Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/D2cf7DjwDEAvMGbxPHkuGg7RbbM.cer
File: D2cf7DjwDEAvMGbxPHkuGg7RbbM.cer (raw, json)
Hash identifier: J6P91iyKMut+qBir48hKyj3+PORHP1QYAHwP34t7PH0=
Subject key identifier: 0F:67:1F:EC:38:F0:0C:40:2F:30:66:F1:3C:79:2E:1A:0E:D1:6D:B3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942143C22C88C426C2CFB99253A4CEAC3C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/79/49bb69-dff9-448e-a8a2-977305c70051/1/D2cf7DjwDEAvMGbxPHkuGg7RbbM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/79/49bb69-dff9-448e-a8a2-977305c70051/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:47:56 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 37.9.176.0/21
IP: 185.20.212.0/22
IP: 2a00:4b60::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:c2:2c:88:c4:26:c2:cf:b9:92:53:a4:ce:ac:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0f671fec38f00c402f3066f13c792e1a0ed16db3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8e:4f:44:a2:8b:f1:1a:9c:a7:f9:28:5f:02:
2a:ab:28:42:71:2f:ef:e2:3c:2b:a8:d7:3e:5f:2c:
50:19:a6:b1:0c:94:51:82:2f:5a:58:f6:ce:97:2e:
84:84:86:44:00:57:8e:96:d1:a5:89:a4:c0:51:b2:
dc:5c:56:f4:78:57:fb:e6:4e:5a:0c:bd:28:9e:cf:
d4:23:b0:87:32:62:f6:7e:fb:51:b3:6c:50:31:59:
ac:b2:e2:63:49:57:6c:9c:8f:24:67:f4:5c:2d:49:
1d:1b:7c:c9:61:0a:5f:48:01:bf:23:64:c1:99:0a:
a4:a0:31:e2:8e:f5:16:35:03:61:17:ac:a3:31:d8:
11:58:51:ee:3a:4a:a6:19:b5:57:8d:5d:9e:0e:b2:
0d:a9:30:26:3e:ef:37:84:67:06:80:16:7c:cd:03:
88:61:a2:fa:11:14:6b:75:e5:d4:e7:90:50:ce:96:
44:df:42:34:ab:40:07:ab:ff:63:cd:14:61:9c:fa:
1a:dd:d5:6c:14:0e:1f:2b:93:4a:f6:68:7b:85:37:
fb:e6:e7:f1:74:ec:5b:04:b5:64:82:fe:47:1d:db:
11:3d:8e:0c:b0:f2:2e:fa:63:18:99:4c:1b:12:05:
7d:91:e8:a2:1d:78:3e:f9:00:7d:fa:28:0e:c6:39:
b8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:67:1F:EC:38:F0:0C:40:2F:30:66:F1:3C:79:2E:1A:0E:D1:6D:B3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/49bb69-dff9-448e-a8a2-977305c70051/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/49bb69-dff9-448e-a8a2-977305c70051/1/D2cf7DjwDEAvMGbxPHkuGg7RbbM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.9.176.0/21
185.20.212.0/22
IPv6:
2a00:4b60::/32
Signature Algorithm: sha256WithRSAEncryption
58:74:9b:d5:38:cd:90:42:35:26:ad:e3:78:f4:b4:1e:bd:06:
a0:09:f4:6c:c0:52:b6:6a:3e:0a:0f:14:8d:7d:d5:d7:0c:f6:
4f:c5:34:16:e6:17:b1:b3:68:c8:21:98:7b:9b:2f:ff:d5:ce:
f5:02:35:67:f2:26:df:19:fe:2e:67:b1:25:8f:10:fe:9f:5e:
7e:9f:1c:76:e5:8f:0b:4b:ab:ac:13:a9:06:25:64:cd:90:39:
28:e6:2e:09:b9:1a:20:45:a4:da:e0:91:47:86:28:83:e6:88:
2c:33:7b:8e:e8:53:27:d4:e5:1f:6f:dd:4a:f2:88:5d:e5:7c:
4d:b2:71:49:94:9c:47:9c:ac:63:4c:e0:7e:3a:0d:4e:3b:bd:
f2:7a:c7:c5:0c:b1:b1:3c:6b:58:27:f4:30:ff:50:f2:2f:5c:
9d:75:7e:77:01:67:14:80:63:74:97:5b:07:b0:27:25:25:d9:
4f:58:fc:81:b9:09:2c:48:95:46:e4:30:f9:a0:fe:af:ea:c5:
da:d5:78:da:af:71:e9:a3:73:31:71:9b:97:66:ed:20:1c:64:
4b:b0:12:72:83:2e:04:b0:22:16:d5:26:5a:5f:5b:9c:68:3c:
01:f6:76:0f:9b:df:30:ad:df:bb:9d:8b:92:c2:96:0b:91:9a:
a2:00:54:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:21:19 2025 by rpki-client