Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4u1kMJX_plfeBc7spdILJlwbf1I.cer
File: 4u1kMJX_plfeBc7spdILJlwbf1I.cer (raw, json)
Hash identifier: uEcuMnxb3JMAxmcBEQWZqGvoWoZd8lsT1vkO2nPvRAs=
Subject key identifier: E2:ED:64:30:95:FF:A6:57:DE:05:CE:EC:A5:D2:0B:26:5C:1B:7F:52
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258EEE3E9752250275AF81A8EC1F2C7E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/96/eee6f4-548e-4cef-8fa4-93b020fe8ff1/1/4u1kMJX_plfeBc7spdILJlwbf1I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/96/eee6f4-548e-4cef-8fa4-93b020fe8ff1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:48:31 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.255.156.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:ee:3e:97:52:25:02:75:af:81:a8:ec:1f:2c:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e2ed643095ffa657de05ceeca5d20b265c1b7f52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c2:17:bb:2e:f7:aa:df:00:c7:39:7b:50:0f:
1f:ab:1d:9f:a8:79:31:11:fd:5b:e3:9d:52:ba:3d:
ed:3c:cc:a5:f7:41:71:4e:34:3d:c8:e7:42:9d:37:
22:ca:53:eb:ab:79:31:40:8a:f2:8f:42:45:71:ef:
3b:8a:0d:0c:b9:e3:d5:79:7c:3a:da:82:f6:0f:05:
9b:4f:ab:cc:42:36:e2:5d:c8:6c:2e:69:88:a1:38:
49:9d:f4:9d:67:57:fa:46:f4:15:cf:92:cc:cb:6c:
49:ee:1e:39:b1:e2:99:bb:54:61:b1:45:63:7c:30:
4d:77:bd:69:f4:f1:e5:ca:25:79:7b:36:bb:34:c0:
77:70:9a:5b:d5:7a:78:04:f9:71:be:5f:01:42:42:
17:f9:4c:09:ed:e8:2d:a5:14:3f:eb:29:a6:89:41:
c3:2d:47:db:b0:21:6f:48:a4:fa:db:da:cc:48:61:
a9:23:0e:28:8b:a5:0d:d1:4d:88:e1:0d:17:cf:d6:
93:49:f3:64:d5:46:f4:48:61:d8:32:63:19:77:c8:
16:59:0c:6b:4e:61:a6:a9:e2:15:b0:24:ed:8e:86:
3c:0e:fe:27:1f:19:67:35:9a:16:4a:e5:46:9d:49:
da:dc:6a:e2:94:37:7b:b8:bf:c3:b5:d2:b2:bd:b4:
a1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:ED:64:30:95:FF:A6:57:DE:05:CE:EC:A5:D2:0B:26:5C:1B:7F:52
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/eee6f4-548e-4cef-8fa4-93b020fe8ff1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/eee6f4-548e-4cef-8fa4-93b020fe8ff1/1/4u1kMJX_plfeBc7spdILJlwbf1I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.156.0/22
Signature Algorithm: sha256WithRSAEncryption
73:f5:0b:78:05:d2:08:3d:0a:fa:40:24:cb:19:c7:b7:ee:70:
50:06:23:5f:d6:20:28:79:cd:ba:ef:86:35:0a:23:ea:85:48:
b1:52:85:c0:4f:64:50:92:82:a1:35:42:37:f0:59:1b:53:50:
39:8a:b0:1c:73:07:6a:f2:77:38:12:b8:e0:dc:a7:a9:75:d3:
5e:22:52:5b:ba:ff:48:3b:86:c5:55:61:a3:13:54:02:df:16:
52:ef:6b:f1:81:54:bf:84:78:2a:c4:fd:b6:cd:cd:d6:1a:43:
d6:38:3d:19:79:29:97:7c:7f:38:17:a5:d9:c8:39:4e:02:18:
0e:8d:de:63:0c:8c:c3:0b:0a:65:9c:15:9b:c0:bc:82:20:12:
9c:27:21:8b:ee:fa:b4:39:54:97:18:ec:d9:14:f6:21:54:62:
bb:95:05:3c:5f:3a:f5:b2:96:af:e3:76:bc:ac:48:e5:ab:04:
ac:73:42:5b:3c:7b:cc:0e:da:6d:4b:85:90:b2:30:ba:3c:bf:
b3:c3:49:e0:36:81:7e:4a:f4:31:c8:4e:55:7d:3c:09:53:68:
eb:7a:86:97:bf:92:68:b4:ec:39:75:ba:d0:a1:24:62:d1:0d:
47:d2:dc:bc:fd:93:2d:4a:b1:ed:72:87:b2:78:81:8b:63:bc:
d1:87:c1:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:23:29 2025 by rpki-client