Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4UYAGfiAaeNhThUQkhzH5E0cq-I.cer
File: 4UYAGfiAaeNhThUQkhzH5E0cq-I.cer (raw, json)
Hash identifier: wv9CPgoF+iESLvihD0eVWVxtEUd17AkdFrfbyZXw/W8=
Subject key identifier: E1:46:00:19:F8:80:69:E3:61:4E:15:10:92:1C:C7:E4:4D:1C:AB:E2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B2446B2D82008C74D9F3424BE1D90C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6c/3e444d-6720-444a-ae54-fcd1a63c5c45/1/4UYAGfiAaeNhThUQkhzH5E0cq-I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6c/3e444d-6720-444a-ae54-fcd1a63c5c45/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:38 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.171.224.0/22
IP: 2a0a:ff00::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:44:6b:2d:82:00:8c:74:d9:f3:42:4b:e1:d9:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e1460019f88069e3614e1510921cc7e44d1cabe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:75:b0:6c:67:48:81:e7:9d:7d:e7:51:8b:b2:
d5:39:c0:67:ea:5d:a7:07:50:bf:da:07:06:c4:53:
0a:85:78:94:09:be:7d:f6:47:f7:af:50:c2:46:7c:
6c:89:13:dc:ab:3f:37:83:87:04:8b:42:92:99:30:
00:87:02:2f:e1:eb:02:aa:ac:6e:05:15:b5:dc:49:
33:b2:3d:54:d9:e5:42:a8:ab:f6:34:df:dc:29:f2:
d1:da:48:1c:fa:68:f6:01:c5:57:cb:9b:e2:ac:28:
44:3e:43:aa:a4:16:40:79:eb:2d:18:19:22:c3:1f:
0e:96:54:d8:d5:f7:f8:02:9b:0c:9e:14:9d:28:4a:
cc:80:7e:6f:e2:b3:14:33:3d:e0:23:07:a1:05:d4:
27:37:08:dc:2d:5c:84:08:bc:c9:db:7d:ec:f1:2e:
4d:42:01:76:70:84:db:08:a4:9d:2a:62:0c:17:e8:
a1:f5:d0:72:02:dc:81:9b:b2:c9:e7:89:96:15:cc:
be:a0:86:6a:91:b2:29:e6:e3:01:13:27:44:67:04:
22:dd:87:d6:b0:19:f1:e6:0f:67:05:35:03:01:04:
ce:a2:ff:0a:6f:a0:cc:d9:4f:42:2e:0b:45:4c:4e:
23:b5:55:91:70:1b:ff:19:6d:c9:ce:3b:43:70:7c:
91:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:46:00:19:F8:80:69:E3:61:4E:15:10:92:1C:C7:E4:4D:1C:AB:E2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/3e444d-6720-444a-ae54-fcd1a63c5c45/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/3e444d-6720-444a-ae54-fcd1a63c5c45/1/4UYAGfiAaeNhThUQkhzH5E0cq-I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.171.224.0/22
IPv6:
2a0a:ff00::/32
Signature Algorithm: sha256WithRSAEncryption
b0:47:df:d6:37:0a:76:bc:04:46:51:ce:1d:75:d6:8a:86:c1:
97:4d:a3:9c:17:c1:1c:37:a2:09:ba:e2:fe:f2:d5:d0:22:d2:
cc:d6:60:85:f4:3c:2e:d1:df:c2:df:63:88:1f:fd:e6:2a:89:
db:b6:07:5b:68:ef:5f:b1:92:31:8e:73:a8:1d:1d:9b:12:b3:
55:8d:a2:2b:61:96:1e:c4:49:32:ae:56:22:60:4b:ee:65:64:
af:14:56:40:50:1c:dc:cb:5a:61:da:15:e2:41:1f:32:19:2b:
36:18:0c:d3:65:68:6d:29:44:71:4b:35:cc:f6:d6:0d:c4:af:
85:0a:b5:40:80:4c:40:c8:e2:63:0a:5b:f4:10:18:87:4d:da:
9e:dd:c2:a2:98:44:6b:82:16:7c:07:43:c8:3a:e1:50:ea:a9:
fc:29:a5:ea:59:81:c1:20:4f:38:e4:d0:6a:9b:1c:ea:ce:f0:
37:17:9b:6a:56:f2:93:7a:8c:68:06:b0:17:1e:91:36:df:64:
4c:d2:22:f0:9a:a2:87:34:f0:ef:4e:71:f6:11:52:5d:8c:eb:
bf:8b:17:7b:f9:7b:1b:43:7b:36:3b:7b:54:e8:9d:3a:8e:98:
be:39:e0:61:9e:09:3e:e6:2a:b4:ce:64:1e:73:17:b0:5a:52:
9a:e2:2b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:42:08 2025 by rpki-client