Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer
File: 1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer (raw, json)
Hash identifier: o/7uq1AXebfePy2wE8G98cUpIAFfz6MWL6XEivxB0Po=
Subject key identifier: FA:95:EC:DA:A3:59:A6:F8:35:55:73:D3:90:01:BA:A3:58:74:BE:D2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B51A5275B239225F8B9A41ECD75C94
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:49:27 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.157.116.0/22
IP: 2a07:a680::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:1a:52:75:b2:39:22:5f:8b:9a:41:ec:d7:5c:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa95ecdaa359a6f8355573d39001baa35874bed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6a:34:f8:ae:d5:da:9d:34:41:f2:7b:72:ba:
be:f6:20:46:1f:87:3a:c3:dc:6d:3b:20:5d:a3:65:
d2:51:2b:32:15:cd:0e:70:0d:69:54:ce:20:5f:28:
64:8b:62:9f:49:69:dd:bb:b9:78:10:0f:ae:16:90:
9b:a1:63:26:2e:b4:52:d8:55:d2:d5:89:d2:7f:3c:
9a:5b:dc:ba:00:ae:6b:d0:cd:9c:b3:df:d8:48:c0:
4d:1a:94:d8:a9:c8:cd:07:c8:bd:2b:56:89:b9:2a:
c2:d6:ae:72:c4:c5:cc:33:9a:9c:06:2a:19:86:d4:
6e:19:17:cb:a8:48:20:27:97:55:96:25:a0:5c:c6:
35:1e:e1:6f:df:2e:09:4b:ca:83:2d:5b:63:f3:09:
11:80:6b:b4:e5:ae:77:e1:ec:71:cc:f5:45:55:54:
09:eb:9b:da:f7:c5:bc:bb:37:ef:24:52:97:48:68:
d6:a2:09:36:6f:b6:3a:e6:b1:40:9e:ff:59:20:d9:
8b:8c:47:5e:e5:bb:7d:ec:e6:d5:ef:50:da:83:26:
d2:6d:2c:b2:a0:0c:ad:7e:3d:31:ae:b4:4a:d8:2c:
8b:0f:f4:6c:55:5b:70:f3:0b:7e:e2:f0:4a:5a:da:
a8:a6:18:e3:5b:b2:b5:f7:85:b4:5f:e2:43:01:65:
1b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:95:EC:DA:A3:59:A6:F8:35:55:73:D3:90:01:BA:A3:58:74:BE:D2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.157.116.0/22
IPv6:
2a07:a680::/29
Signature Algorithm: sha256WithRSAEncryption
9d:40:e3:59:f6:61:8c:3c:06:85:ec:0c:02:42:4f:17:47:ad:
fe:26:b7:9e:16:38:b0:b7:aa:93:0d:80:0c:14:08:db:3c:32:
93:d5:5c:45:2a:b9:ba:da:c8:22:c2:af:1f:23:15:e3:b0:f5:
7d:3e:50:4f:12:1e:ff:63:a4:76:24:b4:17:54:f4:28:a0:db:
b2:b5:a3:ee:d0:ee:f2:e5:55:c9:e8:04:38:50:77:13:3e:b4:
79:95:41:a4:04:9b:86:7f:83:26:05:94:73:9e:cb:42:8f:85:
8a:ac:ae:f5:e6:88:11:39:b7:7f:40:bd:60:94:d8:02:2d:e0:
f4:16:f4:94:d8:51:7a:1a:fa:64:6e:7c:a7:ab:f4:8c:51:65:
b8:ad:39:9f:8f:00:8a:23:78:1d:70:89:c0:33:0d:49:33:a2:
a1:73:4d:2a:51:d3:8a:da:52:1b:1e:1c:25:b6:1e:04:dc:9a:
25:b3:eb:92:d5:88:6a:af:80:cc:58:90:db:bd:6a:b8:01:ae:
c5:0d:9e:49:7d:2e:ef:5d:39:bf:fb:0f:9b:ff:0c:29:97:c8:
22:c4:12:61:6d:8b:41:69:e3:5b:3c:91:9d:9d:4c:8b:79:c9:
87:14:24:32:4d:dc:54:ab:51:ea:be:23:97:18:5b:06:36:9c:
29:a4:12:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:00:56 2025 by rpki-client