Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DtjJoWGXLWi0RTPg4x9R5NzlunU.cer
File: DtjJoWGXLWi0RTPg4x9R5NzlunU.cer (raw, json)
Hash identifier: QtMRKJUPSCtD76RwKtAb3ByXhqNzVkY8rMM57VLNNys=
Subject key identifier: 0E:D8:C9:A1:61:97:2D:68:B4:45:33:E0:E3:1F:51:E4:DC:E5:BA:75
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D6F89E480B861F06528511AA5B1E3D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:47:58 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.35.72.0/22
IP: 2a04:6380::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:f8:9e:48:0b:86:1f:06:52:85:11:aa:5b:1e:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0ed8c9a161972d68b44533e0e31f51e4dce5ba75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c4:0c:cb:a3:8e:4f:fa:0a:66:84:cf:c5:fb:
d8:a4:65:50:c1:ad:24:bb:ac:28:25:bc:f6:95:2d:
53:c6:1a:6d:e4:ab:08:a7:ce:4a:7b:24:3b:bb:c4:
35:cf:cc:5d:c0:94:d0:a5:5b:f6:87:52:9b:0e:ad:
b7:6a:8f:8f:5a:94:b8:ef:6f:41:ea:1c:2c:12:0c:
0c:a8:0b:6a:7f:b1:a7:4f:27:2a:6c:f5:5a:a6:27:
4f:d6:88:8c:c0:b3:1f:d7:6a:11:ae:88:db:cd:f0:
c4:64:7e:f7:2e:f5:03:86:29:fb:df:cd:5a:7d:de:
f5:c5:33:e8:55:d2:09:02:78:ff:b4:52:ee:b8:5c:
df:45:22:b6:e5:f3:01:3a:d1:51:5c:9a:db:71:c5:
65:f2:1c:9d:cf:98:c3:4c:e4:d8:d8:3a:81:91:78:
89:59:f8:6e:c4:e4:3f:bf:2a:61:4f:64:f0:66:d5:
73:d0:64:1c:b4:5a:a7:f2:ff:75:40:e8:f4:51:e7:
59:72:b3:f4:86:f9:6a:8b:ea:64:90:3d:bf:97:bc:
43:d2:26:0f:08:5f:5f:02:90:ef:d0:59:90:3e:76:
10:15:0f:70:6e:00:4c:29:0c:eb:1b:da:57:19:a2:
97:35:06:da:e0:89:44:b1:53:5d:c5:9e:d6:e6:33:
35:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:D8:C9:A1:61:97:2D:68:B4:45:33:E0:E3:1F:51:E4:DC:E5:BA:75
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.35.72.0/22
IPv6:
2a04:6380::/29
Signature Algorithm: sha256WithRSAEncryption
05:31:0f:81:0a:dd:55:15:38:30:88:8b:0c:36:8d:5c:86:db:
56:f9:91:14:27:52:46:56:cc:6b:f4:e3:19:e7:04:7d:10:77:
e1:53:58:c6:e6:df:00:59:d3:c6:3e:83:21:78:7a:6f:91:70:
7c:94:0d:96:40:3d:4e:63:8f:6d:bc:8e:37:81:3f:c7:e8:51:
b8:cc:d7:37:01:6c:a4:49:b8:ce:0e:38:9d:1d:f4:91:bb:21:
c3:52:83:07:f2:44:bf:5c:c5:d5:3c:51:21:25:63:1a:a4:7b:
96:31:4c:74:9c:3e:05:82:9c:a7:c3:6d:1e:46:f8:72:66:df:
c0:f4:3a:9b:7e:9a:3e:7e:61:cc:e8:1e:14:bc:02:cc:0a:3e:
7c:82:18:b4:84:c1:e8:9e:ca:cf:29:f8:aa:aa:a9:8d:d6:b0:
cb:65:57:0d:13:84:d7:30:b7:f4:ae:82:c0:c3:56:68:42:a5:
c0:72:84:73:f7:f9:6b:a9:96:2a:a1:a1:94:54:ad:b6:e6:f1:
91:c3:d8:0f:38:c8:ef:97:ea:2c:df:9c:a2:b2:4a:c5:77:35:
ea:90:9a:2d:8f:e4:11:9b:1f:9c:dc:46:78:d3:90:4f:23:f1:
3a:8a:ce:0c:65:1b:1d:55:b6:28:f1:e1:f2:0d:3e:05:5f:d5:
48:fe:52:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:08:26 2025 by rpki-client