5:13:3d:83:8d:6d:2d:
94:2d:26:01:63:9a:34:a0:e7:95:2a:e0:42:2a:25:a3:5a:8f:
7e:d4:2b:9b:0d:7c:6a:1d:f2:9d:14:09:fc:52:14:80:15:0c:
d0:00:29:91:c7:6d:61:a5:e8:79:0e:67:66:a4:17:f0:e8:88:
78:d3:f8:69:af:bd:f0:41:b8:e1:26:c5:12:c4:48:da:b3:09:
ba:db:38:68:0e:56:d9:07:ed:63:e9:e1:cc:1e:9a:a2:2c:1b:
06:62:c6:0e:e1:6c:e4:46:fe:c0:eb:ab:ed:14:05:68:27:7a:
4c:f3:a9:d9:3d:dd:a9:83:2e:49:e0:65:1a:43:f2:e3:c7:4d:
3f:27:28:7a:a4:3c:26:f2:4c:e1:b0:28:13:e4:14:99:34:f3:
84:79:3f:68:7c:d4:5a:fa:5f:b9:50:e9:ee:b3:7a:b9:02:f1:
10:70:a3:06:cf:90:bd:93:3b:99:76:18:45:73:7b:fa:4a:89:
6a:95:64:0c:c9:ee:ec:f6:90:ca:4f:6e:8b:ee:ee:53:be:b7:
de:40:59:bb:f6:23:bc:93:ee:7a:86:cf:08:f1:4f:9a:ca:a0:
b1:75:43:fe:3b:fd:e1:ef:11:5a:68:fa:80:58:bd:76:85:23:
fc:03:ff:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:49:41 2025 by rpki-client