Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.cer
File: v3oCWKUh6Z0hP7MOeWZ-WE43x9s.cer (raw, json)
Hash identifier: 5K2lLQqWiG2L+jEax74yYaaF36XAh8/FHq9MaK/BTXU=
Subject key identifier: BF:7A:02:58:A5:21:E9:9D:21:3F:B3:0E:79:66:7E:58:4E:37:C7:DB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D6DCBBA5E52B89DD64F6BF4B4DF319
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:47:51 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.172.58.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:dc:bb:a5:e5:2b:89:dd:64:f6:bf:4b:4d:f3:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bf7a0258a521e99d213fb30e79667e584e37c7db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2c:fb:88:35:6b:fe:66:a6:47:ef:14:97:e6:
25:5b:9d:27:48:55:75:14:48:03:73:fa:bc:96:cd:
50:6b:a5:24:da:8a:96:f2:8f:af:fe:99:57:17:c0:
a2:c8:75:24:d5:36:12:76:c4:a6:14:2a:7f:3e:f6:
91:0d:4b:a6:99:93:16:3a:55:5c:86:3b:13:c4:63:
1f:c2:51:4b:97:a8:97:c3:95:ef:72:ef:a7:50:3a:
f2:55:4b:11:1e:57:e5:8d:34:bf:72:7b:c1:c9:ae:
f7:de:90:9f:29:94:0a:06:2c:be:57:10:35:ab:a4:
08:40:20:4f:c6:b4:57:0b:ee:f4:d8:79:37:65:e9:
c9:8e:d6:7c:4b:ca:fd:00:b6:ef:03:90:c8:49:a7:
93:62:48:fd:25:10:0c:a9:a1:d0:63:4d:7a:98:56:
ed:5f:4f:2d:73:f6:81:14:72:c6:fd:1c:40:b1:03:
e5:27:cb:e0:29:34:20:3f:f5:49:f8:5b:a1:ee:f1:
d0:de:e1:75:88:ff:86:99:28:61:7a:32:bb:04:b1:
ad:e0:87:8b:26:a8:a3:7a:7d:88:1c:ab:c0:b0:ec:
b1:ad:63:bb:b3:ec:f8:ab:1f:a0:23:82:2a:8c:75:
b7:de:3a:cb:11:86:1f:10:f6:15:d2:0a:af:91:a0:
cd:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:7A:02:58:A5:21:E9:9D:21:3F:B3:0E:79:66:7E:58:4E:37:C7:DB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/87d48a-fa27-4b93-b4e8-b539d6cea6e1/1/v3oCWKUh6Z0hP7MOeWZ-WE43x9s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.172.58.0/24
Signature Algorithm: sha256WithRSAEncryption
06:91:43:c5:63:04:b7:77:b1:c1:e5:d1:2a:59:ac:55:6b:01:
ee:73:ee:7a:92:fb:0f:48:67:ea:b4:b9:b2:e2:65:dc:ba:16:
d6:58:23:ce:96:61:31:58:50:1a:b3:04:8b:70:4c:52:46:06:
a6:dd:83:d7:2f:33:02:62:8e:bb:cd:1c:f1:da:fa:7c:c0:b5:
13:bb:29:13:78:5f:67:e0:df:cb:e6:29:7b:00:ca:5c:2b:08:
6f:a7:3e:e2:46:91:26:6e:b7:74:42:75:5a:80:e1:d2:98:39:
98:96:51:cd:d4:f2:56:39:2d:55:c7:32:75:9a:3f:0c:f5:3f:
9d:59:b1:07:e3:5b:94:f6:37:b0:57:2e:cf:c5:92:87:a3:cf:
7e:eb:54:a0:63:e1:9f:dc:c8:44:45:f1:c1:9e:f6:0a:f7:ca:
a8:eb:98:86:78:49:42:0e:e7:20:2e:68:b8:3a:80:2c:f6:a8:
5a:d1:a7:31:59:9d:fc:ce:73:df:4a:19:e1:bc:8a:e4:b6:6b:
d4:b2:7d:4d:b5:88:e2:d2:ba:12:f3:23:90:9c:ae:85:73:11:
ff:8b:93:9c:a0:3a:bd:91:65:af:ad:71:d3:96:b9:b6:f9:f1:
b1:14:17:59:76:cb:a0:0f:51:79:33:41:97:ea:91:04:59:f5:
4f:98:59:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:10:49 2025 by rpki-client