Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EXA1YTWt9H7ZcIywoTaAiUwjOeo.cer
File: EXA1YTWt9H7ZcIywoTaAiUwjOeo.cer (raw, json)
Hash identifier: T3n+izqQ7FMBD/J1zpWk29DlYe9t1DhY6+QnafEUqnU=
Subject key identifier: 11:70:35:61:35:AD:F4:7E:D9:70:8C:B0:A1:36:80:89:4C:23:39:EA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942748224B2C3185AED0F38373275101C4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:50:26 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.192.14.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:22:4b:2c:31:85:ae:d0:f3:83:73:27:51:01:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:50:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1170356135adf47ed9708cb0a13680894c2339ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:1f:99:d7:40:f3:03:75:a0:e2:e4:45:84:f6:
0d:e3:f5:9c:d0:97:ad:3c:59:ab:6e:c3:1e:cf:25:
c3:b4:6f:ba:1a:14:b1:f5:83:ff:dd:10:fe:3b:d4:
bf:10:45:a4:94:eb:5d:c2:4f:0a:47:76:15:05:51:
54:16:b0:e3:bb:59:e0:55:7b:6e:aa:d5:43:8d:15:
15:de:1b:c4:8d:67:39:b3:ea:25:26:d3:bf:f5:15:
f9:8d:0b:4f:d3:78:a3:7d:f7:33:72:0f:89:71:5d:
a8:80:6b:14:08:c2:3b:4e:15:51:b1:77:dc:73:e9:
81:9a:5c:d0:1f:b6:a4:c5:42:60:95:f3:82:39:ac:
73:75:b5:e0:e0:8c:06:81:ae:da:b9:9f:dd:d3:9b:
c5:64:43:aa:f8:b2:69:8b:5e:e6:d0:01:d3:de:98:
c6:68:e6:3f:6e:7c:c2:01:ea:8c:2f:e8:67:84:c6:
bb:8d:a4:cf:f5:77:4b:28:b1:e7:ad:0e:83:7d:be:
ab:c0:fd:d3:0c:66:0a:b8:e9:3d:ad:a8:5a:d9:19:
74:73:cb:a6:61:05:b8:a5:34:ed:77:aa:45:a6:51:
dd:a3:44:d2:78:5d:9a:7f:57:3a:31:40:96:f5:ff:
36:4f:c0:e0:ec:5a:aa:a3:8a:a2:91:21:d5:f6:c3:
b7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:70:35:61:35:AD:F4:7E:D9:70:8C:B0:A1:36:80:89:4C:23:39:EA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/c8b40c-2c0b-47ff-b921-e631463b123b/1/EXA1YTWt9H7ZcIywoTaAiUwjOeo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.192.14.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:56:56:11:03:0d:7a:4b:77:2e:aa:17:0d:07:95:97:d4:c4:
83:81:ee:32:fc:7d:38:ee:53:f1:f9:20:ab:1b:e6:e7:91:81:
f9:88:aa:74:3d:b9:d4:99:f2:06:e6:d0:f5:71:cf:60:c0:fa:
bc:ef:b4:fc:29:d1:7f:57:b9:e9:db:6c:83:bc:19:9d:0f:79:
9e:79:c9:67:a1:15:35:36:95:2f:f0:fb:20:67:ac:42:9b:86:
6f:46:5c:8e:82:fb:f9:5e:b9:6f:8c:c8:14:a8:c5:aa:b7:42:
e4:ab:88:2a:cc:e2:47:8e:68:ef:1e:5e:9d:b1:ab:98:05:70:
96:fd:61:a7:3e:1f:3e:87:7b:93:67:a7:25:00:8b:ab:1a:1d:
54:ed:7d:fe:8d:76:f3:0d:81:6f:7c:70:b5:60:00:1e:f4:f9:
13:e0:8f:c1:c8:3d:eb:06:b8:db:c5:99:88:76:a8:4a:04:95:
f7:c5:68:20:ef:29:82:12:e3:76:32:eb:35:f0:56:68:de:af:
e2:9f:d1:57:c7:0b:36:df:a5:4b:df:71:d7:23:4f:93:15:90:
e9:0b:49:af:d5:6e:2c:65:d7:1d:1f:66:01:3e:59:04:e1:bd:
5a:d3:f3:b9:61:34:e6:c7:8f:ef:5e:54:25:62:a6:7e:d4:3a:
f2:71:92:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:37:08 2025 by rpki-client