Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4tNxxKeqqFX4zDsa6oAilCCoDyA.cer
File: 4tNxxKeqqFX4zDsa6oAilCCoDyA.cer (raw, json)
Hash identifier: LeVgKMoc4OiBx33RRRFkBxvJ7BetkEKKOK7MOxiHW10=
Subject key identifier: E2:D3:71:C4:A7:AA:A8:55:F8:CC:3B:1A:EA:80:22:94:20:A8:0F:20
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B21ECB4AADF1688A51C54D4EC0A90E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/53/feaa30-142a-4fe0-aab9-907a58c994c2/1/4tNxxKeqqFX4zDsa6oAilCCoDyA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/53/feaa30-142a-4fe0-aab9-907a58c994c2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:28 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.237.232.0/22
IP: 2a0c:1f80::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:1e:cb:4a:ad:f1:68:8a:51:c5:4d:4e:c0:a9:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e2d371c4a7aaa855f8cc3b1aea80229420a80f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b0:2c:29:06:8c:10:c9:f3:f6:2e:58:90:06:
ae:13:ed:9f:06:f4:4a:ce:1f:8f:a7:69:9c:ab:a4:
fe:7e:8c:71:97:79:aa:7d:32:f5:89:6c:8b:1e:a6:
24:99:ae:42:1e:dd:6b:17:fe:e1:01:d5:40:81:f1:
23:b3:ce:26:78:ae:9f:7d:43:6c:c0:89:e0:c3:af:
a9:d4:66:80:43:d2:83:68:8c:31:2c:4c:3a:f0:2c:
fb:5b:00:0f:1b:84:83:58:d9:fb:af:a6:76:af:6c:
93:d2:2a:b6:d7:46:61:cf:28:18:d8:92:ae:39:86:
fc:3c:6e:ff:71:22:f1:e2:53:bf:6e:d6:b1:a7:dd:
ff:87:73:40:9b:2c:3b:7a:a8:d3:c6:91:f2:ab:c9:
0c:a3:60:e8:bc:72:c4:87:77:0b:a1:b9:55:9b:92:
6d:36:cb:9d:85:b3:75:b4:f6:ab:68:3b:5e:88:0b:
ba:c7:88:e7:d1:9d:eb:f9:67:03:d2:01:1c:bd:33:
6a:aa:43:a2:1c:27:81:56:d3:17:59:04:27:76:da:
59:1c:85:f2:99:d8:60:95:13:dc:ad:42:b5:72:3f:
0e:e1:b2:2a:85:0b:13:a3:d6:04:50:5a:e8:60:e5:
70:78:5e:ce:aa:2d:72:29:ec:1b:4a:83:a3:30:8f:
e8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:D3:71:C4:A7:AA:A8:55:F8:CC:3B:1A:EA:80:22:94:20:A8:0F:20
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/feaa30-142a-4fe0-aab9-907a58c994c2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/feaa30-142a-4fe0-aab9-907a58c994c2/1/4tNxxKeqqFX4zDsa6oAilCCoDyA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.237.232.0/22
IPv6:
2a0c:1f80::/29
Signature Algorithm: sha256WithRSAEncryption
19:ab:40:f6:5d:2f:89:2a:42:73:ea:d3:5e:c8:3e:0f:15:69:
0b:ee:fb:8f:4d:58:51:c1:11:30:4b:d2:9a:62:bc:44:0f:ae:
f1:5a:71:cf:c0:8e:cd:0c:e3:74:66:82:92:42:4e:45:e6:1b:
41:32:1a:6d:6c:86:f7:49:66:ac:ac:21:ea:7a:d5:8e:ee:0a:
ba:fb:f8:2f:2d:59:5a:23:03:b4:39:5a:4b:5e:80:d7:d3:37:
44:a1:a9:d7:87:09:ec:fb:dc:c1:29:33:16:42:7a:1e:29:b5:
81:7a:a4:1b:f7:ed:da:cc:3f:f4:cf:d1:eb:90:d9:d8:4f:43:
06:e6:4d:82:a2:e8:8c:23:b4:74:5b:6a:14:e3:3e:6e:2d:07:
fb:22:99:81:b6:e6:d4:8c:3b:7a:aa:0b:17:4a:31:ff:a0:8d:
34:6c:f0:b0:ac:58:9a:ed:bd:8b:49:ef:cb:ae:72:6b:c3:95:
5b:03:36:41:17:2e:0e:bf:e0:a8:6b:4a:6a:4e:12:5e:ad:bb:
57:fd:ec:ff:6f:5a:0e:0a:a0:e0:63:71:80:14:f1:b3:ad:db:
a9:6c:9a:55:d0:ae:fa:a7:21:ae:67:d6:09:54:0e:1d:dc:fc:
c3:5a:cf:90:a6:9c:ab:75:3e:c3:a6:52:2c:54:bf:83:09:5b:
29:04:94:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:04:13 2025 by rpki-client