Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0YpW1qFOZ2P8dzOopflDHbdWjLU.cer
File: 0YpW1qFOZ2P8dzOopflDHbdWjLU.cer (raw, json)
Hash identifier: R7EzEh+ncPmLMzklx7wIJh8+DZ1TCsTr/JmQzu0WH2M=
Subject key identifier: D1:8A:56:D6:A1:4E:67:63:FC:77:33:A8:A5:F9:43:1D:B7:56:8C:B5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FD71813CA00F2E1A9D329524821934
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:49:14 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 147.228.0.0/16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:71:81:3c:a0:0f:2e:1a:9d:32:95:24:82:19:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:49:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d18a56d6a14e6763fc7733a8a5f9431db7568cb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:16:43:ac:0f:00:47:e8:27:79:82:9a:31:f5:
e6:23:8d:d5:a2:5e:50:f6:97:70:2b:a3:f3:ec:40:
62:06:de:c5:a9:47:eb:09:24:42:75:32:92:a4:4e:
b8:a1:20:e5:81:03:36:e9:6f:36:c5:02:a4:b2:37:
36:20:df:d6:8b:d6:96:c8:67:6a:19:21:1e:fc:d7:
4d:c0:c1:1b:27:bf:0e:50:7f:12:38:0f:fa:08:57:
f1:8e:47:a4:b2:9d:d9:1c:ae:a0:76:64:72:23:5b:
45:49:ee:13:a7:04:8e:72:b9:17:47:d4:6f:cc:95:
49:f2:4e:e6:4d:0d:d8:83:2f:4c:9b:d3:90:05:5e:
9e:6f:39:5d:10:4d:d8:1e:73:21:b6:d2:37:34:00:
fb:65:cc:87:9a:63:48:97:d1:01:dd:44:a1:97:c0:
c8:3d:d5:02:5b:c2:3c:c3:1d:05:90:7a:2c:64:db:
6f:62:ec:f9:c7:b3:34:0f:b0:f5:d0:50:29:3b:51:
0c:ba:dc:e4:63:db:5f:c5:01:c2:33:c0:7d:e9:81:
b0:0f:31:cf:2a:53:be:eb:74:b0:67:9a:01:b9:d6:
ae:aa:70:db:7c:65:24:16:95:e7:70:57:81:63:07:
c2:1f:21:58:b1:d6:5d:45:8e:c2:29:8f:dd:66:58:
cd:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:8A:56:D6:A1:4E:67:63:FC:77:33:A8:A5:F9:43:1D:B7:56:8C:B5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.228.0.0/16
Signature Algorithm: sha256WithRSAEncryption
14:50:69:7c:c4:9a:ed:8c:7f:a0:88:c9:97:83:b5:46:d2:86:
70:7d:5c:6e:78:d3:10:bd:f4:91:e8:58:16:f8:95:60:77:18:
2d:4e:b3:00:93:ac:01:2f:b0:25:85:2a:e7:47:54:b2:99:96:
d9:b2:07:b5:24:8d:86:7f:1d:cf:1f:76:d1:b9:25:5e:1f:a4:
91:cd:ae:10:5d:45:63:f3:94:12:19:47:01:26:5b:34:b6:ab:
89:d3:a8:98:e0:d9:7e:95:f0:61:fe:be:f8:ed:39:62:e3:66:
05:05:5d:5b:30:da:cb:94:ca:65:62:50:57:27:50:d1:92:f3:
1e:42:2b:63:d2:12:fb:cb:d0:96:c6:37:3c:2d:46:dd:3c:e9:
46:61:fa:91:48:bd:b9:83:78:5b:85:0c:fc:61:5a:e1:f8:a7:
cb:52:9c:ae:73:68:b2:8f:a1:bc:10:38:6d:96:72:69:32:2f:
c1:50:fc:fa:28:b8:65:bb:46:39:58:d7:0c:d4:2a:67:66:e7:
43:a2:5e:a4:f1:6a:b5:ba:3b:a4:36:bb:1e:6c:5a:7b:f4:50:
e7:2c:d4:f2:de:08:69:12:cf:66:47:7f:d9:c4:49:77:ad:9a:
37:8f:4a:a1:0d:16:bb:6b:d4:09:88:4c:61:b4:4d:96:e3:64:
f8:8f:5a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:16:11 2025 by rpki-client