Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69xd5v5ftQVVoFyXxbDdR369C_U.cer
File: 69xd5v5ftQVVoFyXxbDdR369C_U.cer (raw, json)
Hash identifier: NTsul7kvSIUVSorwicDq97uDu+1rK/yp55HT3dsEB5Q=
Subject key identifier: EB:DC:5D:E6:FE:5F:B5:05:55:A0:5C:97:C5:B0:DD:47:7E:BD:0B:F5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FC9C700F05685B13D88857E423BF62
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e0/e4a668-fbd6-4553-ae9f-0bbb2381ba88/1/69xd5v5ftQVVoFyXxbDdR369C_U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e0/e4a668-fbd6-4553-ae9f-0bbb2381ba88/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:48:19 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.30.136.0/22
IP: 2001:67c:6b4::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:9c:70:0f:05:68:5b:13:d8:88:57:e4:23:bf:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ebdc5de6fe5fb50555a05c97c5b0dd477ebd0bf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:09:b9:a2:26:21:70:06:c7:2f:2e:4d:12:50:
c1:65:53:e5:78:12:14:73:7d:dc:03:fe:3e:a0:2e:
04:10:c4:d6:6a:9e:c2:fa:45:44:f1:c9:e9:10:0c:
f8:33:9c:97:67:d4:fa:30:23:86:93:ee:9c:aa:8a:
38:48:07:53:ea:72:06:c4:da:bc:ec:db:9e:52:1d:
d2:9d:a1:19:23:b0:74:52:2b:d5:29:44:91:17:3a:
fa:57:5e:61:61:39:ac:33:5d:23:db:65:d7:ec:19:
0d:e2:38:48:cd:ec:c4:32:35:4b:38:2d:4e:f1:d2:
46:a9:f7:31:fb:9f:41:e6:9d:9a:b8:82:75:75:9b:
ae:6e:b4:85:df:b9:b3:47:88:24:ab:a7:73:88:4d:
f3:f9:52:84:d6:0c:22:5a:0c:fe:49:5b:22:ce:65:
5f:8b:27:b3:af:b6:b2:a1:89:7d:7f:a1:2d:5c:37:
e1:c7:f7:0d:59:0b:d9:26:c8:a6:26:e8:06:9e:d3:
7e:3a:c7:6c:da:75:17:f2:32:79:79:1e:99:1c:cb:
63:15:70:13:31:be:1e:50:3e:f8:84:f5:92:8a:61:
c8:64:56:e0:c9:80:23:2e:c9:ae:7c:fd:be:ea:70:
e1:2d:e1:7c:5a:5a:43:98:1a:77:0f:ed:23:d3:dd:
d4:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:DC:5D:E6:FE:5F:B5:05:55:A0:5C:97:C5:B0:DD:47:7E:BD:0B:F5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/e4a668-fbd6-4553-ae9f-0bbb2381ba88/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/e4a668-fbd6-4553-ae9f-0bbb2381ba88/1/69xd5v5ftQVVoFyXxbDdR369C_U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.136.0/22
IPv6:
2001:67c:6b4::/48
Signature Algorithm: sha256WithRSAEncryption
17:ad:5c:28:40:79:13:df:69:5b:a4:bc:e2:1c:78:9a:92:2a:
9f:21:74:e1:69:5e:76:c6:5b:17:4f:c7:18:90:b2:92:74:ec:
41:4f:b5:f0:c9:dd:ea:8c:94:70:86:06:de:76:c1:c1:b5:d9:
90:24:9c:db:01:b6:cc:15:74:9f:ac:33:8e:20:d9:56:ce:f0:
ee:11:48:bd:26:9e:59:eb:32:e8:bb:5c:36:da:1a:41:c5:27:
a0:82:a1:d3:88:6a:89:f1:3a:93:48:70:5d:a7:d7:f5:ad:6a:
79:e7:4b:aa:3a:45:b9:5f:e1:dd:62:83:85:1d:b7:8a:2b:48:
02:38:c9:0c:e7:45:66:52:cd:6d:57:04:17:04:98:e4:ba:65:
d8:f5:01:a9:f1:19:ad:0b:2a:47:0c:4f:3e:19:02:db:97:9a:
e6:fc:8a:18:6a:ff:bd:84:57:0f:d3:95:8a:e2:61:3f:13:fd:
74:71:9f:44:d1:2a:9a:c1:9e:da:82:74:39:fd:20:74:28:cf:
96:55:7d:48:7f:63:d8:92:59:60:5a:ba:25:68:64:26:21:c3:
25:9f:d8:bf:3c:c2:84:4f:f3:77:22:64:44:62:a1:e0:a3:29:
2e:7a:9f:7b:16:af:ec:f6:bb:1c:70:24:a8:8e:d5:83:08:c4:
f9:8c:29:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:37:11 2025 by rpki-client