Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2zdeFqGTZ96ZuySsEV0lmioEgaw.cer
File: 2zdeFqGTZ96ZuySsEV0lmioEgaw.cer (raw, json)
Hash identifier: yD7AVFnbPNOiFk1gQCdPTR+XyYNMSVSODpYxaqps1UY=
Subject key identifier: DB:37:5E:16:A1:93:67:DE:99:BB:24:AC:11:5D:25:9A:2A:04:81:AC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942143DF000293A09ABEEADFF14B81F7E4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/33/9bc5bc-8f99-42ed-a8ce-5b86ba585922/1/2zdeFqGTZ96ZuySsEV0lmioEgaw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/33/9bc5bc-8f99-42ed-a8ce-5b86ba585922/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:03 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.102.190.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:df:00:02:93:a0:9a:be:ea:df:f1:4b:81:f7:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=db375e16a19367de99bb24ac115d259a2a0481ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c6:00:90:46:5e:2f:9d:f2:39:24:c4:24:82:
3b:4e:d8:61:df:8e:39:1d:3c:2e:18:ae:cc:13:63:
3d:7e:cf:11:82:5c:3c:3c:a9:1c:0a:5e:76:50:31:
76:74:f3:99:50:c4:b4:be:ca:a4:a9:2a:da:72:00:
89:22:0e:dd:2e:2b:ba:c2:d6:9e:c4:9f:fc:64:6f:
c8:a6:f1:aa:06:39:19:75:cb:88:8d:72:5e:c2:7b:
bf:bc:9e:44:09:83:0c:e2:b4:4a:9f:2c:6c:4c:73:
96:6e:61:64:1c:e7:75:ff:46:96:e3:a8:bf:e9:d0:
c2:27:64:95:a2:47:05:6c:79:2a:ac:51:49:09:42:
a2:fe:e4:1d:e5:5b:45:19:ef:3b:ae:97:e0:6a:67:
8b:e8:fb:c1:5e:69:cd:3a:d6:ec:29:d7:c0:57:7d:
92:4e:76:40:2c:be:5b:a5:97:5a:67:b4:25:b3:84:
c7:f5:c0:69:bf:c3:7c:98:24:f0:37:a0:f8:5a:1b:
26:c8:35:04:f5:15:5f:48:c5:64:d7:ae:3c:7e:78:
59:51:37:14:62:70:21:ec:c3:56:f1:04:11:cd:cc:
77:1a:89:09:76:a2:0a:3a:7b:73:f8:7c:47:7c:93:
d6:c7:21:ce:4e:a5:b2:70:00:d3:81:d1:e8:95:b2:
b8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:37:5E:16:A1:93:67:DE:99:BB:24:AC:11:5D:25:9A:2A:04:81:AC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/9bc5bc-8f99-42ed-a8ce-5b86ba585922/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/9bc5bc-8f99-42ed-a8ce-5b86ba585922/1/2zdeFqGTZ96ZuySsEV0lmioEgaw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.102.190.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:3b:d5:80:7c:48:17:c0:27:f9:39:0a:19:8f:1c:a1:be:2f:
27:7d:16:69:ee:b0:bc:d9:2e:52:95:a6:52:2a:32:c4:af:c8:
c0:c2:1a:43:ae:d2:13:8e:da:d7:d6:25:2b:95:ad:e1:ae:3e:
3d:91:71:38:4d:80:55:de:55:b0:3d:b7:66:5e:2a:47:10:2d:
17:41:b7:a2:e3:45:e7:55:28:95:66:77:b3:82:47:64:af:0b:
16:45:a8:f9:b2:ae:b1:0f:df:43:e9:40:07:ae:40:72:a5:09:
d2:8d:01:7a:51:4a:96:63:30:8c:cd:52:90:bf:aa:72:96:50:
19:9c:ff:72:1f:ab:2b:ea:e2:5a:99:e1:57:1e:4b:d2:1b:bc:
4a:c5:0b:53:c0:2f:20:28:9f:2a:9b:66:f7:4d:ad:65:bc:84:
71:38:33:e8:fe:a0:9a:11:2a:3c:5e:6f:0e:89:75:ff:87:84:
50:80:81:c9:49:0e:65:ce:d7:34:0b:ca:cd:68:61:e9:95:ff:
7d:93:83:f3:ca:ee:46:f8:39:48:e9:04:ca:f8:df:4d:25:f5:
35:2e:ea:5b:fc:3a:58:4a:3c:6e:51:b5:8f:d1:be:f5:ee:d9:
de:38:2b:9b:c8:5e:51:75:0a:45:e4:11:99:d0:f6:1e:8a:79:
2c:c9:15:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:58:14 2025 by rpki-client