Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.cer
File: 2QhyKnVV3RYh3WpiIJ-o2lKUKZk.cer (raw, json)
Hash identifier: gIqz4tSvOoNcnprd3+K+td82wYdz3WXj8WfLQxyrlIE=
Subject key identifier: D9:08:72:2A:75:55:DD:16:21:DD:6A:62:20:9F:A8:DA:52:94:29:99
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FDAEE42BBABD62BDFB86F4A99229E0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6b/0866b0-fe6b-466f-bb86-2d9fca662e52/1/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6b/0866b0-fe6b-466f-bb86-2d9fca662e52/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:49:29 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.109.161.0/24
IP: 2a10:5c0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:ae:e4:2b:ba:bd:62:bd:fb:86:f4:a9:92:29:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:49:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d908722a7555dd1621dd6a62209fa8da52942999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0d:6c:75:1c:63:5c:64:c4:48:84:83:42:f6:
ac:09:df:6f:2d:64:aa:84:74:28:e2:1b:f1:c0:7a:
72:56:23:d2:10:31:13:65:49:b4:40:11:d3:65:c8:
d7:41:23:3c:06:09:4a:5d:0f:0d:c5:77:d4:93:d1:
5b:38:f0:d0:36:d2:4f:9c:bf:d7:71:56:eb:a5:97:
0f:df:f3:31:f7:b4:4d:b7:d8:e4:77:13:c0:50:dc:
3d:4c:c4:37:99:6c:88:59:81:7d:3c:b1:cd:f8:64:
9c:40:64:89:27:47:13:ce:48:82:47:65:06:87:a6:
4c:62:47:15:ef:85:a5:e4:c5:92:51:e7:af:9d:ce:
e3:12:d4:c9:73:d9:83:ed:96:f6:6c:fd:70:af:f0:
5d:8b:7c:02:13:17:b2:1a:55:bb:1d:ef:6b:1a:35:
68:9b:6e:08:6f:44:c4:e3:16:b0:77:f9:53:fd:1d:
93:fa:25:a8:42:56:28:37:a5:49:92:dd:d2:b9:3f:
b6:dc:10:48:c8:62:fc:72:c4:4c:4f:65:30:94:f7:
69:3e:e1:32:bf:a9:b7:5e:ea:e8:a6:22:b4:03:69:
54:e5:04:a8:72:8d:2e:78:b5:1f:09:b5:02:fc:e2:
e3:92:e8:2c:98:9a:8a:e0:6e:e6:3a:2a:6b:0d:57:
8b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:08:72:2A:75:55:DD:16:21:DD:6A:62:20:9F:A8:DA:52:94:29:99
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0866b0-fe6b-466f-bb86-2d9fca662e52/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0866b0-fe6b-466f-bb86-2d9fca662e52/1/2QhyKnVV3RYh3WpiIJ-o2lKUKZk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.109.161.0/24
IPv6:
2a10:5c0::/29
Signature Algorithm: sha256WithRSAEncryption
57:08:03:bb:18:84:2d:8e:08:90:0b:38:f4:64:69:2e:f6:0d:
43:e5:c9:80:be:71:08:e1:e1:19:22:ec:a5:b9:a1:25:d1:7b:
97:81:02:a9:98:d7:d3:4f:c0:3b:a4:dc:b3:f0:2d:2e:97:5b:
1f:2b:e2:17:45:97:e0:f3:b7:9c:d1:ae:41:cc:ff:10:88:9a:
e2:17:85:87:01:d0:f4:96:71:a7:f1:57:9f:c2:fc:55:bd:6c:
87:09:35:13:fd:35:ae:f9:08:5b:5e:99:85:ed:f5:74:de:0f:
6e:cd:e4:17:94:b6:67:c1:ba:01:72:d8:b2:c0:f3:29:c7:1e:
02:05:64:44:dd:86:e9:62:68:1e:c0:a5:13:51:a9:83:ae:6c:
4b:97:4e:3e:3e:e4:c9:eb:c5:5f:51:d5:3f:e6:ac:09:38:35:
92:74:fb:22:5a:61:6d:be:8c:8f:86:3e:29:c3:f2:58:a4:f8:
fd:c7:22:2e:ba:2b:8d:d0:c2:9e:58:89:af:70:65:f6:94:07:
db:d8:ff:fa:1e:1c:88:54:14:f7:ac:a0:7e:cd:9f:ce:1d:2b:
85:87:7f:6d:9a:5c:6e:20:39:f0:0e:b5:06:28:fe:1b:b6:6c:
1b:f6:4b:a9:d9:10:96:4b:10:fa:b9:1a:c4:ee:7d:e9:73:e8:
d6:b9:fc:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:44:08 2025 by rpki-client