Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-tlJ9mJTVD7om5GWOQc2tabtfLg.cer
File: 1-tlJ9mJTVD7om5GWOQc2tabtfLg.cer (raw, json)
Hash identifier: 2U4xD3yWbzWBQQDKRP9RVEgKSAojFEqpkPcMIhmwwsw=
Subject key identifier: FA:D9:49:F6:62:53:54:3E:E8:9B:91:96:39:07:36:B5:A6:ED:7C:B8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FB8A3513BCF624527A1969F7F2D694
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/69/3cce22-c301-4bbc-b027-64eecaed11dc/1/1-tlJ9mJTVD7om5GWOQc2tabtfLg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/69/3cce22-c301-4bbc-b027-64eecaed11dc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:48:17 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.218.2.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:8a:35:13:bc:f6:24:52:7a:19:69:f7:f2:d6:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fad949f66253543ee89b9196390736b5a6ed7cb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:01:32:88:82:25:ef:49:c9:53:0b:1c:e7:22:
aa:78:f9:a9:4d:a5:8b:a8:0d:f3:c2:33:19:6c:0b:
86:ae:12:83:b1:27:60:34:1c:71:7f:14:ec:17:25:
27:79:35:19:cf:6b:e0:e2:0c:61:f5:bd:8a:ed:dd:
83:24:d9:9b:1e:57:d2:72:55:35:d6:29:f1:82:93:
83:26:c9:3a:2c:8f:34:51:46:2f:43:b0:f7:21:60:
47:38:b2:0b:8c:c6:f1:de:70:28:cc:5d:7c:ee:91:
c2:be:51:09:cb:7a:ae:86:7f:20:1b:74:4f:06:7c:
2f:a4:9f:cf:b3:18:17:e7:3f:16:87:cb:ac:fe:80:
27:e8:b3:6a:4b:3a:5c:68:23:fb:ba:ed:fd:c4:5d:
13:32:e4:51:d2:1b:de:d3:79:d0:d1:b2:37:40:34:
55:f3:b4:7c:a6:76:23:2e:ff:fe:11:4a:e0:69:94:
50:17:c7:28:72:a0:21:c6:7b:45:46:d6:cb:6f:75:
00:46:36:dd:4e:4b:a9:3d:ac:05:03:de:5c:b7:1d:
c9:ee:18:c6:0b:fa:2c:c0:57:02:09:27:a4:b1:1a:
98:4d:0d:e3:88:60:fa:0b:a7:ff:c9:20:67:4b:92:
c8:ec:10:5c:1d:96:42:66:ed:3e:1b:eb:77:e8:6f:
60:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:D9:49:F6:62:53:54:3E:E8:9B:91:96:39:07:36:B5:A6:ED:7C:B8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3cce22-c301-4bbc-b027-64eecaed11dc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3cce22-c301-4bbc-b027-64eecaed11dc/1/1-tlJ9mJTVD7om5GWOQc2tabtfLg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.2.0/24
Signature Algorithm: sha256WithRSAEncryption
18:4b:19:db:ef:6a:74:00:2f:a1:07:4e:90:99:47:5d:1a:e7:
0e:41:f1:aa:c7:e5:c1:12:e9:5b:14:f1:f7:76:2b:cd:26:d3:
29:84:58:51:34:ea:ba:0f:db:98:59:9e:ed:44:65:db:5c:f7:
91:87:d6:03:e8:a7:06:ff:2b:a7:c1:52:d3:44:6d:7c:67:50:
a1:a5:c5:d5:d2:0a:26:1c:4e:55:46:b8:c6:84:b4:c1:44:31:
ea:d1:5f:58:35:4a:ad:b5:3d:49:d2:f6:ba:69:2b:51:0a:b8:
18:3e:98:f5:26:26:83:ad:96:49:70:b6:34:bc:a5:2a:77:66:
3d:c4:49:25:49:15:ed:c4:f1:1e:70:a8:1c:6e:5b:8f:81:72:
58:bb:37:6b:a1:b2:e6:22:25:93:a6:22:81:86:24:43:51:a1:
a0:53:d5:84:9c:81:7d:97:9b:21:da:e3:40:cc:de:91:f2:b2:
83:df:f8:39:3d:55:4e:88:30:c3:24:77:7b:4b:0f:31:93:f2:
88:d8:9f:96:8a:f1:91:00:53:94:eb:71:48:2a:78:1a:04:9e:
84:f0:26:97:3b:18:b8:9f:ad:ef:52:2b:5c:fe:96:b7:31:72:
f2:2c:31:8f:d3:bc:e3:09:4a:46:14:26:d7:37:4e:5a:80:4d:
49:92:59:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:57:12 2025 by rpki-client