Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BqdXRC5H-CYIvvQj2sNEwlNY2_k.cer
File: BqdXRC5H-CYIvvQj2sNEwlNY2_k.cer (raw, json)
Hash identifier: lXcqWQGLQ5evK3FK7iS6MgJvsjqRVJ2GytZApkGYk58=
Subject key identifier: 06:A7:57:44:2E:47:F8:26:08:BE:F4:23:DA:C3:44:C2:53:58:DB:F9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420686DC81CD0552E4CFD97ED0C3F689C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:48:22 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.217.128.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:6d:c8:1c:d0:55:2e:4c:fd:97:ed:0c:3f:68:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=06a757442e47f82608bef423dac344c25358dbf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7b:b8:5b:44:10:f1:fb:72:04:54:ab:d3:34:
2d:8d:90:ca:41:6b:98:b3:e4:d5:4c:c9:27:1d:d6:
20:b4:1e:21:df:3c:79:78:66:d3:bd:76:78:c7:e6:
8e:50:62:80:86:a1:16:56:98:bb:a2:b8:aa:06:09:
69:b1:f1:f5:21:f7:9f:70:34:a0:3c:d7:ed:e4:61:
b9:4b:e6:0a:2e:77:79:eb:62:28:87:64:c1:46:ed:
31:10:e8:ee:5e:22:15:05:5f:25:b7:ea:b4:61:33:
aa:d7:8b:af:1f:76:92:af:20:53:6d:f7:20:25:c4:
70:ab:90:16:68:51:e6:02:40:7c:1c:63:aa:af:2e:
b4:da:94:a5:de:25:80:09:ac:b5:76:a2:e6:61:30:
0c:55:2b:dd:ab:68:4b:1d:4d:52:a8:5f:ac:78:f1:
b8:30:5e:44:83:74:23:fe:0c:2a:97:1d:9b:c1:3e:
5a:3c:41:a9:2c:c5:ba:80:50:7c:cc:22:09:1a:3b:
08:aa:cb:f0:f3:d8:42:fb:9a:35:8a:bb:0b:68:21:
5b:f1:86:b5:50:6e:1e:9c:58:2e:a1:60:99:dc:76:
78:bf:bc:3a:5d:09:57:0f:33:f6:f8:2f:bb:34:b9:
7d:1b:0e:15:b3:bc:2a:53:a3:29:dc:eb:1d:94:63:
4f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A7:57:44:2E:47:F8:26:08:BE:F4:23:DA:C3:44:C2:53:58:DB:F9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.128.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:db:ec:dc:09:e1:c7:4d:e4:63:86:81:5e:cd:d6:53:ed:8e:
9f:7f:db:33:9b:c0:11:29:2a:e2:57:39:20:af:d4:d6:f5:c8:
ae:26:87:9a:49:74:36:06:cc:66:bf:5f:4e:2c:9f:e1:75:75:
a7:36:31:29:5e:d7:a1:66:41:57:dd:b5:3b:2c:36:d7:e0:d9:
50:77:a9:08:fc:9e:25:bb:a2:a2:ee:c4:3d:68:30:51:cf:eb:
c8:03:a9:d6:73:11:4c:61:64:32:a4:0b:c7:97:98:3e:d2:0c:
35:87:86:5c:39:80:8b:ac:63:c6:45:28:d7:a8:a6:4b:0e:56:
2e:41:e6:6c:f2:78:ec:3e:90:8f:53:27:d0:39:6e:62:ce:36:
f2:21:49:6a:6b:ad:17:d2:2f:06:1f:13:2c:29:cf:8e:9c:b8:
4d:24:de:f5:4f:a1:56:15:37:55:2f:9e:8b:b9:01:e0:c4:10:
15:d3:0b:2c:4a:d9:6d:8a:eb:ac:aa:99:ff:51:b5:d2:9b:ce:
5f:24:48:11:44:6a:35:df:9b:f2:7e:23:04:e7:bb:6b:35:ff:
96:b1:de:bd:c6:f6:b2:67:40:71:3a:a7:67:c6:b2:b8:6e:a2:
33:83:eb:fe:70:7d:06:e6:14:a6:be:98:8e:55:d3:0e:5b:ec:
dc:b9:b3:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:41:20 2025 by rpki-client