Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7UdqdIa3hUUSk1cRJsX52j7Ehdg.cer
File: 7UdqdIa3hUUSk1cRJsX52j7Ehdg.cer (raw, json)
Hash identifier: ejTYpGDkzBWFWDwzENuFUdOFkeqogOjD6Lk6g9Np8Qw=
Subject key identifier: ED:47:6A:74:86:B7:85:45:12:93:57:11:26:C5:F9:DA:3E:C4:85:D8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228E2A38AFC568C459BF5350C11F8C0D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:49 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.160.28.0/24
IP: 193.160.56.0/21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:2a:38:af:c5:68:c4:59:bf:53:50:c1:1f:8c:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ed476a7486b785451293571126c5f9da3ec485d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:60:91:d7:fe:01:20:da:16:b1:0b:13:4e:05:
0f:02:55:e5:b0:eb:ed:db:3b:12:68:a1:47:52:7a:
d2:31:b9:74:0f:5e:87:fa:80:90:6a:5b:de:d3:cb:
62:dc:d5:5a:bb:61:a8:27:aa:89:da:b1:e2:e9:91:
e9:15:80:39:0c:8e:c2:fa:4b:12:7d:d2:00:ee:d2:
84:ea:9e:c9:f7:25:e7:97:96:6f:93:5f:da:6e:63:
a8:72:41:d4:09:bb:a9:ed:89:6f:e9:b4:5e:b5:5f:
d2:10:b8:cf:f9:09:89:a3:a1:ff:5a:38:6b:2c:06:
b5:e8:c5:44:6d:a3:c9:f8:35:d5:39:d1:be:35:45:
10:21:37:0d:f9:bd:46:2c:5c:05:9c:7e:41:5d:3c:
fd:28:7e:4e:a7:c3:47:c7:cd:45:38:f9:65:d1:74:
14:46:e3:6a:91:13:4a:ef:03:1b:5b:31:b4:02:de:
f1:d1:48:0b:28:4d:fb:5f:ad:ed:55:64:63:68:d3:
16:73:87:4d:89:89:6d:af:e2:86:54:4e:25:ba:2e:
6d:29:21:b0:6c:ad:8f:72:2c:30:a1:fe:93:ee:a3:
94:01:25:43:c8:01:e0:87:9c:26:ba:78:78:9c:c7:
83:7b:dc:bd:40:40:d1:53:33:18:36:37:4e:39:88:
10:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:47:6A:74:86:B7:85:45:12:93:57:11:26:C5:F9:DA:3E:C4:85:D8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.28.0/24
193.160.56.0/21
Signature Algorithm: sha256WithRSAEncryption
60:bc:38:47:82:c2:94:e7:61:43:42:6d:a1:87:20:18:91:77:
c0:0b:0d:bc:b1:ad:cf:80:36:97:21:ee:be:3a:83:a8:38:0e:
25:7a:cc:76:92:93:af:5c:76:3d:66:3c:10:2b:24:70:34:fd:
69:52:d2:4d:2a:d3:b5:55:a5:0c:6d:a9:82:37:f4:4d:d7:6c:
86:9a:97:14:c3:a0:d5:52:ce:84:2e:39:a9:79:90:78:21:aa:
15:5b:44:48:8f:ec:d6:6a:33:7a:7d:52:18:2d:e1:26:ed:ce:
5e:e6:f5:94:b2:c8:44:a2:8a:05:1f:c0:18:fd:21:1c:2b:6c:
b4:9e:a4:99:d5:53:cf:97:b3:d3:fa:76:ee:df:59:3c:f1:0d:
37:5d:71:43:d0:a4:8a:b7:d4:95:d9:a6:8d:e9:81:53:25:19:
68:07:f6:4a:84:06:09:b3:80:ae:95:a0:d1:1c:5a:e2:7f:0b:
c9:c9:ea:37:94:04:e4:94:83:c7:4b:4b:f9:68:57:31:dd:5a:
40:1c:c6:e4:d4:b6:be:e1:a6:4b:3e:52:1c:95:5b:fc:47:e5:
c5:0a:db:cd:a3:54:ad:de:1d:e8:97:3d:8c:ef:18:e5:a4:e8:
e8:89:be:3f:ef:c0:86:5b:a0:0b:5d:01:17:f0:9c:c5:c6:18:
4e:71:b3:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:48:21 2025 by rpki-client