Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65fOljUzDxRxFMZG72qTR9aJFjs.cer
File: 65fOljUzDxRxFMZG72qTR9aJFjs.cer (raw, json)
Hash identifier: sLNAUyst7h93p8eAA75DTwUlCXcJQLLNEVczjqJRlO4=
Subject key identifier: EB:97:CE:96:35:33:0F:14:71:14:C6:46:EF:6A:93:47:D6:89:16:3B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228E17FAE6048B72D4C80D62F472D8B7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:45 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 130.192.96.0 -- 130.192.159.255
IP: 130.192.168.0/21
IP: 130.192.192.0/19
IP: 130.192.240.0/20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:17:fa:e6:04:8b:72:d4:c8:0d:62:f4:72:d8:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb97ce9635330f147114c646ef6a9347d689163b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:01:04:5d:6b:97:25:01:39:38:a0:4b:d3:f5:
66:70:60:57:4e:13:0c:43:21:5b:95:60:b9:9a:21:
38:8c:24:f2:7d:37:ef:b7:c5:d2:cf:f0:c0:40:7c:
be:a7:d6:a9:4d:23:a7:f6:44:dd:91:1e:6d:45:66:
a4:a3:14:9f:59:61:8b:61:56:3a:47:c5:be:50:d9:
fb:e9:ff:d4:3c:ed:fd:db:c9:df:19:74:13:e8:00:
9d:bd:06:db:6f:41:b6:1a:36:13:04:27:c7:8d:25:
8b:9c:8a:23:f7:41:8c:b8:1e:da:f3:8a:bf:07:da:
eb:58:2d:22:55:1c:a9:39:83:71:d3:ea:07:19:cd:
c4:92:b0:a2:3d:27:71:b2:d6:82:56:cc:d5:b1:b4:
10:5f:25:7c:ad:c1:96:34:11:ce:b2:04:9f:95:26:
07:87:fe:e2:c1:3c:d1:f7:1b:ac:b3:37:b6:ac:64:
b1:af:d4:70:55:b2:e9:ce:6d:b0:5e:9a:f3:6a:18:
bf:19:eb:6a:90:47:94:9e:00:0f:4e:ba:15:7a:71:
34:74:27:be:30:f4:86:a1:f0:da:3d:31:52:3f:62:
7c:5d:7b:3f:9e:47:85:fa:d7:c6:e0:2a:b7:09:2a:
d8:d7:39:40:78:81:9b:a8:bb:72:96:12:f7:cc:b9:
4b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:97:CE:96:35:33:0F:14:71:14:C6:46:EF:6A:93:47:D6:89:16:3B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/265062-d6ae-4582-aacd-ec76901b6f31/1/65fOljUzDxRxFMZG72qTR9aJFjs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.192.96.0-130.192.159.255
130.192.168.0/21
130.192.192.0/19
130.192.240.0/20
Signature Algorithm: sha256WithRSAEncryption
31:d4:76:e4:12:31:ac:21:a6:66:25:32:40:28:f8:8b:6c:58:
2a:98:c9:10:43:ed:28:3f:c4:f6:5e:4c:2d:9b:85:e9:94:c9:
36:c1:ce:01:42:8e:a5:f8:50:4c:23:c5:d5:d0:90:a3:fb:c5:
ec:49:74:99:f5:7e:43:51:c3:a2:48:7e:1f:03:59:95:c1:74:
d0:d2:85:31:67:1b:70:6e:93:79:fe:f6:70:58:00:8d:c3:9c:
59:29:e5:ab:1e:0d:96:21:f7:6d:e1:b7:c4:09:2f:60:4e:44:
ab:54:a3:35:61:1d:da:e7:61:26:0f:63:af:e8:0b:15:2b:c3:
e8:6c:92:2b:1a:b6:2f:d4:ff:3a:66:b7:5f:05:2a:00:3d:90:
0f:65:fb:59:12:d7:c3:e7:4d:af:46:ed:4c:bc:70:e6:37:8d:
4b:08:79:58:64:8e:0b:de:1c:d4:d6:a0:41:01:e8:51:37:0d:
1e:9e:04:d5:80:d7:fb:3d:6f:cd:35:79:56:2f:3d:94:9d:52:
b8:24:7b:20:bc:dc:9a:c2:18:2a:05:08:40:2c:0c:d1:6d:f5:
19:81:18:99:be:4d:c2:67:d6:5e:a5:dd:da:a3:9e:cf:65:f2:
ce:64:19:89:cb:d4:a6:ca:53:e4:e9:48:1d:c9:b4:a8:10:ba:
ff:f2:bb:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:57:47 2025 by rpki-client