Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4K-xYKlzOKshEUhArdxhgKW6QrE.cer
File: 4K-xYKlzOKshEUhArdxhgKW6QrE.cer (raw, json)
Hash identifier: Y/rmsLg9uc2jpzrDb7fgI/L+9Kym+yQZINA9JPBJSL8=
Subject key identifier: E0:AF:B1:60:A9:73:38:AB:21:11:48:40:AD:DC:61:80:A5:BA:42:B1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266BFC18E70073FABEEAF5186B59E303
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/4K-xYKlzOKshEUhArdxhgKW6QrE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:49:58 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 45.153.84.0/22
IP: 2a05:b000::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:fc:18:e7:00:73:fa:be:ea:f5:18:6b:59:e3:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:49:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e0afb160a97338ab21114840addc6180a5ba42b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:58:49:b2:15:86:da:53:bd:04:2a:93:2e:28:
ca:55:de:e9:80:0f:f0:74:0e:d7:99:48:cd:c1:fc:
7d:12:4d:22:94:b7:e4:40:9d:21:06:55:b9:75:d6:
0f:a8:b9:fc:61:26:85:04:c0:68:19:f2:85:91:28:
50:63:ac:8a:24:60:a1:33:a7:19:98:ce:c7:90:4b:
56:ce:88:46:1f:62:79:87:ab:00:47:23:77:f6:65:
99:d9:bb:b2:58:cc:b3:b1:db:f0:8a:ba:9c:5d:8b:
85:81:6a:06:77:b4:79:53:51:30:a9:5f:c4:15:a4:
41:b0:c1:24:fd:6d:a5:72:86:8e:8f:7d:f1:87:9e:
b5:ec:7e:c8:a0:45:4a:bc:0a:74:88:4d:b9:92:14:
5c:9a:38:40:ac:7e:ee:e5:b7:82:e7:20:25:8a:06:
4b:a5:55:a6:06:14:c0:8b:d5:0e:2a:fc:2d:43:88:
e7:08:9f:49:fb:e7:0b:d8:76:4a:9e:d5:4b:1a:d3:
81:dc:2b:ab:ae:65:b8:5e:c2:8e:4e:67:f2:96:16:
b5:e6:df:c4:5f:22:08:0a:14:3d:51:93:08:de:2f:
e4:dc:51:a6:a3:f1:cc:18:dd:cb:b7:f9:16:e4:64:
1d:ba:ba:b5:bb:ad:97:08:ea:29:68:23:e5:35:69:
d9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:AF:B1:60:A9:73:38:AB:21:11:48:40:AD:DC:61:80:A5:BA:42:B1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/4K-xYKlzOKshEUhArdxhgKW6QrE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.84.0/22
IPv6:
2a05:b000::/29
Signature Algorithm: sha256WithRSAEncryption
78:36:7e:49:2f:05:8b:84:fd:a0:41:6b:ff:b6:9e:dc:96:9a:
c9:43:be:e3:f9:f4:68:aa:5a:33:07:11:d7:19:da:40:9e:3e:
e1:17:93:11:2f:6c:09:ff:f6:0a:27:9f:af:4e:f4:7f:74:3e:
ac:bc:12:7d:b8:3a:ea:14:9a:dd:24:6e:c4:ff:e8:9a:51:8a:
e6:89:52:18:8f:4c:46:f1:0c:38:ef:01:b6:ac:b6:48:e4:6d:
b1:ac:59:45:6b:13:89:cb:8c:b5:03:14:e5:da:26:2e:05:c6:
2a:5f:85:27:78:1c:d9:96:a0:07:0b:88:65:af:2c:65:63:74:
ba:6a:c6:db:39:e6:24:da:af:ee:b1:4a:53:6d:68:06:46:43:
36:f1:c9:de:f7:6c:d7:3d:31:27:92:f0:0e:9a:ce:01:f5:58:
7a:00:f7:5a:6b:ec:cc:b3:ef:eb:77:d8:0c:13:56:6f:0b:0b:
c1:a4:ff:f4:2c:cd:95:f5:b8:39:01:84:41:4d:3c:66:f1:0a:
79:b5:4b:e8:a4:1f:e2:02:79:61:b8:cc:42:a5:6e:b8:f0:cb:
59:a5:d9:74:13:12:86:f7:f3:20:7b:01:c9:4c:52:46:e3:d0:
e8:71:bc:1e:28:89:48:1f:b0:a5:83:3c:cc:0f:a6:c8:bd:48:
99:d7:e6:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:15:46 2025 by rpki-client