Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9XGHM6rUPvapm9jZUEog3YkCLo8.cer
File: 9XGHM6rUPvapm9jZUEog3YkCLo8.cer (raw, json)
Hash identifier: tgrouwLLv13oGW3ccPR2oP82NwRYAyojj9vpg+TuR7Y=
Subject key identifier: F5:71:87:33:AA:D4:3E:F6:A9:9B:D8:D9:50:4A:20:DD:89:02:2E:8F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427486424F7F1F5EB9E6081F434010BA4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:50:43 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.28.120.0/22
IP: 195.206.248.0/23
IP: 2001:67c:22b8::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:64:24:f7:f1:f5:eb:9e:60:81:f4:34:01:0b:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:50:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f5718733aad43ef6a99bd8d9504a20dd89022e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:de:b4:5d:8e:b2:cd:e1:e6:26:01:93:eb:1e:
17:bb:f0:77:0e:1f:44:82:ae:b0:63:7d:5c:38:1d:
2e:d6:f9:06:07:4c:82:4d:3b:62:26:85:25:ee:b0:
36:8a:aa:a8:d6:97:34:0c:38:68:02:58:3e:20:cd:
f0:e7:aa:9c:08:d6:78:c8:91:0c:9a:b0:3c:9b:81:
ee:d8:0a:b6:3c:e7:6f:6f:20:2d:b9:f3:0f:1e:99:
e5:cc:42:be:3a:f9:67:b6:6c:2b:4d:09:63:65:16:
70:d8:56:ca:d6:2d:c1:31:9e:9f:57:29:80:a9:61:
bb:ea:78:d6:7c:b4:73:c4:ef:b3:10:bb:2d:d8:cb:
22:25:a8:47:60:52:da:a3:46:6a:0a:7f:0d:b2:a7:
f4:d0:f2:bf:59:b7:fd:42:b9:b8:28:fe:d2:dc:7e:
2e:a7:93:1a:0f:b6:d0:aa:be:20:2d:44:bb:5d:84:
b7:b8:7b:bc:04:2a:c9:a1:73:b6:21:47:c0:35:29:
26:f7:67:09:a7:9b:89:0f:02:e1:24:8d:07:59:68:
18:8e:92:fc:98:a7:94:ce:7b:8e:fd:0a:36:90:28:
1d:2f:f3:db:99:dd:0e:87:e3:81:6f:02:ff:9c:6f:
e4:bb:e4:9a:2d:ce:1f:a2:b0:e7:ff:a8:f1:be:3f:
aa:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:71:87:33:AA:D4:3E:F6:A9:9B:D8:D9:50:4A:20:DD:89:02:2E:8F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/23337c-3758-40b6-a9c8-d725fa6732b6/1/9XGHM6rUPvapm9jZUEog3YkCLo8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.28.120.0/22
195.206.248.0/23
IPv6:
2001:67c:22b8::/48
Signature Algorithm: sha256WithRSAEncryption
6d:d7:1c:a1:12:ad:fe:f9:85:74:a6:c7:84:a0:b6:cd:42:ec:
00:98:a7:14:63:a5:23:97:e7:91:e6:d1:d3:61:1b:1a:5f:5e:
9d:b1:a5:71:97:71:34:bd:bb:99:b7:79:e4:d8:16:1a:19:ce:
b2:b1:2d:10:11:e8:7e:97:84:7b:db:c3:8c:1c:22:ce:a0:45:
0d:0d:fc:17:a6:93:ef:f6:ac:e0:71:b3:45:da:c5:cb:0d:af:
84:4b:a0:03:e9:ea:c4:0f:7d:fa:0e:10:c8:26:f1:58:f7:9b:
b8:ac:d4:bd:cd:fc:5d:5b:42:cc:45:9f:eb:5f:e4:dc:f0:89:
1e:9c:b3:b1:34:d8:f7:d2:e9:aa:29:94:08:bd:c4:a3:38:00:
e9:bf:f4:34:81:e4:b1:06:7e:fb:25:c8:8d:44:e4:68:92:a8:
8b:a3:3d:7d:a0:da:28:8e:e8:38:69:63:47:7b:7e:b8:48:01:
cd:d1:67:c3:4a:37:1b:c5:41:55:f8:8e:18:fd:1c:e8:da:17:
a0:d6:76:c5:1c:ce:60:d5:85:b8:5b:f3:9c:45:5f:91:77:38:
19:a5:96:3e:35:82:af:5d:32:44:17:77:fa:3b:17:bb:61:29:
f8:8f:48:3c:01:34:31:51:e6:9d:42:1d:d5:04:b6:7d:3f:ad:
ef:f7:92:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:47:34 2025 by rpki-client