Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uZdMRWo5anFBBQqpy2LIN3WvekE.cer
File: uZdMRWo5anFBBQqpy2LIN3WvekE.cer (raw, json)
Hash identifier: TGjeFWEMsN0O0DnmJpPGnbDYQPu6rlbOaHKFpktLNG8=
Subject key identifier: B9:97:4C:45:6A:39:6A:71:41:05:0A:A9:CB:62:C8:37:75:AF:7A:41
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018283470CA5046C8FA4A6E09343EF058D61
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dd/39b877-b4f2-4c36-9ff1-3c5ac51c3801/1/uZdMRWo5anFBBQqpy2LIN3WvekE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dd/39b877-b4f2-4c36-9ff1-3c5ac51c3801/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 09 Aug 2022 15:44:07 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 188.119.68.0/22
IP: 2a09:df00::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:83:47:0c:a5:04:6c:8f:a4:a6:e0:93:43:ef:05:8d:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 9 15:44:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b9974c456a396a7141050aa9cb62c83775af7a41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:64:fc:11:49:e2:23:12:fe:26:05:50:2c:67:
78:b5:fc:c5:71:63:b8:4d:07:fe:cf:03:b7:26:8b:
b6:c0:a2:6c:b5:7d:5b:5e:70:63:72:e7:64:82:45:
47:04:85:ee:97:3f:ff:6b:21:df:08:5e:61:6b:60:
01:18:a1:cf:d3:63:b4:23:b1:44:4b:96:bb:71:ec:
4c:9e:05:9c:bd:8b:db:af:56:d2:67:b9:9c:45:1e:
20:7e:ad:cf:8a:4d:3a:a1:af:b1:20:3b:9c:79:42:
c0:1a:9e:59:33:22:3b:70:db:11:ad:7d:ad:87:76:
97:94:1d:a2:d8:e8:79:3d:0c:48:35:c1:f0:6f:4e:
b0:f8:de:e6:c6:01:b4:42:d2:79:73:da:82:11:66:
e7:b3:74:ec:03:71:b5:95:be:8b:90:09:89:eb:97:
95:8b:98:34:f0:37:9e:38:e5:23:ae:6d:9c:fc:c8:
fa:cd:6e:39:ee:92:d4:d4:f3:d1:7c:a7:5a:39:02:
83:36:89:27:4b:e3:92:82:8e:fc:53:4b:8b:13:ff:
13:b9:c3:8e:87:21:d5:64:eb:1d:e1:36:6c:f6:6a:
0a:fd:3c:a0:ff:44:27:65:62:85:bf:45:2c:b6:12:
62:94:96:3a:dc:e9:a4:45:ec:d9:3e:a6:a8:70:80:
13:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:97:4C:45:6A:39:6A:71:41:05:0A:A9:CB:62:C8:37:75:AF:7A:41
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/39b877-b4f2-4c36-9ff1-3c5ac51c3801/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/39b877-b4f2-4c36-9ff1-3c5ac51c3801/1/uZdMRWo5anFBBQqpy2LIN3WvekE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.119.68.0/22
IPv6:
2a09:df00::/29
Signature Algorithm: sha256WithRSAEncryption
5c:a0:48:17:b4:d7:19:3b:19:6b:56:b6:97:11:14:fc:63:55:
fc:25:75:60:28:31:18:c2:93:b7:ec:04:3f:bb:c7:e9:84:6a:
fe:83:e2:cd:8d:3a:c6:67:ee:e7:9a:91:25:4b:d5:da:64:b1:
90:38:8b:48:05:8f:97:71:9c:f5:a5:e9:2e:e2:ba:a8:08:af:
b7:d4:89:b3:bf:94:ba:be:84:79:44:5d:e4:cf:7e:bb:ac:a0:
77:df:ea:94:52:58:b1:df:a2:55:55:b5:28:7d:e7:5d:6d:9a:
4d:6f:25:3f:65:6c:11:3c:93:3a:d7:a7:7e:ab:f1:d8:62:30:
41:31:19:44:a4:61:4d:43:bb:49:fc:39:2c:54:73:ae:9b:13:
98:dc:11:2d:6d:ab:18:1e:c9:89:49:cf:87:2a:05:fc:c0:3d:
ba:28:95:c3:28:9f:0e:69:c7:0e:a2:b2:73:7f:b8:f2:15:93:
48:c1:60:e5:94:e9:0d:f4:cc:fc:33:aa:57:e2:e6:c7:7c:f1:
51:c5:8c:4c:e6:b4:2c:af:7c:bf:8f:90:67:be:9a:51:03:3c:
ac:3a:79:fb:9b:ad:ae:37:35:05:81:60:9e:e0:6d:ce:d3:10:
38:a7:30:da:46:6f:22:0c:eb:6e:fe:2f:ef:23:e9:ad:52:9c:
aa:4d:56:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:27:07 2025 by rpki-client