Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1CI2dDN2W1QaNzkKmYmXtzfEZHI.cer
File: 1CI2dDN2W1QaNzkKmYmXtzfEZHI.cer (raw, json)
Hash identifier: MFlmbQhcR1EyyymRbh3Zjqd6/6ozd22Nk09gyxN9CNY=
Subject key identifier: D4:22:36:74:33:76:5B:54:1A:37:39:0A:99:89:97:B7:37:C4:64:72
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266BAD72A156B983C63B5EE12D3C21AD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:49:38 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 151.100.0.0/16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:ad:72:a1:56:b9:83:c6:3b:5e:e1:2d:3c:21:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d422367433765b541a37390a998997b737c46472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4a:10:3e:a1:b1:67:50:fb:97:42:fd:2b:b0:
6f:c5:06:90:43:ee:ed:c7:6f:ec:79:ab:10:37:5a:
95:af:1c:02:55:d2:0e:20:b9:d0:c6:c5:80:5a:1a:
00:91:39:e5:0a:99:f4:5f:5b:e8:bb:e6:5f:51:47:
10:c1:6e:2b:33:5e:35:d2:54:df:4e:6b:79:c0:35:
4d:16:51:cc:e7:d7:ce:5c:7c:47:28:3f:be:20:6c:
47:b1:97:29:78:5d:fb:e9:f8:f4:fc:3d:3a:d6:eb:
bf:aa:e9:9f:ab:a4:e4:ac:d4:2e:4c:32:1e:55:a4:
32:3a:83:80:f5:5b:0f:41:3b:34:2a:0f:8b:26:c2:
98:53:55:c5:b0:24:4d:a8:a9:dc:09:1c:10:8a:f9:
36:75:38:6d:ff:da:fc:56:df:32:24:9f:c9:9c:38:
c8:d9:34:03:5b:26:2a:b7:7c:63:48:43:d4:7e:0e:
98:08:a6:e1:36:73:12:2f:49:b0:16:ec:96:7b:be:
51:2e:ba:c6:18:e0:02:c0:7f:5f:79:b1:ac:56:af:
c1:be:58:82:ea:16:d2:36:1d:d3:c2:b0:1f:be:ef:
5e:6f:c0:89:c3:f7:01:dc:a5:b4:7c:7b:c5:51:ea:
a7:7f:a7:ed:bb:84:66:a2:22:6c:72:b9:30:3c:76:
0e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:22:36:74:33:76:5B:54:1A:37:39:0A:99:89:97:B7:37:C4:64:72
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.100.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3a:e8:62:f0:1b:de:9b:ef:87:09:3b:8f:19:88:2e:62:ed:8b:
e9:f3:51:45:00:4d:87:46:8f:51:26:6d:ae:64:d5:8a:45:54:
36:5c:00:41:67:b0:55:c4:ff:87:69:e9:1f:bf:fe:1f:ce:fd:
f4:b8:96:75:0f:54:9a:2e:ad:d5:e6:50:a9:68:9b:8f:49:66:
4a:0c:21:cd:ac:2e:97:15:e2:61:fc:de:4c:63:a0:16:de:b6:
74:ae:70:e3:91:23:1a:b2:2b:24:46:ac:89:e4:64:1c:5e:b4:
33:1f:cb:3f:d6:12:05:4e:00:b3:9e:06:e4:3d:45:1f:ba:0e:
22:a0:d4:e4:91:42:63:01:57:ea:76:68:25:8e:64:59:7b:60:
43:11:1b:85:f2:eb:7b:31:8e:24:14:27:33:64:22:f3:3d:ca:
f8:19:30:38:12:c6:1b:05:61:a0:4e:43:40:df:29:8a:2d:5f:
fe:6a:c1:e5:d8:9c:7c:fe:c4:9a:c1:b7:18:df:55:ff:94:0f:
d7:34:5c:9a:d4:55:2e:07:1e:83:48:41:4e:12:af:54:d6:b7:
5c:b5:8b:59:89:d8:94:ea:96:7e:37:37:a7:c0:7a:d1:e0:d1:
5b:fd:44:d6:5a:e0:c7:01:58:f4:bb:b4:ae:05:b9:9b:40:77:
61:00:37:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:08:55 2025 by rpki-client