Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.cer
File: 5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.cer (raw, json)
Hash identifier: /e+uF41EhuWI1uk3lc5X5c3+ez8tyNOGpu3bSpUysis=
Subject key identifier: E4:6B:3D:61:FE:43:AB:68:04:B6:F1:E3:29:7A:8C:DC:C2:6B:9D:6C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFAB07B8328955969DF4D9CADF2AFF7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:48:30 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.234.88.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:b0:7b:83:28:95:59:69:df:4d:9c:ad:f2:af:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e46b3d61fe43ab6804b6f1e3297a8cdcc26b9d6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c7:a4:1c:96:84:6f:82:55:e5:92:57:07:1c:
07:bf:02:1d:d1:a7:12:c4:04:ae:26:20:09:83:12:
c4:b6:cf:d4:4a:7f:2c:ec:d7:6d:cf:7f:da:90:23:
30:83:7b:2d:e8:56:4c:67:05:50:f0:0f:ed:3c:f7:
a1:8c:d9:f6:73:ec:3b:99:6a:df:03:d9:de:9c:49:
b2:9d:2d:60:2f:a6:29:c3:7d:f6:96:7d:f3:60:79:
98:ab:79:b3:5f:87:71:dc:69:6d:b1:1a:07:9e:10:
15:ef:de:89:08:95:2d:4f:f3:fd:44:cb:fd:bf:81:
84:05:7e:7c:af:cd:31:15:ce:b5:55:d8:ee:1a:c2:
fb:05:f3:32:74:84:c8:cb:b2:e9:4e:8f:a7:6c:5e:
ff:c3:9f:45:f0:f7:11:91:25:e7:11:b0:6b:e6:8b:
18:17:dc:fb:2b:36:c8:ae:d9:35:32:8c:aa:20:a0:
97:30:6d:af:cc:3e:3c:73:32:c3:a9:63:38:4a:a1:
73:3e:0c:7f:bb:91:e6:60:53:d7:52:d9:6a:ae:d5:
5e:30:7c:9d:79:bc:6a:75:82:08:10:cd:6b:98:94:
1d:f0:0d:15:6a:82:f3:ee:a4:0c:da:25:a2:e9:3b:
00:80:20:ed:40:c4:75:35:05:fe:c7:ec:2d:10:fd:
86:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:6B:3D:61:FE:43:AB:68:04:B6:F1:E3:29:7A:8C:DC:C2:6B:9D:6C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.88.0/22
Signature Algorithm: sha256WithRSAEncryption
23:19:15:07:34:e4:60:cd:0b:c6:0e:e1:3a:b2:a8:a0:96:be:
85:3d:0f:2c:04:b1:56:10:df:1c:40:5c:94:70:a9:f4:4f:c6:
9d:45:73:67:4d:29:7a:54:7e:ee:74:b8:94:fd:ee:c4:59:f1:
ee:de:7d:1c:b8:d4:b0:2d:21:c2:e5:c5:e6:fe:2b:92:e0:36:
31:69:be:48:a7:42:93:6a:7b:71:04:17:91:34:b0:09:e4:8e:
30:5d:89:36:d7:9a:75:f5:fc:08:2b:4a:6d:97:42:ae:7d:60:
fb:2d:27:d4:d0:a0:85:40:19:44:37:b7:45:96:36:33:12:49:
b9:ff:69:4a:ea:f9:82:78:55:46:ed:bd:fb:19:d8:33:7e:b1:
d2:3d:73:67:5e:9d:49:7a:ea:8f:ff:e3:60:5a:84:5a:c9:5c:
6c:9d:11:af:05:86:12:4c:d6:3a:45:98:fc:05:3e:13:af:bc:
f7:87:1c:83:f0:76:a0:26:f0:27:07:db:6a:37:af:0c:70:d1:
7e:b9:65:01:43:ee:95:31:6d:5a:96:8e:a1:e7:4d:90:72:84:
b0:f1:2f:c1:59:ff:3a:ea:10:17:ca:3a:1a:8e:df:df:6c:04:
18:d7:02:cf:e9:1f:58:ed:01:0a:4f:82:e3:83:34:b5:48:8b:
cf:74:c1:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:57:52 2025 by rpki-client