Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AEaAHkXKHu0_eNmSd9AZP1dmZcc.cer
File: AEaAHkXKHu0_eNmSd9AZP1dmZcc.cer (raw, json)
Hash identifier: u449dh3wl/gzK4WRsacR26kFhPXbP46sqyHCsqcmLnI=
Subject key identifier: 00:46:80:1E:45:CA:1E:ED:3F:78:D9:92:77:D0:19:3F:57:66:65:C7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221FB103208BB699DB1920CE570335B6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/05/28db82-bd8c-4e00-912a-e09801171b92/1/AEaAHkXKHu0_eNmSd9AZP1dmZcc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/05/28db82-bd8c-4e00-912a-e09801171b92/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:09 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 45.82.156.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:b1:03:20:8b:b6:99:db:19:20:ce:57:03:35:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0046801e45ca1eed3f78d99277d0193f576665c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:e7:3b:43:07:35:b5:be:57:9d:80:7a:26:d5:
26:2c:17:e1:ba:0c:7d:46:14:de:8d:5e:c4:83:8f:
fc:4c:4c:42:a6:be:62:1e:8a:dc:0d:17:b8:66:b9:
8d:2e:fd:b0:fd:be:e5:d9:3c:46:4a:77:d7:dc:0a:
44:a2:47:59:9c:36:50:e6:39:65:a3:e9:f9:fb:ad:
fd:5a:41:a5:64:75:c2:4e:cf:cf:5b:85:79:b1:9f:
58:d5:4e:1a:f7:8d:0b:4d:93:f5:4d:5c:85:2d:9a:
80:56:5f:ad:c5:8b:3c:7e:bc:e0:07:45:c2:fc:2f:
de:a7:e8:a9:79:d0:09:4b:a5:05:71:46:94:c4:99:
95:15:8c:a1:97:31:9e:98:3e:d2:30:8e:f1:17:3a:
6a:71:f2:c1:d1:45:80:38:d8:a0:e0:cb:31:13:a6:
e9:06:7d:46:ed:e2:40:33:5e:24:6c:b5:88:cb:cc:
1f:25:09:fa:30:52:f1:e1:df:4a:d9:23:85:cc:f1:
c9:c4:85:f1:82:0c:5d:ee:37:01:b7:a6:4c:d4:72:
80:9e:75:62:07:c2:8e:da:45:28:0e:17:2e:38:20:
ef:97:ab:ea:6f:ea:05:7a:19:9a:24:fd:14:09:9d:
cc:5f:fb:3d:1c:81:47:62:9c:ac:16:f0:be:da:ca:
48:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:46:80:1E:45:CA:1E:ED:3F:78:D9:92:77:D0:19:3F:57:66:65:C7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/28db82-bd8c-4e00-912a-e09801171b92/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/28db82-bd8c-4e00-912a-e09801171b92/1/AEaAHkXKHu0_eNmSd9AZP1dmZcc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.156.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:7f:ea:0e:5e:5a:77:d8:63:c7:a0:5b:a8:d6:07:a3:af:e3:
1f:35:cf:93:76:5f:0d:58:3f:93:2e:19:75:0e:f9:56:02:ad:
50:60:93:1a:37:9e:a9:22:5d:4d:c5:32:23:bb:6f:ad:6a:b1:
9a:9e:50:3a:bf:38:24:b8:20:c7:2e:99:35:a4:1f:3d:c4:db:
65:c1:2a:48:f3:a2:b9:ad:05:a1:e7:60:f1:93:4d:0d:d8:c1:
77:71:9a:c0:bd:7d:0f:20:8d:15:97:b0:58:18:a4:25:ee:8d:
a4:2b:ec:eb:77:a3:7f:46:64:03:d7:c3:00:16:9f:71:df:4c:
fb:3a:dd:78:6b:df:16:a9:61:72:80:69:dd:7b:13:a1:cf:8c:
33:a3:10:34:2a:6b:24:47:96:3f:79:9e:a2:65:26:2b:d3:a1:
90:8f:ee:4b:5a:3b:0d:d9:fc:cd:71:c3:34:9c:2a:3c:c3:55:
5f:32:2a:92:1b:12:4c:9a:d6:83:ec:0b:6b:ec:b8:ab:0b:98:
02:a1:16:07:81:5b:1d:d7:ad:d1:ba:51:20:76:ab:0f:97:e6:
fe:63:9c:eb:a6:c0:ed:e8:33:ee:83:a7:a2:b5:7c:46:a2:1d:
49:b5:69:09:7c:4b:dc:00:aa:c6:86:1c:18:34:0e:b9:59:04:
b0:c2:48:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:41:45 2025 by rpki-client