Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/w64gtKOJ6FTSamWqubDQGZfwrCI.cer
File: w64gtKOJ6FTSamWqubDQGZfwrCI.cer (raw, json)
Hash identifier: JEwYEELYkAc/BvKb5Hbcqs1vvwh+C5yCKqNsmBm9f78=
Subject key identifier: C3:AE:20:B4:A3:89:E8:54:D2:6A:65:AA:B9:B0:D0:19:97:F0:AC:22
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019001133BC137E60555580F5D01DE060485
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b9/024641-0568-4a54-9599-c0588aae02ed/1/w64gtKOJ6FTSamWqubDQGZfwrCI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b9/024641-0568-4a54-9599-c0588aae02ed/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 10 Jun 2024 07:35:56 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 2001:67c:3a0::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:01:13:3b:c1:37:e6:05:55:58:0f:5d:01:de:06:04:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 10 07:35:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c3ae20b4a389e854d26a65aab9b0d01997f0ac22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c2:d2:2f:df:ac:83:b3:26:88:1d:ec:c2:29:
55:f7:7c:f5:5f:82:a5:e0:b6:70:c5:91:d2:ca:55:
ca:10:d2:99:9d:6a:d5:87:0e:fe:0f:38:e6:ab:df:
ea:75:bb:5d:8c:2d:48:c4:b4:b8:37:4f:d6:d9:9c:
86:79:bb:25:56:20:86:c6:f2:51:2d:51:0d:6f:86:
4c:ab:fb:4c:bf:54:a1:f3:d9:08:5f:2f:6a:cd:0b:
2a:d5:a2:e8:41:76:df:ac:ce:c4:aa:eb:7f:54:5f:
34:a6:47:2f:45:51:1d:85:1a:14:9e:c6:8a:5c:72:
b1:4b:d8:e8:f8:8d:83:89:ae:5c:7c:2e:85:3e:ad:
f4:c1:70:cd:e6:68:15:3a:32:e4:35:40:76:35:95:
7e:b5:b6:f9:b7:e1:c3:85:0c:0c:df:3d:a4:74:4d:
01:be:3e:00:0a:5f:3d:ae:5e:5c:d3:a8:6f:5a:5f:
b4:f3:49:a1:27:66:59:da:b7:06:47:ac:7a:cf:47:
cc:29:68:ef:10:a2:3a:e5:d3:fd:37:1d:77:f5:9f:
69:d2:ca:b9:34:e4:b3:9b:71:6d:3f:49:33:31:36:
38:84:4c:a2:9e:a3:49:41:76:09:38:4c:df:af:bd:
b6:6f:bb:50:b7:9a:0b:fb:2b:1b:03:28:dc:46:ff:
8f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:AE:20:B4:A3:89:E8:54:D2:6A:65:AA:B9:B0:D0:19:97:F0:AC:22
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/024641-0568-4a54-9599-c0588aae02ed/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/024641-0568-4a54-9599-c0588aae02ed/1/w64gtKOJ6FTSamWqubDQGZfwrCI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:3a0::/48
Signature Algorithm: sha256WithRSAEncryption
7f:59:51:47:5a:98:11:26:fa:c3:0f:06:82:03:42:04:5e:66:
c1:04:79:99:79:70:f2:f5:16:8c:37:f9:11:f1:6d:f7:92:d5:
31:b6:e7:3a:5f:d2:50:61:2e:c7:0b:2b:21:e8:d4:aa:51:2e:
ce:1c:9c:75:fd:de:2b:c7:a3:05:d9:29:eb:6f:93:ab:d8:99:
a4:a6:fe:2a:46:59:9c:0a:5c:5c:8c:c6:5b:35:ec:93:f4:a0:
02:24:76:61:03:d6:94:67:88:e7:c8:46:92:e2:fa:ca:f4:81:
0f:cc:b4:4b:cf:2e:5b:47:d7:4d:6e:40:4c:a3:f3:3f:f0:df:
72:d9:6a:f0:0a:97:fe:fb:97:fd:86:58:1c:cc:2b:16:7d:4b:
d1:aa:70:f6:fc:e2:10:ba:11:4e:c9:ea:8d:30:8d:9b:38:ae:
56:4c:3a:58:fc:bc:8a:97:05:d6:95:27:aa:32:3b:ab:20:da:
12:74:9c:8a:77:c6:62:e5:d7:7f:06:56:13:3e:df:2b:42:cc:
c3:67:e1:8b:8b:ef:e2:68:48:3f:e7:79:d6:b3:85:c3:c3:b1:
12:5b:93:96:b9:72:22:2a:45:1a:5f:ff:65:90:5d:3a:ed:af:
f5:a8:70:8c:ef:10:b3:dd:48:72:f9:cd:cc:5c:f3:fb:a9:34:
69:af:b2:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:12:41 2025 by rpki-client