Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.cer
File: 1j-OQvuEQqSKfUfvTAtuFHUUv8Q.cer (raw, json)
Hash identifier: OSq9XcPmE9aYAPyE5kfS/kg2DO18x4uNpjHCyARosIo=
Subject key identifier: D6:3F:8E:42:FB:84:42:A4:8A:7D:47:EF:4C:0B:6E:14:75:14:BF:C4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194222015CBA6276476EA6779FB6D14CE52
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:35 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.106.200.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:15:cb:a6:27:64:76:ea:67:79:fb:6d:14:ce:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d63f8e42fb8442a48a7d47ef4c0b6e147514bfc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:64:e0:34:83:0d:5c:04:c2:f3:02:ce:b7:ce:
4a:81:c4:2c:c8:64:21:75:45:43:3e:94:3d:1a:cb:
42:2a:2e:ae:e4:9f:fd:ce:85:f5:d6:74:6f:d0:cf:
eb:4a:d0:06:6b:60:08:76:f4:78:94:a4:8c:44:da:
90:9e:fc:77:a9:92:32:88:63:f5:3f:5c:4d:60:19:
6f:ab:c5:7d:d7:ac:87:18:16:2d:a8:7b:9f:98:a8:
50:53:85:29:7b:ff:8b:12:e7:3d:b9:48:ac:9f:88:
3c:37:12:c1:71:60:66:36:82:e8:a0:55:63:b7:f5:
6e:65:9e:cf:9f:ff:33:d2:a9:fe:94:e6:79:46:82:
cc:90:81:10:82:a7:a9:81:07:d2:46:f6:74:9a:e4:
a7:49:2b:b0:c2:29:80:d0:2d:2a:69:fa:de:26:30:
80:54:7e:c0:cc:52:f0:cc:a1:41:a9:7b:cd:2e:2a:
0e:f7:14:0d:05:1c:a7:90:01:50:66:71:09:2b:3f:
4b:d1:0a:5c:2c:2b:11:58:a0:17:32:8b:a8:04:39:
0b:42:a9:f0:3e:21:fa:43:3c:58:f0:ce:86:cc:17:
b4:ba:7a:b9:36:87:8a:82:49:de:1a:60:80:ad:80:
47:2e:7e:3d:57:fa:97:da:1a:3b:7f:b1:e6:77:b3:
36:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:3F:8E:42:FB:84:42:A4:8A:7D:47:EF:4C:0B:6E:14:75:14:BF:C4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.106.200.0/23
Signature Algorithm: sha256WithRSAEncryption
19:82:6b:72:0c:26:d8:2c:be:e5:cb:6e:b2:7d:c7:19:c4:6e:
8d:a8:3f:f9:7c:7a:41:89:a9:cc:98:74:aa:1d:56:d6:3f:ed:
d8:51:e8:73:ab:d0:a6:d2:1e:91:f5:01:ca:8c:69:2c:ad:b5:
fe:38:e0:9d:94:a0:70:a5:44:81:3f:06:ba:b4:d3:3f:41:7b:
1d:8e:d3:90:43:82:9d:9c:6b:3d:d6:67:ee:7a:c0:0e:74:61:
35:d3:06:e6:99:a9:f0:74:f6:b4:9f:22:b1:1b:a9:12:28:2a:
be:c8:2d:4f:41:db:55:f0:2f:94:0c:0b:b8:91:3a:6d:c6:79:
ae:f9:8f:8c:31:5a:dd:9a:32:94:f6:ef:44:39:0d:5d:52:b8:
b8:b7:db:cf:6a:70:e0:0c:39:9c:e6:8a:5e:ce:f4:43:0b:2b:
9e:17:cd:bc:eb:25:f7:f6:49:7c:4c:9b:41:90:d3:c3:fd:65:
0e:96:ec:62:b5:16:0e:ae:98:e9:65:5b:c1:7c:e8:08:b8:f0:
17:de:1d:20:b9:75:dd:75:e5:08:e9:1b:84:f2:20:20:0d:37:
65:2d:65:31:99:ed:2f:da:30:4d:98:7f:f6:6a:da:93:0b:30:
1b:56:3f:56:25:87:37:80:e8:9e:04:3a:a8:48:bc:e9:42:5b:
1a:73:3b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:58:25 2025 by rpki-client