Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zTzXxNyVyz4NTocD7wFAT-CnB4A.cer
File: zTzXxNyVyz4NTocD7wFAT-CnB4A.cer (raw, json)
Hash identifier: C6TsxDnjyZ+SrTE8W9t3zz4FhUVwQCC7jQ+vRm+Xy6A=
Subject key identifier: CD:3C:D7:C4:DC:95:CB:3E:0D:4E:87:03:EF:01:40:4F:E0:A7:07:80
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942143FC3B0E49F062E3E638D1AEC200BF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/85/5719cc-e83e-433d-80d5-ff26a9883314/1/zTzXxNyVyz4NTocD7wFAT-CnB4A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/85/5719cc-e83e-433d-80d5-ff26a9883314/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:11 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.146.120.0/22
IP: 2a07:5080::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:fc:3b:0e:49:f0:62:e3:e6:38:d1:ae:c2:00:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd3cd7c4dc95cb3e0d4e8703ef01404fe0a70780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:9e:db:cb:32:37:ef:71:d8:74:35:a2:cb:59:
17:1b:eb:4f:74:2b:22:59:21:7b:17:e7:49:46:53:
1f:ea:7d:05:1a:6f:91:12:c3:eb:ab:35:18:f3:8f:
6d:e4:af:32:a0:5b:14:38:14:f9:22:c8:a4:5d:7f:
ff:e1:3b:29:8e:38:14:d3:bc:de:17:0e:bd:27:59:
44:0c:4e:23:d7:62:1c:d6:83:ea:bd:1e:a5:e2:dd:
99:d8:87:d5:c1:5b:a9:b9:1c:b7:d8:59:81:05:27:
53:88:e5:39:fe:95:b6:dc:c4:92:d2:3e:93:8c:c9:
dd:4a:1e:03:d1:4d:e2:21:05:f1:50:72:8a:27:0e:
7c:73:49:da:7e:da:c2:28:b0:59:eb:db:9f:04:c3:
ae:3b:2d:63:bc:80:c6:dd:b3:e2:1e:ef:1d:fa:6c:
c4:d5:cd:ab:6d:c9:23:42:b3:cd:31:61:8e:23:5b:
c2:97:64:d1:dc:15:52:32:35:43:23:00:86:b7:d0:
f6:20:b7:70:a6:ee:bb:23:28:9b:14:67:98:fd:27:
56:8b:2f:d8:a1:ea:f4:a2:03:fe:c1:bb:43:e8:9f:
cb:db:2e:93:cd:6e:4b:69:76:cc:13:19:fc:79:d3:
cd:23:99:61:05:69:5b:a4:20:b8:b4:18:8c:c5:80:
4f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:3C:D7:C4:DC:95:CB:3E:0D:4E:87:03:EF:01:40:4F:E0:A7:07:80
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5719cc-e83e-433d-80d5-ff26a9883314/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/5719cc-e83e-433d-80d5-ff26a9883314/1/zTzXxNyVyz4NTocD7wFAT-CnB4A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.146.120.0/22
IPv6:
2a07:5080::/29
Signature Algorithm: sha256WithRSAEncryption
65:28:d2:bd:fe:6a:43:02:4e:97:b7:dd:60:de:99:42:54:18:
73:21:8e:7c:ab:36:ca:93:80:d5:d1:c6:e1:6b:40:af:dc:c2:
44:d1:cf:5d:65:3d:7e:30:00:1b:88:9d:1c:8b:78:1d:ce:3f:
d1:9f:6b:de:51:f5:c1:c7:df:c5:8e:d0:d0:ae:46:2e:32:4d:
19:55:4e:5c:c4:e4:cf:21:17:67:b1:70:18:ce:6c:04:29:b8:
ab:05:b2:fc:2e:d2:d9:c5:39:07:fd:c0:9a:3d:05:14:62:e9:
fd:ae:49:69:ac:c7:5a:e4:2a:06:d8:d5:a8:f7:f5:b0:b9:52:
4b:3c:67:37:3f:4d:46:89:86:2f:f9:21:48:73:87:4b:6b:f9:
27:63:19:31:6b:95:37:5f:69:cc:e5:6f:c3:a9:d4:de:56:a3:
4a:e9:05:f1:6b:f0:a1:a1:ca:db:e5:ba:05:a8:cc:fd:e8:ba:
5a:a3:90:33:48:b7:f6:0a:35:32:be:5f:8c:9d:eb:94:e0:2a:
7a:ec:2d:b5:75:83:ea:22:1e:b9:a8:c5:91:42:e7:30:54:9e:
e3:86:f3:a4:15:fb:5d:d9:1a:44:65:d9:cc:60:9c:8c:e0:de:
00:a8:00:e7:a3:ab:a8:54:ec:50:b7:f4:e1:f5:54:28:32:56:
78:ed:01:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:37:09 2025 by rpki-client