Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer
File: CNC8jFiQLIynu4aewuKDAvpFFek.cer (raw, json)
Hash identifier: fQTFjX2LA+lREJJczNhxQtYGBGhdmEor4ea1/TmaMkU=
Subject key identifier: 08:D0:BC:8C:58:90:2C:8C:A7:BB:86:9E:C2:E2:83:02:FA:45:15:E9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FC7FFE52763DC296428F4AE8E7DAEC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:48:12 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 134.96.0.0/16
IP: 192.76.145.0/24
IP: 192.109.115.0 -- 192.109.116.255
IP: 193.17.22.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:7f:fe:52:76:3d:c2:96:42:8f:4a:e8:e7:da:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=08d0bc8c58902c8ca7bb869ec2e28302fa4515e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:2a:e6:15:70:d4:af:e1:1d:e1:e6:a3:da:cf:
10:95:e5:ca:f3:d2:f0:4c:d9:58:1c:43:92:30:d5:
9d:d7:52:6d:77:31:2d:ff:5d:87:bf:4a:8c:59:d3:
0f:33:b3:fe:61:a4:67:b9:1b:1e:92:d9:03:2f:73:
5b:80:63:8f:b7:51:ba:0b:d4:b2:73:92:04:c1:17:
48:51:3c:5a:0f:e9:5c:8e:5f:0e:ba:56:7a:70:53:
1c:03:3e:ee:a3:3a:f7:99:80:ae:7c:a2:cf:f7:ce:
21:0a:94:a8:8e:e3:97:46:01:71:47:09:c2:2b:54:
d3:ba:aa:81:59:08:dd:d2:a6:ee:83:4f:f0:07:d3:
5a:10:04:58:bb:ac:99:60:a6:d6:88:76:39:88:2c:
a5:72:1d:8c:81:5b:19:4f:79:db:18:38:82:0d:ca:
84:82:8d:20:20:08:76:48:2d:2b:f1:6f:7d:5f:65:
31:52:b8:56:23:16:67:f7:5e:6e:3f:ca:12:d8:20:
4f:31:54:cb:38:2b:a6:0b:e7:0e:25:f8:9b:07:c2:
0c:20:ff:9d:36:ce:41:fe:58:67:28:4e:03:61:b3:
d3:58:49:e7:ad:c4:fb:ed:68:65:fd:fb:5b:ae:be:
7b:c9:c6:2c:7e:d2:f3:c7:28:fb:73:0b:8f:3f:92:
42:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D0:BC:8C:58:90:2C:8C:A7:BB:86:9E:C2:E2:83:02:FA:45:15:E9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.96.0.0/16
192.76.145.0/24
192.109.115.0-192.109.116.255
193.17.22.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:da:5b:00:d5:7a:e9:66:24:67:0a:8f:9b:36:15:89:5e:75:
ff:b3:70:cf:b4:1b:41:11:17:4a:07:75:3c:28:4a:c3:3f:10:
7a:6f:c7:2e:a3:5a:86:4f:e0:70:ef:10:86:3d:db:fc:51:c5:
8c:34:fc:eb:a9:e0:17:2c:3e:5d:40:4e:cd:4c:b7:e3:a2:83:
a1:81:3d:69:63:48:6d:60:50:74:e2:2b:06:ff:e7:e3:96:e2:
75:da:ad:81:53:f8:af:16:c0:c6:d3:1b:c8:f4:21:db:6b:09:
9c:0c:ac:4c:cb:3a:bf:be:ca:32:33:f5:03:6c:7f:76:82:25:
e2:26:9f:95:16:1d:e9:98:61:ce:c9:d3:30:d1:28:bf:8f:07:
97:e9:8c:b6:5a:f5:00:6d:5b:e2:eb:1f:f4:20:b2:37:99:d6:
d3:ed:4e:41:a1:c0:d9:85:a0:9f:b0:84:00:f1:ab:69:06:45:
0b:f6:04:2a:3c:88:2c:f5:99:72:f5:2e:fd:d1:0e:96:98:c0:
1a:55:43:50:ed:1d:99:59:3e:e5:06:a4:2b:0c:b5:b7:5f:12:
22:84:8b:3f:8a:36:ca:32:b1:22:e6:80:67:8f:6d:1e:7d:81:
75:1c:18:54:39:ca:a9:91:28:50:83:43:04:db:71:e4:3a:68:
4b:6f:82:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:15:29 2025 by rpki-client