Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/B-4HmfCK-P5SD5SCzdBejqZeYag.cer
File: B-4HmfCK-P5SD5SCzdBejqZeYag.cer (raw, json)
Hash identifier: Dx0uVzRhqi+qakjlehf1gC4lCsj/L4nzUYA/ZZOtMIo=
Subject key identifier: 07:EE:07:99:F0:8A:F8:FE:52:0F:94:82:CD:D0:5E:8E:A6:5E:61:A8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221F78F700FB7C0F9AF178F6604B1D3A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:47:55 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.138.10.0 -- 193.138.27.255
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:78:f7:00:fb:7c:0f:9a:f1:78:f6:60:4b:1d:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=07ee0799f08af8fe520f9482cdd05e8ea65e61a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:27:86:b3:ac:fd:9e:9c:fe:19:fb:81:d0:4b:
15:81:63:c1:5e:15:91:46:c6:86:89:e3:d4:39:70:
9a:83:fd:5c:de:92:09:86:38:2e:5d:d6:d4:5d:d5:
58:a0:2c:58:88:1f:50:de:66:55:d1:2b:82:ab:a1:
b8:26:d5:8a:10:9f:86:32:fc:4f:46:c9:cb:8a:7c:
d0:58:6b:68:c4:d2:5f:f8:a0:56:cc:03:c6:3e:b0:
db:63:2a:24:fe:62:a3:70:d5:33:22:f6:88:12:55:
03:92:35:c6:e7:dd:5f:0b:0a:f1:d9:b7:89:60:2d:
41:78:08:83:1c:28:47:b0:2f:51:29:2a:2b:0d:d4:
3f:52:3a:4f:71:33:b0:f7:ce:a9:4f:ed:7d:1e:ff:
5f:bb:28:aa:7b:e6:01:8a:a4:f0:78:22:cf:16:33:
0d:09:ca:c8:7b:70:9b:4b:90:ac:c5:c4:93:01:34:
f6:4f:84:26:46:de:75:46:35:c9:ab:db:ce:73:0a:
d6:37:41:2a:43:6f:65:05:52:13:09:59:1a:fd:01:
46:dd:bc:59:7f:6b:4e:56:7a:b6:a6:45:8f:c3:0c:
e2:0f:c5:b4:ce:1f:ea:f5:ee:0b:16:5b:f5:d9:11:
31:16:57:d6:d1:55:eb:88:2f:e2:96:d5:c5:40:80:
45:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:EE:07:99:F0:8A:F8:FE:52:0F:94:82:CD:D0:5E:8E:A6:5E:61:A8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.138.10.0-193.138.27.255
Signature Algorithm: sha256WithRSAEncryption
9e:56:e5:d6:3a:8b:29:fa:16:dd:85:9a:af:0c:14:f2:34:31:
6d:b1:f1:04:0e:99:60:c6:9d:02:c1:5c:ff:70:a8:3d:56:0e:
69:99:31:6e:4f:63:37:88:66:be:ac:fe:48:f1:82:42:7a:ff:
fe:96:67:a2:56:1f:7d:ee:d1:aa:0f:42:f4:6e:c4:9e:cc:3d:
5d:f5:d1:a0:18:46:f0:a2:ca:7e:4b:6d:dc:b9:78:e5:86:4d:
ed:8a:33:e6:24:94:e0:00:01:6e:54:9e:a0:07:41:a8:26:45:
a6:79:23:f0:28:3a:1f:0c:4b:31:82:ca:70:45:30:69:8d:5c:
98:c1:12:90:d5:44:44:c0:31:04:ff:7c:1f:35:11:82:16:33:
2d:cf:1e:8c:d8:5e:06:39:11:6c:53:0a:3c:6b:35:43:07:c5:
4d:d0:10:55:47:12:22:29:5d:80:ea:98:cd:53:18:be:a5:aa:
7f:48:0b:84:93:75:23:4e:d8:d2:83:43:0d:de:15:b7:09:7f:
38:ef:8d:63:f6:69:59:9d:b3:e8:78:da:2b:2c:b9:6a:ac:02:
03:eb:75:66:97:68:1f:56:b0:3d:a4:3d:5c:37:e5:8f:2d:a1:
8b:55:02:65:f6:a6:12:58:97:43:69:09:c3:41:5c:ad:01:07:
ef:ce:7f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:45:41 2025 by rpki-client