Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/u38I019PdshD0fHbAKn3tFSpQVk.cer
File: u38I019PdshD0fHbAKn3tFSpQVk.cer (raw, json)
Hash identifier: zX/Oz3etk7+tyn3GRbkpYFigN5qCXMg3VRLi4a68w3o=
Subject key identifier: BB:7F:08:D3:5F:4F:76:C8:43:D1:F1:DB:00:A9:F7:B4:54:A9:41:59
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A5D3FDF872
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/55/83a83b-813c-4076-bc64-01d04d0b890e/1/u38I019PdshD0fHbAKn3tFSpQVk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/55/83a83b-813c-4076-bc64-01d04d0b890e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 11:54:36 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 45.81.140.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 712226240626 (0xa5d3fdf872)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:54:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bb7f08d35f4f76c843d1f1db00a9f7b454a94159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9a:26:d7:73:d2:1a:bd:3b:c3:ea:fb:eb:c7:
c3:a2:9a:ca:7c:33:6a:77:90:33:33:cf:ac:e6:1c:
8f:89:ca:6f:be:8b:3b:fd:77:f4:d3:1b:78:07:cc:
f0:c4:a6:7a:32:62:7d:cb:cd:dc:e5:38:fd:d1:b9:
96:0b:0b:22:91:6c:41:6f:b9:9b:b7:f6:18:82:eb:
e4:05:9b:0e:eb:67:1d:fe:7c:a7:8e:44:6e:b7:82:
e8:38:20:93:4b:2a:fb:99:6e:c3:b3:62:e2:50:2f:
68:55:1b:bd:9d:5f:4a:19:3e:42:16:13:2a:30:40:
e3:21:c1:69:2d:b5:b2:3f:5e:bd:3f:f2:25:2a:18:
56:87:8a:5d:75:c1:b3:27:0f:e7:b7:86:93:47:6d:
cb:e2:c3:20:e1:86:8f:7e:43:04:53:27:5c:9c:e8:
5d:d7:59:48:48:31:ae:23:d6:56:eb:7d:50:7f:cb:
a3:50:79:02:03:12:b6:c6:e7:47:61:a1:cb:95:68:
b3:93:f4:7c:12:23:3d:b1:1f:b5:4d:79:b6:4b:e3:
85:ba:49:81:c7:b0:26:89:96:39:65:8c:53:3b:ed:
d3:28:d1:6f:91:0e:55:94:ab:75:0a:6d:0d:73:8b:
50:65:17:b9:07:7c:5c:6e:c1:4d:53:07:d0:50:73:
7c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:7F:08:D3:5F:4F:76:C8:43:D1:F1:DB:00:A9:F7:B4:54:A9:41:59
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/83a83b-813c-4076-bc64-01d04d0b890e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/83a83b-813c-4076-bc64-01d04d0b890e/1/u38I019PdshD0fHbAKn3tFSpQVk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.140.0/22
Signature Algorithm: sha256WithRSAEncryption
67:67:5c:51:48:0d:0d:d8:a4:af:0e:9f:f3:6e:c9:c5:8e:ea:
bc:27:c5:ba:c7:5d:3b:5b:11:a1:2a:84:38:bb:9b:6f:c2:36:
2b:a8:89:0f:ea:48:93:af:95:77:a7:23:84:84:28:93:2f:dd:
4d:f9:94:6a:23:3c:a9:a5:d1:f2:c3:46:62:bf:4f:64:c1:d6:
2a:27:3d:86:83:39:39:19:e0:24:b9:79:e8:fc:4c:34:18:34:
71:31:d9:dc:3c:d6:d1:2e:a3:8b:01:dc:42:9d:c3:c1:bc:0d:
ef:e9:e3:3d:f7:d6:0c:97:7a:8b:6f:ec:62:18:c6:b8:6e:81:
7a:30:e1:fe:a9:13:c5:7a:32:b3:7a:9c:32:9d:90:ec:a1:38:
17:50:91:09:f4:8c:41:5b:d0:de:7e:48:9c:e5:6f:0b:30:8c:
06:c6:8a:8f:f7:81:67:7e:de:eb:ab:5e:25:77:9e:85:71:94:
c6:20:8b:96:9c:60:af:8e:1d:86:6a:3f:07:96:7b:ab:b4:fe:
d7:0d:51:49:a3:ca:44:9d:a3:35:60:48:c7:79:5f:b6:7f:37:
29:e4:fe:1e:cc:cb:76:7f:8b:55:5f:7a:2e:3e:03:ee:1e:ca:
98:48:a1:b7:6e:4f:96:1f:6e:b4:98:81:e9:81:90:5d:cb:98:
25:ed:3e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:50:46 2025 by rpki-client