Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/z96Fu9R49ehC9MT42FIl0QDg9N8.cer
File: z96Fu9R49ehC9MT42FIl0QDg9N8.cer (raw, json)
Hash identifier: 2xXTxwXAZ2zZ3NdcTyG36UqDm5RWodH80bpDEX0okls=
Subject key identifier: CF:DE:85:BB:D4:78:F5:E8:42:F4:C4:F8:D8:52:25:D1:00:E0:F4:DF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194206827D60BD6ED31B8E33DA48E05A8B3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:48:04 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 31.25.8.0/23
IP: 185.83.20.0/22
IP: 185.175.91.0/24
IP: 212.104.208.0/23
IP: 2a11:bd80::/30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:27:d6:0b:d6:ed:31:b8:e3:3d:a4:8e:05:a8:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cfde85bbd478f5e842f4c4f8d85225d100e0f4df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8d:2d:e8:17:16:57:eb:0e:ef:e8:f2:cd:7b:
32:1e:5c:38:36:a8:6c:7d:08:cf:20:9b:65:eb:3a:
0c:72:57:30:a7:fb:f3:e0:ae:98:c9:fd:ac:96:16:
65:aa:ee:89:6e:b7:12:c3:fb:fd:a9:c6:eb:9b:c7:
bc:da:55:ba:0e:9f:bf:24:86:88:4e:86:f2:f2:0e:
0b:cf:9c:68:f1:ff:aa:21:8c:84:31:4c:09:94:cb:
96:d6:28:89:dd:90:33:1b:af:cb:99:1a:9a:a9:2f:
41:0b:fd:09:d8:e7:ed:3e:d2:62:b1:9c:bf:f0:c4:
84:d9:ba:c8:be:28:2d:05:ba:36:a5:6d:36:b4:f1:
f6:28:40:c6:60:09:04:24:5c:a0:15:c8:9f:41:c6:
2a:53:2e:6e:41:ef:62:73:fc:b8:f4:20:40:f8:e8:
cb:09:de:ac:1c:0b:a3:06:82:f8:8b:6f:7e:58:28:
4c:95:09:e3:93:25:2a:18:65:3a:06:ba:26:a3:1c:
7c:09:7c:b5:6b:af:23:28:1f:06:eb:91:c9:91:f4:
3f:b3:c3:68:a5:f1:f4:cf:1e:fc:26:64:04:f8:24:
72:8e:fe:12:97:b1:63:fb:a5:b8:ee:d2:2a:32:e0:
f6:9c:25:f7:ff:66:93:66:70:aa:05:dc:c8:4c:92:
34:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:DE:85:BB:D4:78:F5:E8:42:F4:C4:F8:D8:52:25:D1:00:E0:F4:DF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/5e2619-d72b-410b-b9e8-f93d1f815b7d/1/z96Fu9R49ehC9MT42FIl0QDg9N8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.25.8.0/23
185.83.20.0/22
185.175.91.0/24
212.104.208.0/23
IPv6:
2a11:bd80::/30
Signature Algorithm: sha256WithRSAEncryption
3e:70:89:d9:13:26:cf:80:a0:53:3d:13:f4:90:11:15:b3:e5:
ab:34:fe:fb:00:39:b0:b8:70:4f:d0:0d:0c:09:2a:46:b5:2f:
e9:63:90:94:4d:27:36:18:e2:8a:49:55:08:8d:a6:32:fe:84:
f6:eb:3b:61:e1:c2:8d:a0:0a:eb:f2:a9:d2:1a:58:49:95:26:
4e:36:1a:1a:41:6e:b3:1e:37:9d:2f:11:6b:07:8b:7b:f8:0b:
e8:3e:ff:8b:a5:04:36:9b:c2:ed:98:b1:21:ec:c8:59:87:27:
2b:f4:b2:1a:20:8b:23:33:cb:3b:31:d7:d5:2a:fa:50:09:c7:
b0:78:77:09:94:52:be:a6:90:a7:8b:bf:c3:51:26:48:bb:3b:
da:98:61:1d:83:9a:1c:e5:e8:24:db:b6:f6:be:8b:ba:11:9d:
10:0b:03:77:aa:6a:b2:74:53:53:d4:a1:f8:54:a1:77:09:e6:
94:82:3b:f0:f6:25:c7:e0:f2:6d:de:7a:58:62:94:95:ae:f2:
8a:fd:f1:b0:e0:b6:92:8e:b2:b7:cc:46:e5:27:fd:9f:e7:2f:
0c:49:44:75:f6:a2:2d:38:28:d3:bc:fb:40:8e:1b:98:2c:9b:
ec:28:e3:6f:ee:28:28:fc:27:a5:9e:f3:a2:5f:fe:3b:1b:6f:
47:c3:7c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:00:33 2025 by rpki-client