Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/z4TMP4-HdgP0A7Dpi7zRyPS_YoE.cer
File: z4TMP4-HdgP0A7Dpi7zRyPS_YoE.cer (raw, json)
Hash identifier: 6TkHfNdjElXDBT7vEGPkN3MO05fH/9dbq7w19P27G9E=
Subject key identifier: CF:84:CC:3F:8F:87:76:03:F4:03:B0:E9:8B:BC:D1:C8:F4:BF:62:81
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01856EFBDA29699737BEA7BF5CF2C4654A70
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/da/91583f-f5fc-4b53-ae94-a24812ad24a3/1/z4TMP4-HdgP0A7Dpi7zRyPS_YoE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/da/91583f-f5fc-4b53-ae94-a24812ad24a3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sun 01 Jan 2023 20:17:57 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 193.9.126.0/24
IP: 2a11:7c00::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:fb:da:29:69:97:37:be:a7:bf:5c:f2:c4:65:4a:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 20:17:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cf84cc3f8f877603f403b0e98bbcd1c8f4bf6281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c8:39:f8:10:4d:a8:6c:35:4f:07:12:73:cb:
bc:16:8c:41:09:e5:62:4c:3e:b3:fd:92:d8:12:74:
0f:52:0e:5a:1f:e5:af:ac:2a:8e:ce:fd:f5:a2:1d:
cf:4b:83:e9:87:70:a8:2c:38:ad:08:a1:dd:e5:0d:
4f:1b:31:fb:9a:5d:35:7c:67:63:b8:ee:db:98:b6:
de:bb:06:07:65:a5:2e:69:43:fa:1e:87:cb:74:25:
54:6a:0b:51:60:54:5c:eb:98:4c:da:91:c0:6e:96:
94:a8:80:91:8b:55:ef:96:ac:37:57:d1:fb:32:ea:
5b:bc:5a:ef:8b:4a:a7:f9:7c:f7:ec:75:94:97:0a:
5d:a7:f9:9c:01:30:25:94:1b:84:f9:f2:16:04:af:
d0:60:82:39:da:d8:c9:de:7f:38:3f:24:69:6c:4f:
33:08:b4:e3:38:7b:b0:0f:72:93:b0:20:f3:53:67:
97:13:49:0e:f4:6e:33:fa:59:bd:c3:cf:fe:4a:17:
a0:25:fa:87:1d:0c:83:01:39:3b:fb:93:2e:ad:cd:
17:79:82:a6:bf:15:2c:ef:dc:b5:02:7c:4b:d4:19:
b6:4c:8d:2f:97:6e:38:54:a9:6a:f5:f5:75:07:73:
41:82:d0:31:59:32:2e:17:03:0c:4f:e6:92:31:5d:
7c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:84:CC:3F:8F:87:76:03:F4:03:B0:E9:8B:BC:D1:C8:F4:BF:62:81
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/91583f-f5fc-4b53-ae94-a24812ad24a3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/91583f-f5fc-4b53-ae94-a24812ad24a3/1/z4TMP4-HdgP0A7Dpi7zRyPS_YoE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.9.126.0/24
IPv6:
2a11:7c00::/29
Signature Algorithm: sha256WithRSAEncryption
6e:fa:5b:af:64:71:ac:88:08:de:f9:31:3e:96:8b:52:c0:26:
16:23:23:4e:0f:96:0a:96:db:f1:cb:b9:10:dd:b5:26:7e:73:
b0:90:35:db:5e:bd:ae:80:29:36:0f:60:a8:99:33:57:fb:09:
b0:24:dc:83:16:d8:68:d3:6b:85:36:d2:1f:18:c1:e3:fe:d3:
79:c3:9e:c3:47:3f:94:e4:4a:3e:06:eb:1e:59:19:8e:54:14:
76:bd:fc:56:ee:74:d1:88:74:85:f2:74:9b:82:dd:a1:a7:fb:
c3:77:cb:7f:42:1f:f5:5d:ca:88:15:e5:06:34:a9:d3:8d:9b:
37:87:d6:78:24:ac:f4:af:e6:1a:b1:51:84:f2:95:26:6d:99:
97:c9:f5:96:3a:c9:f2:f1:0e:fa:00:19:d1:cf:e7:36:aa:b7:
a1:41:69:75:aa:47:df:4c:dc:7f:3f:aa:65:51:ed:4d:e9:49:
fd:16:68:6d:45:ea:fd:ed:7c:e9:16:76:ee:74:80:36:af:9b:
56:b3:2a:0f:3d:9b:2e:d2:e2:ab:48:e8:79:13:22:f0:e8:8e:
20:3b:b5:a8:0c:a4:5c:41:cd:52:38:55:f9:70:bc:55:7e:49:
bf:97:93:de:ed:87:b3:de:88:88:31:55:df:10:79:c3:b5:d5:
34:89:a0:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:31:20 2025 by rpki-client