Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0dMLd0soDDfhxe1dimnLmvZIsGU.cer
File: 0dMLd0soDDfhxe1dimnLmvZIsGU.cer (raw, json)
Hash identifier: k9wg+9ZLdW3scGuCOSUFkxquh/EMqZBDO4F6LhBeWmg=
Subject key identifier: D1:D3:0B:77:4B:28:0C:37:E1:C5:ED:5D:8A:69:CB:9A:F6:48:B0:65
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C8895B61AF52A60EBBFEE4E0CE688
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6a/b069f9-f146-4247-bacc-be6304c252c7/1/0dMLd0soDDfhxe1dimnLmvZIsGU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6a/b069f9-f146-4247-bacc-be6304c252c7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:48:11 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.209.39.0/24
IP: 193.46.69.0/24
IP: 195.242.130.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:88:95:b6:1a:f5:2a:60:eb:bf:ee:4e:0c:e6:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d1d30b774b280c37e1c5ed5d8a69cb9af648b065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6a:27:c5:4c:fd:4b:76:9f:62:31:b9:61:02:
c7:45:14:38:67:60:46:d3:ee:4c:6e:ee:0c:c4:60:
b0:1b:9b:a2:d7:1c:e2:78:2b:a3:08:5f:1c:3e:36:
30:d2:82:4b:2e:53:23:79:5c:5f:e9:b6:b0:8a:00:
6e:9e:98:ef:dd:53:05:cc:ab:20:42:67:54:e2:36:
11:78:6b:cc:b0:8b:eb:04:ef:a6:27:e0:4e:d7:03:
0a:d0:27:2f:db:88:f6:7c:db:7d:61:58:a7:20:a9:
f0:46:10:18:51:98:ef:77:13:83:1e:21:62:9d:3f:
cc:0f:3c:eb:f8:7b:d2:54:44:9a:59:bb:7f:58:98:
cd:5f:91:2a:d0:17:01:51:20:52:05:f9:5d:0f:d4:
75:d6:6c:28:c9:15:38:91:21:59:a2:c5:07:b1:61:
46:41:2e:3b:bc:14:ce:69:69:e5:d5:15:f3:6f:5a:
97:ff:e5:31:73:b3:b2:d5:fe:3d:67:a4:4f:62:e1:
31:93:ac:6b:af:a4:44:cc:43:60:f7:c3:ba:c3:dd:
76:e9:74:5b:a0:ce:df:5b:75:4f:aa:1b:2a:ad:3d:
ce:af:48:76:b5:55:ab:e1:61:65:a8:01:af:06:db:
12:56:53:c1:d2:14:53:77:cf:b8:81:a8:26:c9:a3:
ec:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D3:0B:77:4B:28:0C:37:E1:C5:ED:5D:8A:69:CB:9A:F6:48:B0:65
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b069f9-f146-4247-bacc-be6304c252c7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/b069f9-f146-4247-bacc-be6304c252c7/1/0dMLd0soDDfhxe1dimnLmvZIsGU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.39.0/24
193.46.69.0/24
195.242.130.0/23
Signature Algorithm: sha256WithRSAEncryption
00:45:44:e0:09:4c:46:c3:7e:52:7b:b4:2f:30:72:19:0a:50:
7f:79:c8:31:3a:b4:92:77:f7:89:1b:e6:d8:db:ad:16:f0:86:
78:3e:35:2c:4e:2e:7f:bb:49:23:87:8c:d1:e7:0a:0e:5d:de:
4c:c4:fb:2d:81:09:f5:27:6a:80:0b:c6:47:ad:ba:cb:bb:e8:
1c:39:c1:64:34:12:7a:3f:57:3b:28:60:97:7c:72:ca:08:80:
d5:af:4c:de:20:f8:49:ad:d9:a6:f3:64:5c:19:4e:22:48:b7:
b5:1f:ff:68:2e:08:d7:02:df:e6:2f:d3:de:88:ad:1e:83:a8:
84:ac:26:1e:bf:fc:39:bd:de:a6:75:0e:9f:78:48:9d:ec:f5:
62:b2:5b:d1:8d:96:ce:32:62:98:22:8b:eb:9a:16:1e:60:5b:
3e:b6:10:8a:32:d0:35:05:a5:fd:13:d9:8b:8e:b4:00:20:14:
6f:00:01:49:af:f5:cc:be:0e:fc:93:58:17:d8:24:7d:f3:81:
80:76:7a:b2:a0:1d:0a:b4:d0:b9:03:3c:ba:33:aa:e3:04:ad:
a3:d7:9c:9c:dc:4d:7d:df:90:54:f7:4a:bb:46:67:9d:3e:cf:
42:ed:a9:5b:3a:12:bf:1a:5e:fb:cb:9f:c0:10:08:ca:65:84:
fb:15:85:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:10:41 2025 by rpki-client