Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5J_xmt1LshEp7ogjFL5zy3jM7bM.cer
File: 5J_xmt1LshEp7ogjFL5zy3jM7bM.cer (raw, json)
Hash identifier: BaMB1HkfSDNrYJUbi9cAH1R0FfnK1OA9HKs987ywdNI=
Subject key identifier: E4:9F:F1:9A:DD:4B:B2:11:29:EE:88:23:14:BE:73:CB:78:CC:ED:B3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420681E0D823E7EE4252257EE57FA5DEF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:48:01 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2a13:f640::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:1e:0d:82:3e:7e:e4:25:22:57:ee:57:fa:5d:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e49ff19add4bb21129ee882314be73cb78ccedb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:29:ad:25:b7:39:06:0a:6b:c0:31:bd:93:d9:
80:2c:96:da:40:12:82:33:b9:48:49:e9:0b:df:c6:
f0:32:5b:3b:d2:5d:0f:5d:d6:3e:8b:9e:d8:da:e0:
b4:02:fe:26:2b:d0:1f:4e:5a:af:53:a6:e2:e4:5b:
d7:b8:4f:99:42:dd:9d:33:35:41:ae:2e:70:65:49:
1e:57:28:5f:20:84:8d:fe:19:30:05:d2:be:0e:43:
06:0b:23:34:c7:dd:fe:6d:9f:8b:30:03:d9:1b:df:
06:1f:50:3f:e0:ed:79:7e:e0:19:53:da:69:01:c6:
d3:05:30:dd:ee:5c:62:39:39:56:c4:0e:84:ae:b1:
75:b2:31:9c:ae:87:a1:a5:51:fb:3b:3b:9a:4e:43:
d6:4f:3f:c9:92:db:eb:34:c4:40:cd:53:b7:f8:ad:
1a:5a:fb:0e:65:ca:58:be:46:d5:08:74:98:03:02:
d1:00:dd:1c:ce:a7:0d:95:c3:28:19:b7:4e:28:60:
32:5d:a5:b1:38:11:e3:ce:95:18:a3:1c:be:da:80:
b7:74:3d:a3:e6:57:e0:db:56:4c:f2:e4:32:25:c4:
60:5f:14:c0:e9:71:f6:3f:f8:18:94:1c:18:d2:63:
ac:5d:2d:42:01:03:ba:12:67:ba:71:30:94:18:dc:
8f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:9F:F1:9A:DD:4B:B2:11:29:EE:88:23:14:BE:73:CB:78:CC:ED:B3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/28026f-bc8b-44a8-be42-d6b055dab47b/1/5J_xmt1LshEp7ogjFL5zy3jM7bM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:f640::/29
Signature Algorithm: sha256WithRSAEncryption
87:1f:03:70:4b:63:e6:d4:75:90:96:7d:5c:11:22:1a:7d:a9:
df:da:85:2f:b8:26:83:05:30:99:98:df:46:24:b0:92:a3:e8:
53:3d:c1:57:cb:df:c6:53:6a:a2:67:48:cb:59:2c:46:dd:70:
f7:48:28:a5:ab:85:9d:e9:d4:19:6a:7b:27:94:6f:38:b8:c7:
5b:40:b3:19:b5:98:5d:f6:57:b1:d8:73:ff:de:48:27:e0:4e:
e5:39:87:03:05:0c:65:c9:b5:b0:b9:4d:5f:f4:75:65:ec:12:
1f:19:a2:4f:40:b2:b9:0f:fb:a4:10:b5:15:a1:7d:dd:be:5e:
9a:f7:92:cd:7a:b1:cd:64:8c:43:24:a8:4f:1b:17:88:30:be:
ba:30:bd:aa:7c:b6:9e:42:c5:90:66:3a:c2:09:22:be:3e:f0:
c8:05:75:82:70:4a:c4:d3:19:89:42:e4:b3:46:7f:01:dc:ff:
2d:25:1e:cb:db:2e:06:33:18:fa:b6:c0:4e:eb:26:4a:a4:d7:
c9:6b:e6:cd:38:dd:55:7b:ff:70:ab:34:17:62:34:d3:0a:ff:
f4:ef:a7:b8:da:d6:91:d8:cc:09:1c:04:39:03:2c:83:07:47:
e9:cb:5c:e9:06:3d:8c:41:ca:bc:af:a4:9c:41:e6:03:17:59:
26:4b:51:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:49:58 2025 by rpki-client