Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer
File: 9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer (raw, json)
Hash identifier: pf331t2k1inv8dQQ4aPMC6VaDoWRy4SbQts+vbB4UHI=
Subject key identifier: F6:95:27:A0:6A:03:5C:BC:AE:CF:00:DA:CA:2F:D8:83:99:CF:9D:12
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942748033C78F1129BFFD4152056996A1E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:50:18 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.235.104.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:03:3c:78:f1:12:9b:ff:d4:15:20:56:99:6a:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:50:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f69527a06a035cbcaecf00daca2fd88399cf9d12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:28:20:f7:0d:48:02:53:82:be:32:b9:e7:3d:
a3:69:25:c9:76:5c:d5:4b:81:d7:e5:47:17:fe:96:
74:fb:b6:70:a5:7f:4e:10:38:40:af:e3:3e:94:07:
95:64:02:e3:f8:38:d2:c5:1f:65:94:f3:7d:ec:3e:
bf:a9:ca:20:42:a2:0e:ce:5e:05:08:cf:48:e0:04:
f8:e3:9c:28:40:49:36:b2:c0:ab:1f:5d:2a:6a:1c:
cd:fb:d0:b0:f2:01:f4:ab:30:fe:04:ed:a2:79:bf:
2f:85:da:e4:a1:2d:bb:8c:f6:3d:45:51:18:ba:16:
15:c1:de:35:13:3e:9f:e1:9b:64:0d:16:8f:3e:5d:
30:1e:84:b4:f5:c7:f8:2a:91:26:f4:11:3f:e3:f2:
26:ae:b5:4d:0f:24:b2:97:ab:06:ec:35:2c:9f:e4:
4d:6b:e0:36:27:c1:44:6c:32:39:04:ea:86:aa:ee:
77:db:98:49:04:46:75:1f:ef:ec:f2:39:ed:3f:70:
d7:56:07:d1:bd:ee:ea:94:0c:6e:26:d9:23:8c:2e:
20:83:10:91:79:cb:92:8f:67:0e:44:50:6a:67:9b:
7c:31:de:d8:63:2c:c1:d2:84:05:93:7e:d3:ee:6a:
f4:07:9f:97:73:fa:d3:ef:49:3a:3c:ad:32:d2:1f:
46:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:95:27:A0:6A:03:5C:BC:AE:CF:00:DA:CA:2F:D8:83:99:CF:9D:12
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.104.0/22
Signature Algorithm: sha256WithRSAEncryption
58:5c:71:96:b1:88:92:d6:b4:c5:2f:90:6f:53:dc:7c:2a:63:
59:d0:d8:4c:59:b4:a2:78:f3:1f:34:b0:8b:03:40:5a:58:82:
9d:ec:40:df:48:85:2b:9d:9e:c7:f2:68:57:d2:d7:dd:b8:86:
49:88:59:56:79:89:45:e2:62:07:1f:c7:56:76:d4:51:5a:58:
cf:89:7d:51:76:97:06:6b:ef:6b:70:4a:bd:ba:de:08:08:87:
89:8f:74:f7:6e:73:4d:4b:e5:07:0b:65:11:24:37:ac:21:70:
aa:2e:ff:fd:f3:dd:10:61:9b:8b:9a:5c:24:4d:e5:c2:a2:dd:
58:bb:3d:a8:14:37:cc:26:86:2d:94:fe:35:f7:e4:0c:db:09:
17:4a:b5:06:2e:08:c0:33:c6:a4:84:78:c7:6a:c4:0a:92:4c:
00:71:8d:12:d4:7d:2e:a0:37:e9:ac:a8:25:9e:26:b4:ee:9a:
2b:9d:d6:8c:a3:4d:99:e9:04:03:7e:64:ca:c3:2e:bc:43:7e:
31:44:26:dd:1b:9b:b4:2b:d1:7e:65:d9:04:5c:41:18:6b:6f:
47:89:fc:d6:4c:aa:9c:c5:b4:2e:d6:c1:c1:60:33:4c:49:0e:
7a:cb:b7:65:16:5f:4a:e8:8a:c2:42:c7:67:b0:8b:99:ea:4c:
8c:f1:19:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:52:25 2025 by rpki-client