Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.cer
File: EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.cer (raw, json)
Hash identifier: GkEH6OVOULCMSPg2U4Im1ZVL7og3xHMK3w6IJzLtTo4=
Subject key identifier: 11:71:64:1F:15:7C:B5:7B:53:26:26:35:9E:71:58:27:42:C2:DC:CB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C8DE38FC1E5FADB3B7869CF325E40
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:48:12 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.28.86.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:8d:e3:8f:c1:e5:fa:db:3b:78:69:cf:32:5e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1171641f157cb57b532626359e71582742c2dccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:65:25:ce:32:1e:07:50:3c:3e:be:33:0a:a9:
ef:a5:78:1e:8d:15:78:28:ef:4e:12:9c:54:5b:ee:
f0:87:74:0b:8b:a6:fb:7d:91:6f:8e:2f:ec:51:55:
cb:9b:2a:75:2b:cd:cc:54:c8:bf:82:b0:18:29:44:
9c:78:7b:4c:95:da:30:99:4b:00:4d:45:c8:fa:c1:
7d:23:b3:19:ef:dd:c4:e1:ec:0b:a8:2f:8d:9f:56:
1e:30:48:a0:47:11:81:91:10:b2:4a:b5:f5:15:cb:
e7:6b:7a:c3:44:66:d6:d6:f9:20:50:46:c5:f4:31:
43:ec:f6:74:59:e9:e2:34:f1:40:2f:57:79:f0:4a:
2f:53:08:18:cb:fa:69:de:f1:91:ae:58:e0:39:b7:
f0:cd:eb:81:2b:0c:16:5c:3b:34:c5:32:a4:9b:a9:
09:9b:9e:6e:fb:68:78:18:57:09:9e:38:90:5f:20:
41:d5:a8:97:5d:6f:00:46:6b:24:3a:60:67:7d:40:
6c:44:66:e2:08:e2:b2:eb:94:f2:50:d4:7f:0a:15:
11:f8:0b:4c:45:5c:09:26:f4:77:9f:49:87:8a:c2:
08:55:23:4c:6b:e6:e9:6b:55:04:6b:72:61:4a:d0:
4c:b7:c2:c1:f6:0f:30:52:d3:3c:88:e4:8e:11:c9:
1d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:71:64:1F:15:7C:B5:7B:53:26:26:35:9E:71:58:27:42:C2:DC:CB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.28.86.0/24
Signature Algorithm: sha256WithRSAEncryption
11:b9:d3:6e:ff:7d:bc:9d:55:fd:f5:f3:0a:57:fd:6c:3b:ad:
ed:56:ef:2a:0e:a8:f7:6c:20:3b:fb:c5:79:55:06:a4:8d:c4:
9f:3e:f1:77:33:c6:bd:c2:33:89:37:29:b0:f7:f7:8e:ed:a2:
b1:fd:33:91:68:a2:f5:20:41:c3:d5:62:0b:f1:56:a9:0b:b8:
0b:14:ca:e6:95:cd:e3:e0:4b:f0:3b:f2:73:53:59:5c:ae:c7:
71:e1:cd:39:c2:b0:1b:6a:c2:b0:c0:41:1d:8d:6e:94:67:c7:
c7:32:42:04:40:16:ca:89:56:f6:da:8a:c9:39:62:fb:bd:23:
49:1d:d5:15:1c:4a:12:b9:8c:cf:d2:87:0d:db:1e:f1:11:a7:
84:7e:89:d8:ef:80:5e:e2:f0:d1:94:67:e7:cf:4f:ed:17:34:
12:90:76:b5:6a:09:55:8e:89:53:d6:9b:82:26:8a:cc:ae:06:
e6:d1:79:5b:f5:c7:2e:82:e5:15:66:49:9b:4d:f4:f1:dd:a4:
56:2d:fa:48:39:1d:f0:d2:58:7f:c3:09:93:74:59:81:a9:53:
f7:06:bd:4c:6c:9b:c6:a8:31:f7:f5:23:47:d8:6f:9a:5f:04:
d1:64:96:40:6f:de:52:c2:a7:1f:e5:eb:e1:1e:02:15:be:66:
de:29:97:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:36:37 2025 by rpki-client