Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-uEVwwK-C0uLzKCzKoKToFxp1ws.cer
File: 1-uEVwwK-C0uLzKCzKoKToFxp1ws.cer (raw, json)
Hash identifier: hBvwWQXjM1jG3xG28MO7vactnQijxHLcpf7oLopcVaQ=
Subject key identifier: FA:E1:15:C3:02:BE:0B:4B:8B:CC:A0:B3:2A:82:93:A0:5C:69:D7:0B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942748121DF63E4DFDFA3B37F3B90C240F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:50:22 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 84.205.32.0/19
IP: 91.123.32.0/20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:12:1d:f6:3e:4d:fd:fa:3b:37:f3:b9:0c:24:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:50:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fae115c302be0b4b8bcca0b32a8293a05c69d70b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e1:68:8f:b9:e6:51:9f:9b:0a:83:e0:38:e7:
8c:c6:19:f2:df:8f:a7:40:fa:c4:2b:06:71:f6:91:
dc:1e:38:6b:ce:f6:08:08:c2:2f:1b:21:6d:37:a7:
71:32:66:d8:2d:3f:65:b4:1e:b2:77:71:ff:79:08:
78:0a:9c:d1:b6:53:66:aa:32:a1:30:89:be:42:cc:
7d:cf:f7:c9:8c:ab:03:1a:69:85:e4:f7:b2:65:9d:
ef:70:64:e4:1a:a5:55:cc:61:13:89:00:2e:fb:18:
59:9d:cc:38:5a:90:2c:5b:a6:03:fc:40:9e:3d:7b:
36:b4:6b:28:5c:f9:5c:f0:6a:6b:05:dc:ee:20:3a:
e7:12:51:ef:f8:ac:eb:5f:73:ff:80:fc:db:ba:92:
85:f9:83:4a:b4:63:ea:2d:12:3c:d2:cb:2e:89:bd:
d0:9a:92:92:88:87:78:b4:b3:51:9a:d4:21:12:af:
86:4b:42:58:a3:de:56:61:88:4e:3d:ca:14:59:23:
67:7d:57:83:91:e1:5d:6e:b2:74:a1:1f:62:d4:00:
8d:f9:5b:78:49:a2:25:1b:9c:d3:7e:6b:ac:1b:44:
9f:29:46:f3:5a:7b:73:61:ad:ca:12:d5:af:6e:30:
03:a3:9f:6d:ff:3f:21:9c:70:3c:b5:29:f2:a7:27:
32:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E1:15:C3:02:BE:0B:4B:8B:CC:A0:B3:2A:82:93:A0:5C:69:D7:0B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.205.32.0/19
91.123.32.0/20
Signature Algorithm: sha256WithRSAEncryption
a3:80:56:6c:e1:50:76:92:e5:dd:f2:98:d1:a2:69:ec:20:5f:
04:65:e1:e3:31:d3:9d:60:ff:14:db:ad:15:e5:98:c8:7b:68:
b2:84:d9:dc:a1:5d:16:4f:cb:fb:50:e3:b9:92:90:99:c9:45:
27:9e:ac:ec:4f:55:4d:21:3d:39:67:7d:24:42:78:fb:46:00:
1c:35:a2:5d:a9:fd:ff:13:39:c7:5a:68:b4:be:bf:26:1c:8f:
b1:b0:fb:73:7d:f6:4b:e6:99:ed:b9:85:0e:b8:00:7d:00:3f:
45:80:2d:1b:3b:6e:d7:e6:63:ea:1f:ea:3c:cf:53:54:e1:b2:
2c:ab:72:db:14:36:6f:51:16:23:bc:1a:18:1b:77:2d:19:cf:
79:6a:ac:24:a1:ad:bc:9b:77:31:8c:73:f8:80:f7:86:48:52:
8b:36:b8:53:c1:10:47:98:a8:00:ec:37:f2:27:4d:7d:66:1d:
0d:90:24:ec:6f:50:b0:06:71:c0:02:aa:71:2f:15:47:06:7b:
30:4c:39:c7:b7:1b:01:a9:ef:f9:51:f8:22:9f:84:51:93:6e:
3d:fc:c2:55:05:ff:22:ee:a4:28:1d:68:e7:9c:f0:c8:39:27:
d0:50:f1:72:a5:c7:b4:1f:12:62:67:fd:c6:fe:4e:4d:fd:f5:
4f:cd:9d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:00:58 2025 by rpki-client