Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ADoNFLA-o0Lt47L0mtjKor904XA.cer
File: ADoNFLA-o0Lt47L0mtjKor904XA.cer (raw, json)
Hash identifier: 4e3XDdsZQT4MhzHh6FwOoijALagiOUk+eEuO1TDsxG4=
Subject key identifier: 00:3A:0D:14:B0:3E:A3:42:ED:E3:B2:F4:9A:D8:CA:A2:BF:74:E1:70
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228E352A601613BAFE411C9E0DA9FB8D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:52 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.84.192.0/19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:35:2a:60:16:13:ba:fe:41:1c:9e:0d:a9:fb:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=003a0d14b03ea342ede3b2f49ad8caa2bf74e170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ca:b3:dd:f7:89:5c:e9:f6:79:82:c2:b3:52:
ae:d5:5d:63:d0:78:78:dc:b8:00:7e:e4:31:b6:ed:
a3:79:bc:22:be:56:ad:d0:79:a8:ae:c2:45:c0:05:
f9:ec:0b:b3:30:68:3c:5a:0d:e7:3a:04:12:14:8b:
27:6e:98:54:49:68:ac:d0:89:12:0d:dc:b2:6d:ac:
5b:1f:e8:54:e9:ec:35:00:20:b5:5e:d0:42:54:b0:
db:9d:b2:f3:47:36:6c:93:14:9b:f3:3c:54:3e:92:
7b:b1:99:07:c4:ed:0a:fa:a8:23:0e:7b:4a:d8:de:
7e:06:5d:15:dc:cd:72:48:29:74:05:70:79:37:1e:
e5:dd:fc:5d:ad:d0:b4:f1:df:ba:34:b1:d8:8d:1a:
50:38:19:f7:7b:41:1d:2d:2f:48:23:5f:af:64:38:
cc:aa:ef:bd:80:07:3d:8d:2a:27:76:94:3b:bc:62:
71:b1:da:3b:f7:ff:31:15:12:c3:49:aa:09:5a:ea:
86:06:a2:c7:5a:61:11:54:b5:40:b0:95:d0:4d:ed:
54:2f:94:de:b0:be:05:87:ba:a5:cb:46:08:87:69:
a9:de:b3:b9:b2:5f:3e:bd:76:86:0e:ca:f9:92:06:
3f:84:b2:aa:56:94:8a:ac:72:74:e0:26:96:03:5d:
c9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:3A:0D:14:B0:3E:A3:42:ED:E3:B2:F4:9A:D8:CA:A2:BF:74:E1:70
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3a252a-af4b-4eea-acdb-2fdd1fd99657/1/ADoNFLA-o0Lt47L0mtjKor904XA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.84.192.0/19
Signature Algorithm: sha256WithRSAEncryption
a5:ba:eb:5c:63:0a:1a:49:f9:cf:6e:cd:7f:ea:e3:72:b0:ed:
5f:64:b6:24:32:0c:e5:97:6f:a4:d8:e8:00:ea:98:95:88:3b:
ca:90:5c:2f:ec:be:9f:91:88:1e:88:1f:4b:39:eb:67:d8:da:
77:98:d6:c8:2e:2b:d3:f2:9f:f1:1e:e9:61:38:a5:b5:33:0e:
9e:70:ae:3e:32:30:52:46:e1:c3:26:30:a6:7e:18:15:4b:10:
db:c5:47:6c:49:4f:5b:77:6b:82:fc:f4:11:a8:08:b5:84:c0:
e7:85:fe:4d:8f:a8:ec:ea:7a:7a:3b:a5:65:48:a7:ed:d4:c6:
69:64:6f:cc:69:62:79:0c:6d:a2:eb:5a:cb:42:4b:9a:10:6a:
1a:b2:90:1f:af:9b:6c:6c:88:32:06:20:ac:19:5f:6a:ab:1f:
40:73:c1:ab:81:08:6a:d0:d8:27:4f:0e:9d:ac:dc:9f:20:1a:
3a:b8:a3:06:d4:bb:22:9e:97:92:34:01:d0:e4:0c:ae:49:33:
40:8f:4e:2e:58:c4:19:83:35:74:04:b8:7c:d0:29:d8:89:b5:
ec:2a:4f:4e:11:24:89:d2:21:09:2e:2e:10:e5:5f:25:a7:9b:
ed:41:38:43:1c:8c:2c:d4:6a:1f:7b:11:44:4a:32:6f:dc:1a:
99:ca:9a:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:42:18 2025 by rpki-client