Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2BzxqsIapYI7AZ3pGu7sI-PlJts.cer
File: 2BzxqsIapYI7AZ3pGu7sI-PlJts.cer (raw, json)
Hash identifier: WJJV2GBhe8Qm1aH+tYtSjDEjOHsoPvjMlpiESUGizUs=
Subject key identifier: D8:1C:F1:AA:C2:1A:A5:82:3B:01:9D:E9:1A:EE:EC:23:E3:E5:26:DB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019428239AE2EE74499FD054A2A2AEB44A2A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 17:50:09 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 195.43.60.0/22
IP: 2001:678:f0::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:9a:e2:ee:74:49:9f:d0:54:a2:a2:ae:b4:4a:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 17:50:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d81cf1aac21aa5823b019de91aeeec23e3e526db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d2:62:b3:b1:7a:3f:95:5b:3f:85:bc:d6:2a:
f7:5d:f8:9e:8e:35:09:56:53:71:15:75:d1:50:13:
28:b3:6a:a5:e4:90:33:d4:1d:2e:33:59:94:80:1f:
53:a3:05:d9:07:6f:e5:60:d0:dc:3f:6c:05:77:5b:
30:53:b6:99:54:e5:4e:99:56:a0:84:9c:98:22:f3:
88:16:98:8b:bb:8c:fd:cc:9e:1a:9f:8c:5d:57:fd:
75:7e:a0:6d:5c:51:d5:99:24:b2:b9:e7:d6:56:e2:
15:ef:c5:f2:da:a8:1e:5d:03:69:ff:3d:57:74:64:
6e:ab:87:89:96:f7:bb:72:5b:ba:e0:89:66:73:d4:
9e:86:45:a0:91:7f:bf:24:1a:7e:37:b5:3a:4d:cb:
02:98:e7:3e:a8:97:e7:6f:73:47:8c:69:9a:85:ba:
10:b6:c5:60:5d:d4:1b:8f:83:df:3f:64:62:6f:1e:
b4:db:bf:86:bf:46:84:fd:35:da:4d:c6:ec:78:a8:
39:78:85:9e:19:21:26:de:72:8c:44:f3:66:ac:7b:
4c:f7:15:19:43:00:d5:c8:4a:1a:2c:6b:c4:ea:06:
9e:71:d1:d8:3f:8e:5c:2d:32:58:ee:cd:9a:e3:fe:
60:f4:42:80:ae:72:70:c5:c8:fc:77:3a:fc:f5:65:
04:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:1C:F1:AA:C2:1A:A5:82:3B:01:9D:E9:1A:EE:EC:23:E3:E5:26:DB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/b8a6a4-f7ea-4afe-b60f-9c0de3652738/1/2BzxqsIapYI7AZ3pGu7sI-PlJts.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.43.60.0/22
IPv6:
2001:678:f0::/48
Signature Algorithm: sha256WithRSAEncryption
89:43:58:dc:92:47:3e:6e:3f:d5:61:13:81:34:0e:f4:89:3c:
d6:d0:26:ef:f8:50:98:16:1f:41:da:63:b3:01:1f:66:c2:ec:
d3:d8:25:05:f8:63:bb:c9:ba:59:58:a5:1c:76:76:8e:96:82:
69:2f:7d:d3:dc:2f:63:c7:10:53:fb:c2:ef:9f:1e:62:fe:bf:
f3:9d:6f:d9:68:e5:3c:b3:bb:35:5d:38:35:6b:e6:73:8c:3b:
08:f5:0a:fd:4e:d9:4b:81:c0:d6:3d:bf:3c:43:4e:75:96:4c:
9b:78:b4:fb:d2:a8:b6:cb:21:fd:8c:16:60:ab:bd:db:a6:59:
c8:6c:df:d2:1c:e0:02:5e:fd:63:8d:fd:75:dd:02:4f:12:be:
ed:63:52:c7:01:b2:fb:f5:6e:a2:6a:86:93:23:b2:51:7c:fb:
38:87:c5:73:bb:6f:65:52:f4:e9:cd:4d:8a:7d:92:63:2b:3c:
36:c1:5c:15:35:bc:ff:a4:75:76:8b:41:f9:50:e0:ef:0e:9c:
dd:f3:e8:9c:af:be:ab:e8:82:8d:ff:ab:f7:67:ce:73:4e:b2:
6d:a6:b9:83:98:a2:10:27:be:c3:4e:07:7e:d2:ae:22:e0:e8:
24:f6:e8:d2:e3:91:1a:3c:24:1e:c1:59:6f:72:4c:08:8f:49:
5c:d2:c1:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:04:28 2025 by rpki-client