Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0KNDo37K0r-yw1vZsm1_SLy1dTc.cer
File: 0KNDo37K0r-yw1vZsm1_SLy1dTc.cer (raw, json)
Hash identifier: XhqfF255IellgGCRJATWvFuovFr//82Z0KGtf8T1BBo=
Subject key identifier: D0:A3:43:A3:7E:CA:D2:BF:B2:C3:5B:D9:B2:6D:7F:48:BC:B5:75:37
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B66A41DAF59FB06B4B6E94A033B661
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:50:53 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.84.128.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:6a:41:da:f5:9f:b0:6b:4b:6e:94:a0:33:b6:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:50:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d0a343a37ecad2bfb2c35bd9b26d7f48bcb57537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:80:1f:88:63:51:06:b1:3e:73:22:0c:36:4d:
63:a9:54:07:67:d9:b6:77:98:70:44:b0:18:a1:bc:
e0:da:af:8a:64:ce:c7:45:01:c1:b6:c0:00:a4:32:
b7:ce:6f:cd:f5:ae:33:ce:1c:c7:33:55:10:ef:e6:
9b:b7:a9:1b:3c:46:63:1f:41:d2:99:71:e2:06:91:
d0:e5:e4:f5:b4:14:e0:f1:ef:a8:85:b5:e8:77:ea:
39:7d:46:2c:61:9e:7f:ff:e9:e0:ab:72:11:21:47:
3c:62:0a:6c:4f:83:fa:7e:a9:43:77:ca:66:f9:89:
a3:5d:57:25:3d:8e:ad:fc:6d:e5:d7:ce:0b:4f:84:
b0:4e:3d:98:08:04:33:62:d7:35:1a:98:ba:15:47:
f8:7a:e1:23:10:05:2e:99:33:2c:18:17:75:91:ef:
bb:8a:3d:e3:4c:97:b7:b5:ac:73:3c:c3:86:9f:38:
97:c3:73:ea:18:39:77:51:33:8b:2f:81:58:c2:92:
f8:0e:03:de:50:c5:cb:c0:98:99:ee:9e:76:da:9a:
52:a2:54:51:14:14:ab:0a:ed:7a:e1:81:85:47:e2:
cf:35:4c:e2:00:29:c5:05:ff:7c:2d:1f:92:f6:86:
f8:ee:54:43:b1:64:2f:a5:75:3d:01:a9:1b:cd:3a:
f6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:A3:43:A3:7E:CA:D2:BF:B2:C3:5B:D9:B2:6D:7F:48:BC:B5:75:37
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/201273-708d-4a46-9ab6-c7b36b8a2685/1/0KNDo37K0r-yw1vZsm1_SLy1dTc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.84.128.0/23
Signature Algorithm: sha256WithRSAEncryption
05:c0:e3:81:bf:0d:e3:a0:45:c2:57:4d:a9:db:f0:d5:93:21:
5b:f7:28:cb:47:fd:e4:76:a7:df:b0:57:b2:de:a0:fa:cb:dd:
4e:48:8b:34:4b:05:99:54:5b:fd:21:c5:02:8c:9e:54:6e:24:
18:49:1d:62:85:6b:23:0c:0b:4a:35:3a:25:f8:4c:f2:eb:8e:
41:35:d6:8d:b9:88:4f:ff:9a:a9:c9:ab:df:79:5b:44:71:56:
9a:a3:04:6f:ca:62:be:91:56:a6:ef:01:46:2a:01:12:5f:83:
79:30:23:cc:63:bf:81:07:e3:6d:87:3c:61:99:dc:6f:7c:7f:
98:2f:60:0b:54:ff:52:23:e0:9e:f3:70:2f:34:57:d4:40:f8:
59:4b:d1:16:f9:ae:cb:2b:75:4e:8f:0b:29:3f:a6:11:c5:7f:
4b:fc:a0:07:d2:89:b7:7d:0f:58:96:30:54:bc:63:5e:d8:ec:
a6:de:be:6a:6f:49:ce:0d:0e:f5:41:a7:2a:22:e6:1a:a6:da:
90:3d:91:46:b4:76:8a:52:5d:e4:3d:01:2f:da:5a:7d:d1:18:
e6:65:7d:ab:0c:0d:51:c9:7e:e4:56:88:5c:d8:00:c0:6d:4f:
34:41:e3:16:20:8d:26:cc:26:94:96:c8:26:81:9c:7e:0b:14:
22:3b:7c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:51:50 2025 by rpki-client