Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34CJqp4dXBKrrUOnAVEdocZfn6Y.cer
File: 34CJqp4dXBKrrUOnAVEdocZfn6Y.cer (raw, json)
Hash identifier: nZuwJ+H5hKnrJa+JuZgsizpB1LexMiQPDOJGReaJeIk=
Subject key identifier: DF:80:89:AA:9E:1D:5C:12:AB:AD:43:A7:01:51:1D:A1:C6:5F:9F:A6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422202E9ABC67C0A3E76A0714C8791D25
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:42 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.247.181.0/24
IP: 2a11:d5c0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:2e:9a:bc:67:c0:a3:e7:6a:07:14:c8:79:1d:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=df8089aa9e1d5c12abad43a701511da1c65f9fa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a1:5a:54:a6:b2:18:7e:3f:d5:96:f2:95:30:
a7:34:8b:c7:e3:b7:91:05:a6:8e:0e:01:ed:3e:0a:
20:de:56:ab:2d:86:d0:44:0b:7a:61:37:81:9c:18:
4f:25:44:57:5d:2c:4e:a5:a2:52:c9:3e:bf:1d:bd:
08:cd:9f:9d:7c:05:2b:97:69:8d:9d:b8:fc:e2:8b:
24:f0:30:fa:6b:8a:f2:eb:46:c9:2e:59:15:11:3b:
64:dc:93:e8:65:e2:14:12:5e:3c:8d:fa:d3:23:1f:
a7:cb:21:52:d4:92:b6:0f:bb:86:44:3c:86:5d:e1:
45:ab:d0:13:d8:41:79:39:ce:04:de:b5:f3:36:04:
59:b3:13:48:b2:9a:03:02:97:91:4a:c7:7b:09:33:
1f:7d:bc:51:c1:fd:41:dc:28:a7:ee:7e:43:f3:a2:
9c:61:ec:11:23:de:8d:71:fa:57:d9:37:e2:e6:23:
89:7c:64:36:42:e9:33:6e:fc:db:6a:53:a5:17:f7:
56:c9:e8:20:42:a5:ff:37:4b:88:34:0c:1f:80:44:
f8:e5:25:d8:2d:8a:5c:02:4f:7c:b5:41:91:d4:72:
8b:18:25:e9:cc:7a:e4:fe:8c:af:fb:e9:a9:2d:fa:
c8:62:92:74:0f:21:54:3d:6c:7b:94:1e:92:e5:6c:
a8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:80:89:AA:9E:1D:5C:12:AB:AD:43:A7:01:51:1D:A1:C6:5F:9F:A6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f5475b-a6f9-4cc7-b70f-fd644657ca2b/1/34CJqp4dXBKrrUOnAVEdocZfn6Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.247.181.0/24
IPv6:
2a11:d5c0::/29
Signature Algorithm: sha256WithRSAEncryption
15:9d:47:97:39:43:8c:78:dd:80:75:e8:61:c9:1b:34:f9:23:
3c:de:87:6f:bb:9e:4b:d2:d2:ff:47:92:d9:59:4a:4f:a6:98:
de:60:13:f0:77:d1:fa:6b:c1:71:ce:ec:41:b3:4a:7c:8c:da:
7f:7b:5d:73:a9:9d:ab:50:fc:74:2e:ca:44:10:f7:0e:57:dc:
7d:f4:e5:2c:2f:d4:0b:b9:83:d7:c0:59:4d:47:e2:6d:a6:ca:
6d:33:93:0f:b5:22:b0:d5:92:82:8b:cb:8c:d5:56:59:3a:df:
ff:f1:75:b4:2d:b9:7c:7a:96:8d:b5:30:c3:d1:d7:fa:b9:78:
02:8c:37:1b:02:1d:67:af:4a:9a:3c:fd:22:d9:21:22:75:7b:
1c:85:92:f3:fd:e5:e8:32:65:c7:bc:f4:9f:67:97:b2:02:ed:
6e:02:4d:b0:8b:1d:59:cc:4b:8c:ad:03:d5:e9:51:44:18:88:
f0:4b:89:9f:54:25:57:40:71:d7:fd:1b:ee:d0:07:56:fd:ad:
02:7f:e9:38:fe:87:4a:50:3d:4f:32:d9:12:45:3b:2c:51:1e:
08:e9:2a:28:2c:b4:8c:c2:f0:39:8c:c0:10:03:2e:ae:58:9b:
54:c5:d0:72:9b:fd:7e:4b:96:7d:63:32:99:62:2a:9a:da:9c:
9c:3a:e9:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:46:43 2025 by rpki-client