Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.cer
File: AtpM0ETG6Yc6yP2c_TDx7LPYC8o.cer (raw, json)
Hash identifier: WauvXpH7hmYZt5Uxvxg1f1sxoCSak64y9ZHzvz8vzCw=
Subject key identifier: 02:DA:4C:D0:44:C6:E9:87:3A:C8:FD:9C:FD:30:F1:EC:B3:D8:0B:CA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194274646B7E63DC6662587A993D65FAFF0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c6/29373e-c309-4c32-a606-d692c3729c48/1/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c6/29373e-c309-4c32-a606-d692c3729c48/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:48:24 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2001:67c:17a4::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:46:b7:e6:3d:c6:66:25:87:a9:93:d6:5f:af:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=02da4cd044c6e9873ac8fd9cfd30f1ecb3d80bca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ae:08:cb:30:56:62:10:98:e6:a0:d5:bd:19:
43:db:da:79:dd:e6:9d:ce:3d:7b:72:10:8c:20:c5:
db:7e:c4:11:0a:95:14:92:8c:45:b8:6e:3d:fb:40:
87:13:ab:ad:5e:37:00:76:90:dc:b9:e2:3a:c4:a3:
b1:31:3c:0b:c9:a2:73:db:74:f6:8a:8b:8d:67:18:
9e:72:17:7c:37:14:a5:3f:d4:9e:24:7b:8a:c0:31:
4f:94:d3:12:97:17:33:39:e0:2a:fd:af:6e:55:51:
46:34:3f:a8:e9:31:b5:58:90:e8:45:1f:9f:ed:8e:
cc:b5:e9:b5:7c:da:dd:37:a5:f8:63:e7:e6:10:89:
8d:66:76:45:6c:4a:15:e7:3a:74:59:d0:98:e5:67:
58:48:c5:fb:32:07:18:7b:8b:96:fe:c9:d0:0c:a5:
2a:f7:9a:d0:80:24:fd:21:63:14:27:65:8a:2d:39:
dc:d8:7c:d2:e6:0d:87:8f:26:41:46:e0:2b:21:92:
46:f7:9e:57:a8:d8:d2:5c:ee:df:53:b8:59:fd:b6:
24:2b:dc:9c:f2:85:7b:fe:6a:ab:5e:5c:59:be:d7:
30:73:bf:ef:a6:a9:d3:b8:0b:c2:33:d1:e1:23:58:
e8:5d:f2:be:5d:87:e7:0b:77:6a:d4:fd:a7:ad:91:
63:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:DA:4C:D0:44:C6:E9:87:3A:C8:FD:9C:FD:30:F1:EC:B3:D8:0B:CA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/29373e-c309-4c32-a606-d692c3729c48/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/29373e-c309-4c32-a606-d692c3729c48/1/AtpM0ETG6Yc6yP2c_TDx7LPYC8o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:17a4::/48
Signature Algorithm: sha256WithRSAEncryption
1d:df:a4:bb:d6:61:4a:22:3d:e4:23:5f:f0:2a:a7:59:16:5e:
d2:51:0f:c4:a8:94:75:52:a8:6c:80:6d:bc:2c:1a:e7:4b:f0:
ca:97:c6:e5:a6:c8:6d:b3:7b:79:37:b8:f4:fc:26:e0:c8:5f:
ae:d2:7b:79:73:1f:42:8a:7e:18:2d:f1:32:f5:f2:56:74:eb:
1d:c2:4d:67:6d:6f:bc:06:d2:4d:4c:b4:7c:3d:65:5d:ec:0f:
4c:d8:48:78:a8:74:d4:13:4e:70:90:73:63:dd:7e:ab:c9:58:
ff:dd:f5:83:70:32:62:f7:11:22:11:7b:47:43:8f:3d:6f:2a:
65:b9:0c:b1:9b:28:88:49:60:c1:de:8b:fd:67:1e:69:8f:e1:
2f:60:dc:a1:c4:5a:1b:74:6d:fb:b4:4a:0e:96:bf:54:2f:62:
a0:d3:9e:2a:e6:b5:24:05:d0:f5:73:89:e4:87:a7:64:87:bd:
d9:9f:a9:18:72:0f:bd:5e:31:b6:56:a7:f0:d5:92:62:b6:e0:
d0:dd:4d:67:ac:df:07:84:23:8b:74:41:8d:31:d1:58:00:c4:
97:01:ea:d4:83:56:ca:5f:e2:e9:1c:41:df:a9:2b:e4:5f:b4:
a1:c2:01:50:96:b3:45:58:b4:7a:27:b4:08:d5:be:bd:eb:f0:
ff:0c:33:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:24:43 2025 by rpki-client