Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CDMy0vYHhPErstIQrsgKtBu_EVk.cer
File: CDMy0vYHhPErstIQrsgKtBu_EVk.cer (raw, json)
Hash identifier: DJWo2dv+ldnHE5U+YOmzanC0rc3//9BM1+EUObjb8yA=
Subject key identifier: 08:33:32:D2:F6:07:84:F1:2B:B2:D2:10:AE:C8:0A:B4:1B:BF:11:59
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA94B3FBE400E4850702977528D106
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/52/3ea1ae-1f87-4cfb-9412-df542cdc3976/1/CDMy0vYHhPErstIQrsgKtBu_EVk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/52/3ea1ae-1f87-4cfb-9412-df542cdc3976/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:48:23 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 80.91.208.0/24
IP: 2a09:5880::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:94:b3:fb:e4:00:e4:85:07:02:97:75:28:d1:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=083332d2f60784f12bb2d210aec80ab41bbf1159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4e:09:42:24:9e:90:3e:84:88:22:69:8b:6f:
3f:3b:9a:29:3e:e6:d0:c7:85:41:11:6c:32:e3:8d:
f5:03:2b:f3:c5:ad:ef:63:b5:44:6e:d5:ae:dd:97:
33:06:d0:33:d2:39:a1:06:84:be:36:27:55:fd:29:
ad:26:39:69:ef:ad:98:a9:97:c1:d0:d1:7f:a2:79:
c5:ea:3e:96:66:05:da:2e:46:f6:f7:e9:35:27:49:
19:d0:a4:f1:f4:84:74:a1:6e:d6:84:69:38:fb:ec:
81:5e:87:36:6e:80:9c:f6:95:0b:d1:e4:17:b2:e9:
35:39:19:52:ce:08:ef:5f:db:5a:72:b5:1b:43:3e:
bd:9c:78:33:bf:b3:b6:39:d8:df:3c:83:21:2b:10:
65:db:3b:5b:d8:6b:c0:48:f7:68:be:e7:11:6f:ae:
04:ea:8d:a3:be:89:75:1a:9b:a6:67:c5:cf:2f:89:
81:e5:8f:3b:76:96:e7:96:34:10:d0:39:e2:6b:dd:
8e:05:1f:98:e5:8a:6d:f5:66:b2:93:f9:c9:f7:c9:
c1:72:c4:df:45:87:da:d2:5a:9e:26:fd:bd:20:87:
c1:fb:a9:25:fc:d9:de:38:c0:d0:13:0b:99:d0:9d:
50:82:52:7c:73:cd:59:ea:c1:d8:e7:6a:9f:71:16:
06:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:33:32:D2:F6:07:84:F1:2B:B2:D2:10:AE:C8:0A:B4:1B:BF:11:59
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/3ea1ae-1f87-4cfb-9412-df542cdc3976/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/3ea1ae-1f87-4cfb-9412-df542cdc3976/1/CDMy0vYHhPErstIQrsgKtBu_EVk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.91.208.0/24
IPv6:
2a09:5880::/29
Signature Algorithm: sha256WithRSAEncryption
33:23:1a:24:42:38:54:19:6a:35:5a:10:49:ef:45:4e:86:a9:
76:56:80:9f:ef:fb:e6:6c:a2:38:50:55:96:91:11:94:b3:16:
4a:ff:e8:c9:fe:2a:c0:1b:6e:c5:46:1a:ed:5b:d2:e7:43:77:
c0:61:7e:ef:5e:26:b4:2f:1b:1a:b8:54:cb:3d:26:af:53:c2:
f5:86:e3:08:dd:34:9f:6b:38:ec:a7:5a:65:58:eb:fd:eb:55:
3c:26:08:e7:cc:a1:ef:09:3a:9a:a9:d8:f6:c7:50:b9:4d:ef:
f6:00:c4:36:72:19:4f:51:99:05:2e:8b:40:4f:28:5b:9b:f6:
c0:8a:1d:fc:ca:03:48:2d:47:7c:43:f4:4a:18:68:05:c7:84:
2e:d9:69:5f:1b:f5:7b:9d:e5:ea:4e:fd:dc:27:3c:19:28:ee:
f8:41:cd:82:32:41:93:9e:7e:78:ac:34:c4:ff:dd:8f:fc:d2:
35:f1:6a:b6:62:2c:8c:b5:c2:28:6e:90:90:8a:c3:2f:6d:85:
2d:7f:34:5d:c8:44:e4:e6:62:4d:fc:7a:e2:44:1a:eb:b9:03:
83:24:ae:4b:21:6f:d4:e1:b9:20:c8:7a:83:86:1f:6d:f2:9c:
4c:9d:50:01:11:ac:5d:9b:e9:47:52:79:02:c7:de:b1:71:14:
2e:6f:91:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:42:04 2025 by rpki-client