Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07yiuLJxkwaZAqfGZkNu3ATr-8c.cer
File: 07yiuLJxkwaZAqfGZkNu3ATr-8c.cer (raw, json)
Hash identifier: Ufayt02lvxTffgB9pVaPFZD0MzYxjosFbF07dN+e3Po=
Subject key identifier: D3:BC:A2:B8:B2:71:93:06:99:02:A7:C6:66:43:6E:DC:04:EB:FB:C7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019450D984F0B9FD172BC0061887DE5870C3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/06/2bdcfe-172a-423e-8057-c924f8630fe4/1/07yiuLJxkwaZAqfGZkNu3ATr-8c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/06/2bdcfe-172a-423e-8057-c924f8630fe4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 10 Jan 2025 15:33:40 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2a0a:c140::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:50:d9:84:f0:b9:fd:17:2b:c0:06:18:87:de:58:70:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 10 15:33:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d3bca2b8b27193069902a7c666436edc04ebfbc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:7a:86:a2:33:8b:c9:66:de:0f:d3:a1:7c:c2:
bf:97:2b:8f:a3:66:49:7a:85:d9:4c:19:72:e4:53:
7f:eb:fe:ee:82:17:da:72:b9:f8:59:34:d6:a5:8e:
2b:b7:f4:83:8a:55:c1:dd:6a:33:11:7a:84:e9:00:
c7:3d:b2:f1:47:30:3a:09:af:5a:84:b3:b4:d8:88:
88:ce:c8:f9:be:3c:a6:1a:19:da:a5:28:fc:a6:f4:
d4:70:30:62:70:bc:ae:22:e3:e1:a3:09:7d:ff:31:
d6:25:fd:96:08:bc:df:9f:19:eb:76:a3:10:8d:db:
9b:ef:ba:ae:60:35:b7:c4:24:7f:33:0b:a3:31:d4:
ae:80:68:9d:42:2d:07:cb:de:39:fe:6c:f5:8d:0c:
36:0a:0e:09:88:63:38:be:98:1c:22:a4:a9:09:4a:
87:5f:5f:46:3e:ef:9d:58:09:10:47:93:ef:5c:8e:
e4:a1:b5:bc:a9:cc:f2:55:33:94:82:ef:7f:9b:65:
78:0a:84:e7:0a:ef:2b:02:b1:84:35:aa:7a:cb:ce:
1b:f9:0d:85:c8:d8:2f:68:dd:98:b9:57:cc:c7:7b:
a2:2e:a4:dd:f7:fb:df:e7:d3:c2:1c:36:ea:ef:46:
c7:ad:76:90:fd:d8:32:0f:f7:75:76:13:11:ab:fc:
4b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:BC:A2:B8:B2:71:93:06:99:02:A7:C6:66:43:6E:DC:04:EB:FB:C7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/2bdcfe-172a-423e-8057-c924f8630fe4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/2bdcfe-172a-423e-8057-c924f8630fe4/1/07yiuLJxkwaZAqfGZkNu3ATr-8c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:c140::/29
Signature Algorithm: sha256WithRSAEncryption
0c:5a:12:b2:1d:f6:1f:8e:09:f3:f5:80:d5:eb:34:1b:7b:be:
54:61:4d:3b:45:be:72:aa:f9:63:1a:f6:38:8e:6d:8f:89:b5:
4b:40:1d:6e:aa:31:21:7c:75:35:00:d8:f6:d6:68:bb:60:5d:
20:2f:95:28:91:f8:b5:04:e3:8b:bb:fd:27:c3:cd:6e:de:fd:
68:9d:5e:84:28:73:96:97:cc:87:ef:38:ca:44:b5:41:d6:d2:
9e:76:05:dd:1a:88:f4:00:36:89:45:6c:80:f8:fa:43:bc:bd:
d2:03:f1:ec:73:7f:3f:26:b5:94:e1:07:67:74:1c:05:ed:86:
90:fe:c9:ad:14:66:91:54:10:2b:f4:4e:1e:66:31:4f:0b:c7:
1d:c6:ff:36:d0:c4:b9:0f:d3:72:fb:d0:63:8a:d8:ca:7c:20:
b9:e8:79:5f:67:9f:69:45:dc:d0:db:fe:ba:5e:5e:a6:01:a8:
ba:b3:50:59:b0:ff:96:c3:2f:b1:2b:1f:ac:c6:e2:3d:c2:1e:
6b:29:50:74:f6:39:9f:59:d6:12:52:cf:5d:97:ab:8b:67:e3:
ea:c0:cb:d0:48:9e:06:87:9a:ef:d1:0d:a7:cf:6b:7c:94:1c:
d7:5b:2d:5a:c3:e7:33:42:13:b7:c3:d3:f0:2c:ac:d9:1e:42:
ed:ca:f9:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:35:14 2025 by rpki-client