Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zRzl1y2syrz3l0snLsJ678UatiA.cer
File: zRzl1y2syrz3l0snLsJ678UatiA.cer (raw, json)
Hash identifier: OP/Z8MULDkWOzGh3916U4MchfysSgZwtXoCjPK2BFmI=
Subject key identifier: CD:1C:E5:D7:2D:AC:CA:BC:F7:97:4B:27:2E:C2:7A:EF:C5:1A:B6:20
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC3B70C0C8E07D996E1F36D6698BECE1F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0d/9f7ac0-81c0-43ab-8b80-bde3101cbdae/1/zRzl1y2syrz3l0snLsJ678UatiA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0d/9f7ac0-81c0-43ab-8b80-bde3101cbdae/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 06:30:02 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 185.214.165.0/24
IP: 2a12:8480::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:0c:0c:8e:07:d9:96:e1:f3:6d:66:98:be:ce:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cd1ce5d72daccabcf7974b272ec27aefc51ab620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:66:2b:d3:44:8a:36:7c:97:08:54:7c:d3:e9:
54:8a:48:47:64:29:b9:ef:b0:8d:16:14:04:e5:cf:
7a:15:70:9c:3f:57:08:f6:7d:50:50:b1:fd:cc:8d:
78:24:34:aa:24:a8:bd:8a:e7:34:b1:89:90:97:ab:
30:0d:9a:9c:6a:8c:c0:e2:20:2d:60:74:f1:95:ca:
da:3d:3c:3c:f6:f1:f7:a2:db:45:96:aa:58:41:b7:
d6:ad:30:83:77:dc:72:32:2b:76:8d:6b:65:d2:b8:
c9:f6:10:52:88:b6:ee:5d:99:21:e9:89:91:2b:5a:
57:54:9e:52:cc:de:6d:ef:4e:3f:36:1a:84:40:ff:
37:f8:2c:b3:a9:30:47:95:3e:8f:b8:72:4d:d0:ec:
47:7c:ad:45:7d:f6:7e:8c:f8:e0:01:76:8e:fb:07:
8f:02:5a:45:a1:a4:5b:6c:93:4d:36:c3:34:79:8b:
32:2b:21:72:a6:ca:35:d1:c1:16:88:92:26:db:7f:
89:ed:5e:d8:8d:57:e2:02:14:03:72:a3:38:5e:54:
70:46:05:89:75:1d:7c:7c:ab:35:c8:80:f4:cd:41:
6d:8d:0d:58:25:6a:0e:ad:0b:54:d0:1c:37:03:b4:
5b:7e:31:87:54:ba:cf:68:e0:29:59:cf:95:d4:ab:
e6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:1C:E5:D7:2D:AC:CA:BC:F7:97:4B:27:2E:C2:7A:EF:C5:1A:B6:20
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9f7ac0-81c0-43ab-8b80-bde3101cbdae/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/9f7ac0-81c0-43ab-8b80-bde3101cbdae/1/zRzl1y2syrz3l0snLsJ678UatiA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.214.165.0/24
IPv6:
2a12:8480::/29
Signature Algorithm: sha256WithRSAEncryption
11:6c:ca:f0:17:ea:05:e2:98:ee:c4:06:f3:eb:fa:11:03:30:
95:0c:ef:2d:73:21:df:0e:ea:2a:fc:12:76:09:4a:1a:e4:9c:
f9:e1:89:6c:72:95:3d:1b:23:50:21:74:71:db:a2:45:4b:7f:
ed:db:2b:70:09:e6:29:16:d8:23:c0:15:a7:e7:36:2a:a5:f6:
0d:0f:72:0d:7a:69:21:38:11:67:94:3b:4d:72:44:23:28:9b:
13:7b:50:5d:eb:5b:30:78:87:b3:7e:86:f9:55:0b:e5:51:b5:
93:74:98:cc:ef:3d:03:eb:15:15:78:ab:3f:eb:de:6c:f1:ac:
69:78:19:c6:19:e0:a2:1e:ff:99:7d:d6:ce:06:9c:99:2c:45:
f4:34:1b:77:10:a3:26:09:40:cc:46:b0:85:d1:e0:39:ce:90:
54:76:48:e3:e0:47:95:e1:ef:dd:ed:ff:e9:0d:62:ff:da:20:
e8:d9:69:2d:ef:72:fa:7b:41:89:bb:32:8e:1d:36:ab:34:d3:
d1:87:be:59:c1:7d:24:d9:fa:89:ff:3d:d0:ed:84:b7:60:66:
09:21:73:e5:c4:b6:ba:ff:7e:49:7b:43:70:8d:5b:f2:90:88:
ed:04:2c:eb:6c:0d:8f:cf:35:00:df:e5:d7:33:60:63:77:5f:
7d:ca:17:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:00 2025 by rpki-client