Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/D_4AEevk8hbFjTq0KBK5hAK-Cyw.cer
File: D_4AEevk8hbFjTq0KBK5hAK-Cyw.cer (raw, json)
Hash identifier: Gzcn9dXUlf7/uchyriuoRKub+5Ic54+xHj4R7LHMpVM=
Subject key identifier: 0F:FE:00:11:EB:E4:F2:16:C5:8D:3A:B4:28:12:B9:84:02:BE:0B:2C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FBF3C74EF490B0D22F982FC8FF5144
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:48:44 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.216.179.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:f3:c7:4e:f4:90:b0:d2:2f:98:2f:c8:ff:51:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0ffe0011ebe4f216c58d3ab42812b98402be0b2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3d:1f:13:37:98:5b:4f:62:bf:b8:2b:79:f2:
13:1a:d1:56:9d:72:27:92:55:b7:ce:cc:b5:d3:62:
28:8f:9d:cd:de:f0:93:d1:2f:b5:88:70:26:93:9a:
e0:9e:dc:86:c7:b7:3b:ac:2d:4b:ab:3f:42:64:e0:
e8:51:1e:18:e5:78:9a:bb:cf:50:7c:22:6d:86:fd:
0d:5d:19:ae:3f:a7:17:df:cb:13:4b:49:f5:b4:c9:
30:4d:f1:9b:8b:c0:3e:39:22:0a:cc:2a:b2:51:a5:
3e:4d:22:e2:29:2d:82:b2:d2:0d:17:d1:e0:dd:2b:
42:f2:d4:fd:b4:78:86:e9:8f:0f:2c:91:d0:f3:5b:
fa:81:ca:6a:0d:97:3e:44:73:74:59:5b:3e:53:96:
50:40:3a:a1:28:9d:78:4d:03:00:17:19:66:fc:58:
36:ee:b7:78:cb:ce:4c:3e:58:07:79:8b:38:98:c5:
2b:45:0f:9e:6d:b7:4d:b6:b6:0a:86:95:e3:df:d1:
0a:dd:4e:75:18:f4:f8:3c:fa:31:a6:d8:ae:25:25:
cd:c6:c8:56:f9:32:ef:2f:9c:d9:9a:f5:1b:cc:b3:
bb:32:1f:93:5e:0a:dd:12:53:bc:42:e9:78:75:ee:
ee:34:a7:2b:ac:cf:28:c5:32:79:8c:e6:f8:d6:80:
2e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:FE:00:11:EB:E4:F2:16:C5:8D:3A:B4:28:12:B9:84:02:BE:0B:2C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/96184d-5981-4702-9d32-6cc0daf341c4/1/D_4AEevk8hbFjTq0KBK5hAK-Cyw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.179.0/24
Signature Algorithm: sha256WithRSAEncryption
af:ba:29:2c:37:aa:fa:2c:2e:d0:cd:73:b1:0a:b5:d1:12:ab:
38:a6:69:90:a5:0c:9c:77:f3:0c:c3:67:b1:f0:6d:82:89:76:
54:d5:11:ae:ad:ba:61:84:c1:3f:32:c0:28:10:3d:5a:96:98:
c5:bd:39:96:a4:8b:a2:54:34:f9:df:fe:10:bd:36:e6:40:1f:
77:52:80:03:ad:34:de:9b:de:e8:17:5a:d8:0f:6e:c0:2b:30:
08:cb:5b:09:95:db:2f:0e:a1:cd:3e:5c:07:99:37:c6:7c:4f:
e5:14:f5:20:91:a7:3e:8f:f7:20:aa:d5:53:f9:51:37:84:18:
2c:5a:1c:8a:43:03:1d:7b:54:16:64:ee:c1:5b:71:19:88:ce:
3a:83:ec:94:7c:56:c0:89:23:61:65:12:50:f7:44:39:6a:80:
52:15:e6:50:9e:44:c1:e8:80:e5:24:cb:39:f5:1b:39:56:89:
ec:13:4e:c5:4f:67:33:90:b0:ac:5d:08:2f:a7:21:53:9e:4f:
bb:76:13:c5:2d:0d:30:ce:27:f9:28:16:02:09:33:60:f5:36:
47:28:35:bd:0b:66:83:a2:09:e9:a6:95:e1:e0:fa:a0:4d:d3:
38:b2:fd:57:a6:39:c7:f3:b3:7e:01:06:9d:da:58:2e:9f:e8:
56:3d:10:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:29:24 2025 by rpki-client