Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53ltjBnzKhyvvVt49Sds6N-ZXQo.cer
File: 53ltjBnzKhyvvVt49Sds6N-ZXQo.cer (raw, json)
Hash identifier: 0Gz6nUnQRWVeiabLqa4FMoNLuzEXWCkItFs67U9lby0=
Subject key identifier: E7:79:6D:8C:19:F3:2A:1C:AF:BD:5B:78:F5:27:6C:E8:DF:99:5D:0A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266ADC1F66D52315AD1991FE8A19FA74
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2e/5ec970-7965-4e0b-b947-2857e8a23558/1/53ltjBnzKhyvvVt49Sds6N-ZXQo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2e/5ec970-7965-4e0b-b947-2857e8a23558/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:48:44 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 78.157.224.0/19
IP: 185.211.164.0/22
IP: 188.191.0.0/20
IP: 2a0d:d840::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:dc:1f:66:d5:23:15:ad:19:91:fe:8a:19:fa:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e7796d8c19f32a1cafbd5b78f5276ce8df995d0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5d:99:f0:8a:5e:73:49:c9:9e:95:dc:7d:08:
2a:cb:a4:00:fa:1a:52:a8:9a:af:1d:00:ba:fc:69:
73:ce:26:5a:53:76:c5:ab:94:e5:3c:07:3f:1d:f8:
f1:a0:a7:de:6b:b5:46:45:14:d0:ff:e8:9c:8b:dc:
2e:a5:be:86:99:52:f7:8c:83:2f:69:b3:ce:df:cc:
48:ff:fa:04:9d:e0:d9:0d:d4:e3:8f:e6:d0:da:18:
05:53:6e:64:e0:88:16:4a:d8:35:72:8f:c2:f8:b1:
1f:b1:03:d5:3f:59:97:c7:41:e6:ab:21:a8:72:2c:
9a:10:5a:5d:38:d8:47:db:e7:45:17:e3:65:88:67:
18:4c:72:c8:1c:ef:31:f0:29:e0:26:72:b3:75:94:
6f:2a:26:5d:ff:40:1e:09:6b:89:69:26:3b:a2:36:
98:59:77:c8:d2:38:5a:77:0f:2c:b6:bf:e4:f9:e6:
d7:67:0f:1f:48:9c:55:31:c9:c4:97:bd:97:e9:da:
3a:6f:ef:04:10:f2:75:af:70:d1:a5:ce:8d:c4:86:
c4:27:54:e4:0c:c1:a6:22:f1:c3:77:6c:5e:a0:a5:
c8:97:94:f7:00:12:37:3e:0a:99:23:45:0c:22:ad:
f6:77:d6:86:2b:23:6a:4b:bf:0f:c0:1c:72:24:1f:
d3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:79:6D:8C:19:F3:2A:1C:AF:BD:5B:78:F5:27:6C:E8:DF:99:5D:0A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ec970-7965-4e0b-b947-2857e8a23558/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5ec970-7965-4e0b-b947-2857e8a23558/1/53ltjBnzKhyvvVt49Sds6N-ZXQo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.157.224.0/19
185.211.164.0/22
188.191.0.0/20
IPv6:
2a0d:d840::/29
Signature Algorithm: sha256WithRSAEncryption
26:df:33:7b:ac:49:29:6c:be:ae:2e:cc:eb:81:12:80:9c:25:
a0:0c:0c:4c:bd:78:9f:c7:b9:7f:91:40:6d:24:9b:ec:6c:11:
a9:af:76:9f:ff:48:4c:68:61:35:85:99:45:38:1c:dd:bd:0c:
52:85:97:d1:31:b6:9f:e0:38:ae:61:21:5e:4c:a4:1c:c4:69:
44:f2:b8:c7:e1:d2:f2:34:2b:37:49:ff:ff:a2:2e:ef:71:34:
e0:21:4b:2d:d7:13:3d:71:35:1d:7e:99:4e:2e:4c:45:3c:b2:
6d:aa:d6:01:4a:c6:86:1c:4e:f0:ad:ac:76:aa:83:aa:32:8f:
dd:a8:c8:50:26:96:33:4f:d6:95:77:46:e6:80:95:ea:8c:d9:
3a:a6:85:9e:32:88:d8:eb:cf:c7:47:aa:8b:f4:cd:68:2a:b7:
84:20:a6:34:d4:78:e6:3b:fd:a3:e8:c1:15:ee:d6:94:cf:d6:
c7:eb:a4:86:8e:7f:ef:b4:cd:7f:fb:76:59:f5:1b:e6:e9:ca:
bb:96:ba:3d:87:75:ff:08:ed:0a:58:77:30:57:f7:99:d6:dd:
8f:86:5b:92:07:c5:33:5f:f3:46:66:7c:28:5a:5a:bb:b2:60:
0c:a7:b4:bd:c7:72:ce:ca:01:c1:e3:25:55:f5:79:c8:cd:23:
2e:5a:d8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:53:26 2025 by rpki-client