Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Dchx21CYv4OP_qmaAvZ5Nos-GrI.cer
File: Dchx21CYv4OP_qmaAvZ5Nos-GrI.cer (raw, json)
Hash identifier: wjRhBbJio0v7l2Xa63H8GQ5IVajaB5ypYoxfUIYtj9A=
Subject key identifier: 0D:C8:71:DB:50:98:BF:83:8F:FE:A9:9A:02:F6:79:36:8B:3E:1A:B2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFAB03DB6E335C3890A9387B8F5234D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:48:30 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 212.162.144.0/22
IP: 2a09:d400::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:b0:3d:b6:e3:35:c3:89:0a:93:87:b8:f5:23:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0dc871db5098bf838ffea99a02f679368b3e1ab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:dd:39:bc:a7:93:b7:2b:ae:04:f2:8b:7f:c2:
0f:09:56:79:d8:ab:e0:5d:f9:89:d2:ca:98:06:ec:
05:1d:c1:1c:96:f5:34:76:16:90:f5:16:95:db:cd:
b9:c6:35:90:c2:7b:ee:ae:35:ca:3c:dc:ad:60:a1:
e5:e5:97:1d:a9:d4:6a:70:e0:aa:eb:a2:53:96:b5:
d7:90:a2:27:8b:bd:ef:22:38:8b:c1:98:79:4d:11:
16:4d:7c:ba:e3:eb:61:77:e1:0f:66:7b:8b:aa:2e:
db:0f:cd:f2:58:d1:09:2f:1d:ee:5d:37:46:ce:de:
3e:ac:34:f4:be:33:15:50:b5:37:24:45:f5:fb:21:
00:19:57:a4:3b:9d:41:fd:bd:6e:52:51:4e:b9:39:
70:40:63:89:f4:1a:be:af:0b:a0:21:69:fa:6b:c4:
de:9c:68:54:a7:9d:ce:93:1c:3c:94:b9:37:a1:2a:
2d:89:ec:5e:2e:0b:3f:77:9c:76:33:8f:52:20:89:
95:e9:aa:62:df:ab:55:8b:e1:92:bf:88:c4:3a:3b:
d0:0d:b4:f5:7d:ee:1c:b8:24:8d:31:ed:b4:3a:dc:
79:34:e9:f3:bc:63:bb:4a:c4:27:b7:03:64:8e:ee:
66:04:69:6c:13:a7:3d:ae:cb:5c:c5:ed:dc:7b:66:
73:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:C8:71:DB:50:98:BF:83:8F:FE:A9:9A:02:F6:79:36:8B:3E:1A:B2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.162.144.0/22
IPv6:
2a09:d400::/29
Signature Algorithm: sha256WithRSAEncryption
35:c5:25:f2:45:2f:f1:16:1a:a6:18:14:40:3d:ee:58:45:f1:
ef:85:21:0f:7a:aa:01:5e:9c:08:f5:31:b2:91:00:a9:5d:07:
f8:43:41:37:12:f3:77:fd:a5:38:86:25:e2:a9:72:ef:0d:19:
da:6e:11:3d:40:1d:f7:42:5e:dd:54:1f:f7:3f:5a:8a:f3:fb:
61:e9:d1:d3:0b:19:21:3a:ca:01:c3:ac:5a:bd:1d:37:f8:32:
94:88:cf:16:8d:ff:e6:05:d5:27:37:89:67:ce:f7:7e:88:ec:
58:6e:04:ff:b2:e2:cf:d4:c1:50:3f:08:42:52:7b:32:ac:ec:
7c:cf:73:d8:fb:72:8f:e7:95:4a:f8:6e:06:c6:22:64:79:c5:
6f:32:22:fc:00:d7:dc:ae:57:3d:78:b3:a1:25:55:32:0a:fe:
f3:b2:ce:ed:24:89:56:ea:d1:67:e9:a3:a4:29:3f:fd:d3:2a:
9f:8a:95:ea:65:9b:0f:2b:fc:3a:0e:9f:ed:1a:16:9a:6f:e0:
11:47:11:5d:e2:34:26:aa:84:63:2b:92:04:53:ae:a6:52:d7:
63:3e:88:0b:b0:63:0b:bc:e6:51:3f:db:e2:52:f7:6d:d7:44:
e6:9d:d8:46:5f:56:27:e4:89:fa:08:b2:36:93:16:f9:71:78:
14:7e:0a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:37:00 2025 by rpki-client