Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5QXZNJfxnSVjBmtAkgCWlxHyjGc.cer
File: 5QXZNJfxnSVjBmtAkgCWlxHyjGc.cer (raw, json)
Hash identifier: XHf4BPEGovNsn5nqeuLRc+jwcFQ/gII8RdiG4AUpF+k=
Subject key identifier: E5:05:D9:34:97:F1:9D:25:63:06:6B:40:92:00:96:97:11:F2:8C:67
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228E3734B1B2C708E84C7776D75AB6FD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:53 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.49.22.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:37:34:b1:b2:c7:08:e8:4c:77:76:d7:5a:b6:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e505d93497f19d2563066b409200969711f28c67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:87:44:fb:86:f0:10:d5:f1:61:9e:c7:ba:7c:
94:bb:ac:63:34:33:44:a2:13:63:1f:d5:1a:95:5e:
a6:2b:90:e3:98:af:bb:5e:8f:a7:90:22:a1:1b:cd:
56:ff:27:b7:bc:f2:dd:a7:c6:7c:d6:b0:73:28:bc:
93:7d:e1:91:a7:02:f1:b8:25:fb:90:9c:1f:df:05:
fa:b3:f4:b3:df:3b:6c:29:37:76:cf:dd:eb:b4:1a:
36:bf:c7:28:d4:83:ce:fe:d4:ee:a5:66:76:57:25:
2a:36:80:23:68:c0:7e:e0:4e:2f:e3:85:c9:5c:9d:
6e:dc:97:2e:12:3b:5c:9a:94:f8:ae:6a:62:85:42:
f6:15:19:b0:37:90:2b:b4:7a:df:38:7c:a3:ec:7e:
d3:2f:49:36:21:45:c6:ff:89:cd:43:ed:3d:5f:d0:
bf:3b:e9:a0:31:0a:51:a4:6e:22:c7:0f:bd:32:35:
1d:d2:62:a5:7d:2b:96:6e:a3:ec:a7:98:61:db:43:
13:84:40:08:2e:d3:1f:07:f8:96:4e:4c:5a:e9:3b:
ba:f2:cd:6b:74:7b:bb:fe:9e:8f:fa:bb:c2:54:83:
c7:84:56:53:85:8b:a3:05:ab:60:66:4a:dd:5f:1f:
be:79:e1:99:64:8a:2d:5b:4c:6f:a3:bc:9e:ee:35:
0e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:05:D9:34:97:F1:9D:25:63:06:6B:40:92:00:96:97:11:F2:8C:67
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/540e53-c4a6-4f52-811e-6afc4ec63cf0/1/5QXZNJfxnSVjBmtAkgCWlxHyjGc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.49.22.0/24
Signature Algorithm: sha256WithRSAEncryption
93:81:3d:9c:9a:a2:aa:28:ce:2e:fa:07:e6:c8:a8:aa:3e:f6:
9f:ec:1f:e5:cf:14:27:c8:82:56:40:ad:10:07:c0:b6:51:b3:
ef:a4:27:b1:57:8a:bb:8a:af:0f:ef:ac:81:a3:36:10:ba:d7:
0b:72:e7:1c:1e:1a:8e:51:b6:5e:6d:99:0d:9c:a1:13:e5:e0:
36:db:a7:9e:b3:2f:78:58:0a:0b:58:40:f3:5b:25:39:da:aa:
f0:ba:2b:85:b0:33:6b:9c:3c:1d:a1:c1:0e:be:af:3f:df:99:
3e:a5:6f:47:7d:6b:56:a7:52:ff:fe:02:f6:5b:e1:03:a7:64:
d3:e0:4c:27:cc:4e:22:93:b6:e9:8b:19:62:21:5b:b7:6a:68:
a9:e1:6f:d3:44:d8:f6:cb:90:49:67:15:87:ff:14:34:50:85:
f5:12:cb:b4:d4:db:67:65:46:bb:0d:39:a4:35:84:43:ea:cf:
bc:75:fc:97:ce:8c:2d:fb:38:86:08:2a:45:12:e3:2a:54:0f:
64:6d:79:aa:3d:7d:77:e4:d7:2c:fc:d4:09:9c:2c:a2:5d:87:
1b:10:50:40:7a:8d:cc:72:82:24:14:07:27:f8:22:60:03:01:
d7:ea:93:ce:fb:05:a0:3f:33:3c:40:21:dd:80:97:8c:00:7a:
5d:ca:a7:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:23:51 2025 by rpki-client