Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28lQCYQ2KBzuVCoedFRlUeHlUoM.cer
File: 28lQCYQ2KBzuVCoedFRlUeHlUoM.cer (raw, json)
Hash identifier: KLj2krI59r6VgDNwcjIgZXXUNLtDpr/t3aWyLu+24pw=
Subject key identifier: DB:C9:50:09:84:36:28:1C:EE:54:2A:1E:74:54:65:51:E1:E5:52:83
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427487EA88A1DE8C32D47B164B82F418D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/02/5aa448-643f-4aee-90d9-f47e169266c2/1/28lQCYQ2KBzuVCoedFRlUeHlUoM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/02/5aa448-643f-4aee-90d9-f47e169266c2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:50:50 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.116.72.0/22
IP: 2a0d:5040::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:7e:a8:8a:1d:e8:c3:2d:47:b1:64:b8:2f:41:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:50:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dbc950098436281cee542a1e74546551e1e55283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0f:fa:62:15:f8:be:ff:e6:a6:70:2d:9a:8a:
b4:84:f4:6a:46:90:0b:a6:61:96:10:f8:72:c8:97:
ca:04:2f:ba:5c:f4:83:40:bb:78:4d:97:72:13:76:
33:c1:e0:f4:56:bb:76:d7:da:5d:e1:50:3b:44:b2:
67:84:4c:39:cd:1c:d6:8d:50:1c:6a:f1:99:76:6c:
13:5a:af:9a:7d:17:0f:89:31:44:41:7e:d0:fc:7c:
7f:b1:ef:e5:e0:9d:1e:f7:e4:ed:4d:74:a8:af:2c:
3b:1f:a5:6a:e4:f8:bc:48:80:39:ae:93:8e:03:d8:
8d:13:7d:a5:37:f1:77:1e:3c:ec:e2:5f:95:a8:48:
5f:86:77:87:2c:ac:5f:f9:10:b8:9d:b5:bb:6a:e1:
47:10:09:e8:c0:3a:99:3b:90:77:f8:2b:8b:4f:f1:
c4:ae:ab:a7:64:9f:14:8c:32:27:39:a1:79:fc:76:
6f:68:ff:64:42:07:d4:26:9e:d2:45:1e:8e:87:e9:
51:d7:58:2f:15:67:9a:fc:ca:25:88:f9:42:a8:61:
df:e5:ce:f2:44:57:cd:7c:d8:0f:1a:23:e7:2b:95:
1d:30:50:1e:d3:9a:dd:bd:4d:c0:58:dc:20:7d:dd:
0d:cf:4f:5f:0e:55:0f:6a:5b:bf:44:75:80:21:6e:
56:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:C9:50:09:84:36:28:1C:EE:54:2A:1E:74:54:65:51:E1:E5:52:83
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5aa448-643f-4aee-90d9-f47e169266c2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5aa448-643f-4aee-90d9-f47e169266c2/1/28lQCYQ2KBzuVCoedFRlUeHlUoM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.116.72.0/22
IPv6:
2a0d:5040::/29
Signature Algorithm: sha256WithRSAEncryption
83:c4:33:ee:8c:a8:8b:50:aa:b0:c1:27:37:41:1e:31:32:6c:
82:d2:ed:91:c1:92:ef:e0:4d:87:73:9b:0e:81:bc:cc:24:00:
d7:0c:0c:43:06:96:9d:0c:66:92:46:34:96:5a:6e:cc:9b:d1:
06:12:c3:fb:65:57:a9:5a:b1:57:dc:f0:df:0f:96:b7:9d:0e:
48:66:09:7a:65:20:26:9b:9e:da:53:a5:b7:67:9d:21:0c:af:
02:85:f8:74:4e:43:35:e6:3c:34:82:97:9a:b4:e7:ff:f8:c4:
33:91:2f:07:29:dd:c1:2d:2f:e2:e5:ce:d4:0d:42:ac:58:39:
fc:a4:a7:86:fb:f5:f5:3c:64:d8:12:9b:d3:9d:e8:f3:94:67:
b3:f9:3c:c9:66:42:19:e2:f9:23:48:08:0a:ce:1f:fe:8b:d6:
c5:70:43:3c:24:5e:4c:fc:5e:30:5a:30:61:12:7b:1e:82:c0:
79:bf:30:d0:13:cc:2c:8d:ef:5a:ff:09:ca:2e:72:65:35:25:
74:89:20:79:82:e0:58:75:b8:99:36:28:2a:79:0f:81:85:8b:
26:47:71:db:91:dd:1e:7a:6d:c9:24:c8:0c:f0:85:a7:65:fd:
39:35:ac:3d:14:ec:2e:2a:ff:6c:f2:35:1d:78:42:e1:1c:c9:
d6:34:85:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:43:57 2025 by rpki-client