Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/E1FVzr-d4Mtz5AoPoKGrTc8dCco.cer
File: E1FVzr-d4Mtz5AoPoKGrTc8dCco.cer (raw, json)
Hash identifier: ikRjZ+1Fe3eHRVYLAX9tPQcsBtpXFZ02Azo0sFJLTmQ=
Subject key identifier: 13:51:55:CE:BF:9D:E0:CB:73:E4:0A:0F:A0:A1:AB:4D:CF:1D:09:CA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B23EF9E6A26B98FD39763620E0B55B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:37 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 130.251.0.0/16
IP: 192.148.193.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:3e:f9:e6:a2:6b:98:fd:39:76:36:20:e0:b5:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=135155cebf9de0cb73e40a0fa0a1ab4dcf1d09ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:87:46:50:fd:a3:c3:ac:1b:24:c4:c5:b8:c9:
fc:34:f7:18:09:6b:a8:ad:6c:53:db:44:87:0b:73:
29:2c:e0:16:11:df:c4:8d:17:9f:d2:1a:9c:1d:b7:
c6:e7:e0:f8:a0:a4:77:41:15:4e:90:d3:c9:ed:53:
80:47:c6:09:72:cf:b7:0d:06:6b:95:f9:39:66:21:
51:6d:14:6f:78:fd:f1:99:29:2c:65:6b:c3:87:14:
76:c0:88:09:d0:b9:e8:9b:e4:e7:a1:99:b1:28:08:
2d:df:2c:8e:90:0a:f5:9d:aa:a1:a5:1e:62:0b:41:
0d:78:b7:79:e7:ff:ff:fe:e2:46:fb:fd:2e:9e:7f:
d9:37:37:05:c1:fe:bc:cc:3e:51:07:8e:65:55:3b:
43:24:3f:40:70:98:db:16:ac:56:c5:af:6b:b8:1b:
32:fa:27:6f:2d:ba:74:aa:25:0e:fb:53:08:63:44:
25:5b:94:47:79:5d:42:8d:8c:aa:5d:b4:cf:e1:83:
d2:b7:07:61:46:a0:e4:e3:ff:ea:5f:9a:13:15:ff:
b7:de:20:ee:52:01:2a:c0:1a:b7:9c:f7:21:23:7a:
96:e3:21:80:d6:8c:5c:2a:52:74:b4:8c:b7:58:fc:
7c:a1:6b:a8:58:cb:5f:06:29:9e:7b:ba:53:5a:b4:
5f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:51:55:CE:BF:9D:E0:CB:73:E4:0A:0F:A0:A1:AB:4D:CF:1D:09:CA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.251.0.0/16
192.148.193.0/24
Signature Algorithm: sha256WithRSAEncryption
69:9e:7f:55:e6:97:87:6a:c6:a4:b4:45:e8:52:6c:83:6e:6d:
a0:fb:a1:a6:84:b7:88:f8:81:94:28:c6:da:8d:e3:57:c9:a1:
6f:94:c0:54:e6:e5:85:98:a5:6e:30:90:97:47:af:8a:7a:04:
80:14:d1:ba:4a:70:99:8e:6b:35:a0:22:2f:e4:c5:e7:16:0f:
73:73:fa:a0:6a:12:e9:0b:17:78:37:89:a9:b6:88:41:a2:6b:
0d:78:f5:79:bd:65:5a:fc:f5:cc:36:b8:90:04:de:8e:41:e7:
ac:2d:5d:1f:79:d3:ee:f8:03:18:9f:3b:6f:ca:28:e4:2f:c5:
ab:8e:a1:88:2d:46:5a:08:ae:ef:1a:e5:e2:87:84:3c:f0:5c:
fa:28:fa:b1:8c:28:43:fd:8e:c0:ec:9a:2c:8e:4e:d4:d4:91:
ee:2e:1e:51:13:91:a4:1e:ac:61:f9:20:ec:c7:fa:ff:37:90:
2d:fb:51:08:a4:10:ae:59:f1:13:12:d9:92:6a:5b:76:0d:f3:
20:ec:6c:4d:33:07:84:e7:bd:e0:f7:27:9d:93:d0:2e:0c:d3:
5e:37:75:38:4f:3e:47:19:24:92:4d:0b:9d:5a:0c:79:fe:51:
7e:6a:29:cf:a3:a1:95:b0:cd:98:c9:90:49:ba:dc:c7:9a:13:
e9:19:f9:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:46:00 2025 by rpki-client