Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CvPkI70elzal9deE7JKZ1QgnJ9w.cer
File: CvPkI70elzal9deE7JKZ1QgnJ9w.cer (raw, json)
Hash identifier: e5Fr8oCQ6z9g9owHUnIgzHNyTqsDRrGNXiJptn7NKSA=
Subject key identifier: 0A:F3:E4:23:BD:1E:97:36:A5:F5:D7:84:EC:92:99:D5:08:27:27:DC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FCD52954248FFF566E3A8E48591DDA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:48:34 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 83.242.0.0/19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:d5:29:54:24:8f:ff:56:6e:3a:8e:48:59:1d:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0af3e423bd1e9736a5f5d784ec9299d5082727dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:38:26:b6:76:08:2c:11:6c:d1:d3:8e:56:ec:
bd:dd:58:14:29:10:bc:4b:c2:eb:91:a4:0e:b4:12:
b8:72:a0:9c:c2:14:3b:16:75:84:94:d4:bd:17:97:
88:b2:b9:76:81:90:0a:e8:b3:68:f8:5c:79:3d:92:
ec:59:75:a9:e5:c9:dd:3e:e6:44:51:bd:5d:5f:24:
d0:da:f8:57:ff:92:6a:aa:33:d9:03:77:2f:44:d9:
d4:b8:b7:77:5a:9e:7f:d2:4d:9d:01:ea:ff:f6:03:
68:ef:67:30:04:31:10:7a:19:9e:39:d4:d3:64:f6:
17:fc:ec:27:1e:fb:7a:e5:97:86:bf:a2:b6:f6:15:
65:8e:7c:5d:c0:e7:a8:fd:fb:df:05:ee:5f:79:f9:
eb:74:42:62:dd:8c:64:91:a5:76:80:42:6e:3f:ed:
2d:12:71:0f:5b:b8:ac:99:2e:20:56:f5:86:b3:70:
ee:0b:9c:7d:fb:97:1f:60:36:7d:3d:72:66:5e:fe:
f9:d1:38:1b:60:b3:fb:53:02:2f:27:91:c8:29:e6:
d8:89:94:e9:00:25:b2:09:92:31:51:12:a4:3d:10:
8e:5f:32:54:5c:e6:eb:ae:8e:a7:c6:a2:d3:12:26:
44:44:76:20:07:a3:78:14:b5:db:b3:89:f8:14:7c:
c0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:F3:E4:23:BD:1E:97:36:A5:F5:D7:84:EC:92:99:D5:08:27:27:DC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.242.0.0/19
Signature Algorithm: sha256WithRSAEncryption
6b:78:e1:e9:0f:7d:09:9e:9e:78:9c:96:ee:a7:ad:77:4a:89:
8f:f0:17:ab:2b:3d:48:7b:ac:b7:44:d4:5e:35:3a:f3:d6:05:
f4:59:27:ce:ad:38:bf:a0:56:f0:66:cd:ff:45:45:c9:76:8a:
f3:94:ae:25:36:22:f2:6c:e1:d4:27:fd:e4:c5:d8:eb:21:07:
8c:84:8c:72:bb:f0:8a:e3:fc:d1:51:70:4a:d5:3b:7c:f3:75:
33:bd:9a:e0:ba:c5:e5:1b:92:94:9a:b2:cb:4a:67:25:59:d6:
a6:ce:76:50:f5:82:cd:6a:3b:ba:c4:19:51:23:c7:cd:65:f5:
e3:a4:f5:3b:0a:d5:92:fa:f2:8d:d5:e8:a0:24:1d:23:28:e5:
87:62:c7:0b:79:de:12:47:8e:c1:07:1a:5c:54:a3:89:35:ff:
6d:83:d4:f9:e1:ba:ca:be:ee:50:51:fb:85:1d:17:46:fa:f0:
83:99:27:5d:50:e7:b1:62:34:7e:63:ec:66:29:f4:32:a4:49:
da:1f:80:76:2f:e5:56:f3:db:93:8b:41:e2:8f:0d:58:13:6c:
30:62:88:31:12:2e:7e:e9:c2:f7:b8:94:3f:4b:6d:c4:d5:8c:
d0:fa:3b:a0:71:e3:22:59:21:91:70:af:32:c1:30:e9:c9:d6:
95:22:51:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:30:49 2025 by rpki-client