Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/D4MsEBROTX9qZCxg3OrhQ2_JnKE.cer
File: D4MsEBROTX9qZCxg3OrhQ2_JnKE.cer (raw, json)
Hash identifier: MezAO3dN79HLKHElN9VqH9UNKlB4HNDG+kAkfJLnT4I=
Subject key identifier: 0F:83:2C:10:14:4E:4D:7F:6A:64:2C:60:DC:EA:E1:43:6F:C9:9C:A1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258F0548A3998B4553D0517DAF4778D7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:48:37 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 45.133.188.0/22
IP: 2a0e:77c0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:05:48:a3:99:8b:45:53:d0:51:7d:af:47:78:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0f832c10144e4d7f6a642c60dceae1436fc99ca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2a:b2:66:61:ad:6e:e1:09:0c:4e:26:29:5b:
67:89:d2:01:e2:c7:84:56:ee:40:af:ce:56:87:e7:
e7:57:ae:7b:7e:ab:a1:91:0c:b5:73:c3:99:85:22:
de:93:87:9b:a2:0d:1b:11:a7:90:c3:6e:e8:2e:c9:
8c:9c:cd:a0:21:46:22:f0:89:d7:c8:67:95:d5:1e:
dd:a2:0c:36:ea:c8:b6:5a:1b:16:32:4f:e2:2f:4b:
27:60:4b:06:11:5e:b3:86:78:c0:6d:c8:12:e8:47:
ce:f3:35:2b:ce:9c:89:1d:82:c5:3e:39:81:86:65:
1a:97:da:74:80:87:d7:f4:36:1a:a5:80:8d:fd:3e:
9b:c6:33:b8:0e:fc:ba:1a:d2:f7:42:72:b9:7f:98:
74:d3:37:0d:6f:21:c3:2b:74:8f:fa:b0:cd:76:02:
e6:fd:66:1d:a6:5a:5c:46:70:fd:63:7a:45:29:25:
49:70:af:33:77:f8:9a:5e:ac:3f:58:7a:18:37:e9:
65:fb:43:5c:fe:6b:2d:29:6b:2b:a0:1e:43:19:4d:
5e:ab:b6:15:47:86:0b:9b:9e:ba:93:82:25:b2:6b:
79:ec:e4:60:d2:01:11:74:93:ab:16:8d:f1:18:db:
fd:1f:05:c7:d1:c3:1e:e7:20:5d:1b:5b:d8:f1:83:
35:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:83:2C:10:14:4E:4D:7F:6A:64:2C:60:DC:EA:E1:43:6F:C9:9C:A1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/5c51ce-760d-44a0-a339-cc68e37d245f/1/D4MsEBROTX9qZCxg3OrhQ2_JnKE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.188.0/22
IPv6:
2a0e:77c0::/29
Signature Algorithm: sha256WithRSAEncryption
70:20:4a:09:d0:20:17:1e:fc:8a:d3:86:22:62:86:ee:f9:39:
8c:2c:bc:1e:8d:70:40:2e:37:c2:3b:f9:f4:14:69:90:4b:ca:
63:bc:37:aa:c9:31:2a:a2:28:08:5c:ca:e9:a5:dc:82:40:84:
6f:b7:e4:75:2c:f1:ab:49:69:88:2b:90:f4:ce:14:da:47:54:
78:72:4f:69:7c:8e:9f:7a:34:74:3d:8f:1b:ca:2c:a6:01:69:
2f:e6:20:a1:78:33:15:9c:54:44:44:97:36:53:a2:bc:11:ca:
e9:06:c2:1c:4b:8a:f7:b2:4a:bf:7a:d2:e8:36:ca:61:90:7d:
a1:93:f9:dd:b5:08:e5:dc:eb:a1:aa:65:51:20:2e:3f:91:99:
69:bc:01:a3:e5:01:c2:e4:57:7d:6d:09:8b:ac:71:b8:95:0a:
ba:fd:a6:90:07:64:e5:ca:be:b5:26:54:02:6f:c4:d6:fa:a8:
ee:d2:e9:05:b2:51:dc:b3:25:f2:16:33:95:02:a7:ea:76:de:
d9:2f:a3:62:d5:81:e2:0a:ef:c9:09:50:6b:af:15:39:42:77:
44:eb:23:d3:6d:90:e8:6a:e2:18:aa:33:a7:af:a9:66:df:98:
ec:f6:99:32:d5:c5:4c:10:9f:ef:92:4d:0b:b6:7e:7c:8a:ae:
76:b3:32:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:22:32 2025 by rpki-client