Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1H5iy_X-8zd_nnzVhVj0Ti7qm84.cer
File: 1H5iy_X-8zd_nnzVhVj0Ti7qm84.cer (raw, json)
Hash identifier: 2DnyhB0gbM3EnPKhcT2JMkv8OEkVxK2xy5TnyXVy5dk=
Subject key identifier: D4:7E:62:CB:F5:FE:F3:37:7F:9E:7C:D5:85:58:F4:4E:2E:EA:9B:CE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B56E41DCCFDC0E53F47D93065B6CAC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:49:49 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.207.18.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:6e:41:dc:cf:dc:0e:53:f4:7d:93:06:5b:6c:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:49:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d47e62cbf5fef3377f9e7cd58558f44e2eea9bce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8c:32:ab:69:7f:c8:37:cc:37:d5:ef:d5:62:
dc:14:e9:dc:ba:5b:1b:91:84:aa:9d:08:c8:2f:cf:
3e:94:3d:da:42:a8:71:fb:14:a3:50:8f:2f:dc:c5:
ff:44:da:1c:31:21:95:df:43:39:88:c2:f9:69:4e:
a2:19:d9:30:e4:0f:f2:98:6b:7c:16:15:a9:d8:d4:
c1:49:af:40:ac:13:29:72:d1:02:7c:93:cc:76:26:
e8:91:64:3a:9a:7f:4c:5f:5b:28:73:cc:c6:f3:5e:
b9:98:4e:d2:29:66:8e:c2:8b:4c:65:36:25:17:a0:
a7:0d:9e:e5:ac:87:b5:1e:6e:c0:cb:93:1f:1f:3f:
f1:cb:01:6c:96:69:a6:61:4e:69:0e:6f:a0:f9:9c:
3f:07:5d:26:ab:8c:97:82:b8:4a:13:5a:b3:4d:aa:
90:53:48:93:f7:72:4e:b2:be:d1:72:8c:0e:43:3d:
55:91:b8:aa:04:6b:73:af:c9:0c:e0:c6:d7:e0:db:
2f:72:47:3c:65:33:94:6e:4b:f8:15:e6:b0:ac:43:
a7:91:76:a8:e3:b5:7d:ee:9a:b5:37:04:3d:4d:8f:
58:9b:0a:9f:12:75:03:9f:ed:23:c1:f3:21:c0:a4:
73:18:da:10:22:be:64:eb:67:b4:de:d2:93:0b:ef:
ef:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:7E:62:CB:F5:FE:F3:37:7F:9E:7C:D5:85:58:F4:4E:2E:EA:9B:CE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/aa9d4e-1226-40e7-a9c1-469d3a51d47d/1/1H5iy_X-8zd_nnzVhVj0Ti7qm84.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.18.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:57:cd:77:9f:4a:3f:c2:01:38:28:92:3d:7c:51:44:09:1a:
46:fe:b8:f3:4b:54:9b:14:e9:81:76:d4:30:ae:50:ef:7f:cf:
a2:f9:e9:1c:3a:17:9d:9b:93:9d:75:a9:1a:f9:97:ee:9b:7f:
c7:e9:59:0a:9b:f1:37:80:44:78:5b:fe:5f:3a:78:e1:b0:e9:
4e:83:c3:33:92:87:72:56:07:52:47:46:3a:dd:66:fb:95:bd:
91:a2:2e:dc:81:08:4d:bd:d5:e6:c6:21:c6:95:9c:8d:cb:98:
57:03:5c:95:a1:f7:6c:3d:e0:97:c5:a4:fa:26:ed:df:01:9e:
2d:78:52:1b:a7:e9:c2:99:4e:ba:39:af:e7:3d:1d:cc:17:5d:
bf:0d:50:9d:94:f7:f8:92:17:89:6a:ce:7b:03:b3:57:30:d7:
d6:f1:b6:b1:c1:89:65:5c:ea:c2:89:2f:fd:e0:91:b9:7a:16:
72:67:a6:f7:3f:75:68:22:ea:78:92:7d:72:77:48:7c:84:00:
94:94:32:3d:89:fa:54:07:2d:f6:5b:7a:4f:7c:bb:a1:30:43:
ed:7a:af:4a:b0:ba:e9:29:f9:1a:60:00:f8:2c:83:ee:b2:1a:
53:9e:79:c1:a7:93:f5:1d:e3:f3:4f:34:6f:22:4b:45:60:e9:
80:b7:dc:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:08:57 2025 by rpki-client