Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4XoaYiSN-HkTPAc61WKtA6K5L9w.cer
File: 4XoaYiSN-HkTPAc61WKtA6K5L9w.cer (raw, json)
Hash identifier: wmdL76MERi1R0s92JaLSGECaet5BRl/YBuvVJ7BpBxI=
Subject key identifier: E1:7A:1A:62:24:8D:F8:79:13:3C:07:3A:D5:62:AD:03:A2:B9:2F:DC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427474A4B33D5D3A8D17A5005D581B617
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:49:31 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2001:67c:1770::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:4a:4b:33:d5:d3:a8:d1:7a:50:05:d5:81:b6:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:49:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e17a1a62248df879133c073ad562ad03a2b92fdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b0:03:7b:06:c0:a7:4f:5b:3e:e8:37:10:81:
9d:1a:ff:6c:0c:be:1a:aa:f5:39:b3:12:50:f0:15:
e6:29:15:87:b7:14:34:56:6b:9d:1e:7e:fc:38:43:
c7:f3:49:94:fe:d0:86:a7:15:66:96:d1:4c:74:2e:
04:14:3d:09:a3:0b:c2:3b:4b:dc:41:37:27:ea:1b:
e0:f0:61:cd:b1:9f:ef:68:3f:05:c5:a2:5a:4d:8f:
90:ee:55:4b:3f:5e:39:fb:88:13:dd:b6:10:04:50:
5d:e9:51:d4:3f:a3:5f:ce:c8:b5:86:0f:6c:88:73:
6e:1d:f6:b8:ad:ad:34:98:44:ae:3e:a7:f1:6c:5d:
2f:3f:f0:13:20:2d:ee:af:54:13:30:e5:5d:b7:01:
9d:c0:0d:45:a4:76:45:29:0f:ea:d6:a1:58:b8:5b:
3f:5a:b1:a5:1b:1d:2c:5c:d2:2b:8a:0d:05:fc:2e:
f0:6e:e9:63:48:d5:88:fb:ed:dc:fe:bf:03:ac:ad:
c0:ed:ff:67:96:16:5e:f9:53:28:dc:47:71:8a:a1:
f6:71:e0:a7:d8:73:60:24:7c:14:52:fc:88:ff:6e:
34:c8:e1:c1:b7:5b:22:ff:85:43:54:20:80:f1:7c:
32:54:97:8d:f2:fd:85:b3:06:39:16:79:fe:c3:7d:
b5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:7A:1A:62:24:8D:F8:79:13:3C:07:3A:D5:62:AD:03:A2:B9:2F:DC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:1770::/48
Signature Algorithm: sha256WithRSAEncryption
2b:f8:fe:0d:c2:ed:18:f7:2b:ae:08:a7:1f:df:03:d3:b5:ec:
c6:f9:27:39:c8:30:e7:a4:a7:9d:e1:78:3b:9a:0c:f6:13:fd:
9d:fb:78:af:01:78:29:e8:1f:26:c8:b1:09:82:a0:91:cc:49:
1e:be:9a:ab:b8:1a:73:5e:9e:cd:cd:b4:56:67:c6:61:6f:82:
80:47:99:a3:fd:ec:d9:be:67:47:50:b4:46:52:0d:60:18:54:
77:5d:41:2c:27:73:ed:1b:0c:29:77:0c:fa:c8:22:63:d1:7b:
5d:da:22:ab:93:0c:78:93:a2:80:80:ae:5c:01:5c:92:25:1f:
59:99:18:24:df:ed:e0:c9:36:c6:c7:c9:f6:eb:b2:40:8a:4b:
39:e7:77:e7:1c:92:cb:fa:9a:cf:10:b2:9b:98:17:04:f9:f0:
d8:a3:e7:6e:83:09:f7:85:8b:15:1a:39:af:47:f5:2f:3b:38:
c3:98:1d:d6:3f:3e:d2:9e:53:1d:32:b2:3b:9e:42:83:04:d6:
65:91:87:3a:10:c8:4e:90:ec:ef:e2:40:94:d4:41:8a:46:86:
d8:dd:39:66:74:50:16:61:6d:10:20:99:27:86:46:ba:86:a3:
bb:ff:b5:4d:cb:1a:d7:c5:ab:5d:42:ee:d3:64:73:8a:19:d2:
ca:95:c2:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:50:57 2025 by rpki-client