Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.cer
File: 1-7Wx1h4JpOSw3RsFztjmUTvGYYc.cer (raw, json)
Hash identifier: v1FKzv+bzgOzTCLlx+tAtthS6e5QktPJZFue1qg3iRg=
Subject key identifier: FB:B5:B1:D6:1E:09:A4:E4:B0:DD:1B:05:CE:D8:E6:51:3B:C6:61:87
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942143A943518EE8419A27ADB56E7DC2BC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:47:49 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 93.191.64.0/21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:a9:43:51:8e:e8:41:9a:27:ad:b5:6e:7d:c2:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fbb5b1d61e09a4e4b0dd1b05ced8e6513bc66187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:46:83:81:4b:74:f3:18:13:8d:cf:8f:53:1e:
62:1e:70:72:88:d3:0f:4d:1f:93:59:46:fe:44:04:
dd:9f:3b:5f:0a:fd:15:80:c0:54:8b:87:1d:4b:1f:
b4:e6:9b:e5:ed:9b:90:68:5e:17:ca:3a:a0:ed:a6:
6f:54:65:bf:be:dd:63:ce:9f:0b:e5:3b:cb:fe:37:
cb:7f:87:8f:ca:71:69:37:f2:73:d7:46:11:35:65:
e6:50:47:a8:5a:8d:0f:53:24:db:bf:ee:57:f8:3c:
b0:7c:9f:46:78:fe:c4:39:1a:24:20:2b:5e:87:3f:
d1:7c:46:3a:b3:f5:c0:3b:3a:39:f4:45:1e:b5:7b:
d2:ab:a7:17:82:03:13:6c:9a:9a:82:19:53:03:13:
44:98:0b:f3:65:06:25:89:c6:17:b2:25:e3:c9:9f:
2c:09:87:ac:21:12:3f:9c:d1:6d:ea:f3:51:bf:6b:
ef:8e:0f:3a:9a:69:cf:f9:23:e3:5b:a9:1b:df:d5:
9e:99:06:ef:87:9d:2f:ef:53:0f:a3:98:b4:b9:fe:
72:b8:66:c3:9e:f8:0a:89:fe:26:26:2a:24:84:13:
4a:82:6b:71:a5:b1:37:f5:28:49:c1:15:1f:c8:f4:
8b:f2:0c:aa:e6:70:dd:5f:f0:6b:36:ae:ce:46:47:
f3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:B5:B1:D6:1E:09:A4:E4:B0:DD:1B:05:CE:D8:E6:51:3B:C6:61:87
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e8aa79-1576-4cfa-894a-b1e01350675b/1/1-7Wx1h4JpOSw3RsFztjmUTvGYYc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.191.64.0/21
Signature Algorithm: sha256WithRSAEncryption
5b:bd:66:c9:8c:e7:63:b8:3d:8d:ac:3d:92:fe:1c:0e:06:69:
dd:67:d7:a8:b9:44:bc:03:68:f0:f0:a9:a7:aa:a9:40:e4:bf:
e4:52:c7:21:71:b3:18:dd:cd:2b:fb:a5:66:20:16:58:b5:4f:
00:8a:e3:7f:71:b5:a7:59:28:0d:d4:d0:a1:1e:10:e6:b7:a7:
00:a8:f3:6f:09:55:a3:f4:49:47:73:5b:b4:3b:a9:f6:fe:99:
28:b1:a8:72:50:22:41:ee:05:5e:dc:6c:84:41:df:43:c4:71:
9a:d0:ab:80:12:79:44:35:7d:ad:a2:b4:a6:bd:cf:ac:3c:57:
1e:4e:38:94:cc:78:76:b4:7c:87:bd:e1:87:9e:9e:18:88:23:
09:3c:5d:fa:c7:69:0b:c0:c8:17:00:d9:d5:bf:3c:d8:92:88:
60:b7:b2:4d:64:87:16:d6:d7:10:e1:16:46:9a:cf:40:8f:27:
4b:0a:43:79:61:f6:5e:b8:70:b9:46:21:10:66:cb:84:fb:3a:
05:63:37:fd:87:35:8b:79:2c:13:39:1b:5c:a7:ec:47:d8:8d:
d4:38:a4:d3:43:77:b9:7a:e5:b6:fd:14:0b:a7:7c:51:e5:8a:
8e:c3:88:3f:f0:e5:4c:dc:ff:cb:66:5d:ca:2e:e7:c3:6f:af:
f9:99:49:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:57:06 2025 by rpki-client