Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DFz3BzBRKu-nAwdmLPWSiOjNJkw.cer
File: DFz3BzBRKu-nAwdmLPWSiOjNJkw.cer (raw, json)
Hash identifier: +ExQCkJbGz34s8C9KxfDZ8Yw5Rs5jo/dGw77wF3Lh1c=
Subject key identifier: 0C:5C:F7:07:30:51:2A:EF:A7:03:07:66:2C:F5:92:88:E8:CD:26:4C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA602A8DC293ADC6BFBE20D3BBA02E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:48:09 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.209.253.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:60:2a:8d:c2:93:ad:c6:bf:be:20:d3:bb:a0:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c5cf70730512aefa70307662cf59288e8cd264c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c4:5e:77:a1:41:17:ac:31:b6:b6:3b:11:0e:
4e:41:52:c2:f1:41:3b:dd:b5:41:c0:cb:4a:68:58:
d9:43:bf:e8:23:ad:f7:a9:7e:bc:c8:84:5a:d3:37:
6f:34:92:c1:9b:3b:99:85:81:65:d7:b9:05:1f:8c:
f2:99:46:29:26:21:3a:41:f2:3e:84:cd:7a:07:ce:
fd:7d:68:4e:e0:bd:83:9d:89:ec:bb:e7:ad:70:54:
d7:be:7c:0d:6a:f5:d9:9e:18:75:be:88:41:aa:89:
40:b5:22:f9:d0:fc:b3:59:d2:02:f5:c3:79:d0:ba:
64:83:7a:65:1b:b4:0c:26:2b:0e:13:c5:51:7d:7f:
fa:1c:83:8a:d7:ca:bb:2a:61:d4:6b:82:7b:8d:ee:
dd:72:d5:c2:41:6d:f1:65:5e:00:1a:7a:8f:ec:41:
38:e3:5c:e3:c7:20:d7:66:87:08:95:0f:87:c9:35:
b8:5a:4c:38:04:6c:64:4b:57:79:b5:4a:b3:27:0a:
0c:fa:56:43:92:da:91:03:69:12:45:de:ff:f5:b0:
54:4f:2c:40:3f:e8:f7:b0:90:84:39:36:50:0a:d8:
06:31:a6:a7:7a:93:43:7d:2b:62:12:40:4a:76:2e:
f5:93:6b:d0:c5:c1:69:bf:2d:2c:c4:33:73:21:30:
58:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:5C:F7:07:30:51:2A:EF:A7:03:07:66:2C:F5:92:88:E8:CD:26:4C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.253.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:53:c8:66:9d:65:d4:bb:9c:00:6b:da:6b:1d:68:f6:13:93:
0a:58:06:c2:9e:ce:8e:13:3a:90:c5:e5:3a:b1:2f:76:64:f7:
e6:7f:50:e0:b2:77:2e:f6:93:19:9b:d7:cc:b0:52:38:73:99:
05:07:15:58:57:44:4a:01:f8:ed:86:1d:ab:69:a4:0f:43:a5:
0b:af:4d:6e:4d:d8:01:b4:27:76:08:b1:aa:2b:b9:3b:9b:1a:
b8:b0:12:5a:06:7f:12:6e:9a:ff:1c:4c:ff:52:e7:df:1e:5f:
5b:12:04:19:3a:68:cd:93:f2:11:d5:d3:72:ab:52:0c:c8:af:
c7:0a:62:eb:f2:37:0e:5e:6f:c4:0f:72:48:bc:c9:09:2e:1d:
24:ed:f1:65:47:cc:6c:36:c4:6d:0b:5f:f3:d8:ce:db:84:18:
8c:5d:da:b8:2c:68:ac:fc:26:7d:b3:52:53:37:27:64:f5:e2:
7d:01:6a:6b:bd:56:26:a5:fe:70:02:4a:be:b3:e1:08:50:d1:
a9:46:c5:af:c8:bc:17:ea:5c:2c:d8:aa:1a:ff:39:73:98:8f:
4a:9c:e9:dc:24:b8:fe:96:4d:ad:dd:aa:11:82:6d:5a:cd:3f:
a9:ee:4b:c7:af:77:4b:8d:a4:c6:b4:b5:e0:5e:dd:e1:65:7f:
77:9c:1c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:05:40 2025 by rpki-client