Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer
File: EsiJlks1tRuo5eZ5oVsZox8TNXg.cer (raw, json)
Hash identifier: uWdpNCiGWMFlqjcAwn3MRwBNRSz8KoxyePbz4GiNrI0=
Subject key identifier: 12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D5CA03513A4DE05172B61955BA2045
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:47:49 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 82.146.160.0/19
IP: 91.245.248.0/22
IP: 2a0d:b3c0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:ca:03:51:3a:4d:e0:51:72:b6:19:55:ba:20:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=12c889964b35b51ba8e5e679a15b19a31f133578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:08:d1:ab:d6:8f:43:7a:e9:aa:d3:65:37:08:
5e:5d:6a:eb:0b:27:ba:2d:d7:0e:11:8c:3f:2c:c6:
43:b6:53:15:7a:19:d4:a4:8a:6a:fa:1a:e0:cd:85:
ce:c4:04:8e:58:6f:27:e4:35:d2:f5:94:d7:f8:9c:
c7:68:6b:9a:88:f0:dc:81:09:c5:8f:34:ee:55:37:
33:a1:82:4e:64:4f:a3:63:d6:93:82:dc:e5:e0:a9:
b4:82:22:0c:19:c0:04:11:f2:43:a2:fe:75:c6:b1:
00:8f:46:a4:31:2a:ab:28:ac:dd:4c:71:80:d8:25:
cb:5d:df:aa:2f:3e:26:3c:9a:2b:3e:82:e5:31:e6:
52:21:2b:1e:89:80:df:cb:44:06:49:05:7f:dd:50:
31:28:fa:eb:79:aa:59:17:7b:3a:9c:20:de:a0:70:
f5:14:04:59:c6:5a:56:fa:a4:97:24:4b:c0:8b:ef:
c9:88:23:d0:be:9e:7f:11:ed:75:c2:9d:b8:de:4d:
9a:91:30:5f:2a:8a:82:ad:90:d0:32:da:bb:09:ed:
e4:90:60:61:f5:bb:ff:1b:7e:d1:ad:7b:5d:cf:e2:
0d:3f:26:85:ee:7a:fe:1f:2a:eb:dc:19:27:7c:2e:
6d:58:e2:95:a4:39:ae:d1:84:3f:60:1d:9e:16:4d:
e6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.146.160.0/19
91.245.248.0/22
IPv6:
2a0d:b3c0::/29
Signature Algorithm: sha256WithRSAEncryption
02:b5:82:59:a5:31:56:db:8c:2d:60:5a:76:79:4c:8f:8c:84:
8d:0a:67:f8:ff:65:89:fd:24:b8:d4:2a:db:04:4c:da:b0:30:
3f:cb:92:c4:b6:db:5c:5f:9f:cb:d7:a7:27:f1:f0:4e:e0:49:
54:c5:6d:86:b1:e3:30:55:5d:e5:a1:1f:88:db:6b:1a:35:36:
5f:62:99:e4:f7:37:bb:f4:a3:61:53:e3:b9:83:14:ae:f6:b6:
76:43:7e:fc:9a:5c:8c:92:d3:9a:3f:3d:eb:e8:42:0a:9b:5d:
b6:ae:b3:fe:1a:1c:14:d5:34:c1:0d:3b:a0:c2:9d:5f:42:0c:
b2:50:ae:cd:32:37:50:61:d3:6a:8b:79:86:ba:72:f5:c3:e8:
ce:63:f9:37:2a:b6:43:a9:e1:0e:48:d8:97:91:76:ff:b0:11:
0e:f5:34:bb:f4:26:21:95:c9:89:13:8c:37:cb:c1:cc:89:5b:
ee:29:67:8f:b1:6d:7e:cc:b7:14:ea:3c:7b:c0:86:c8:6e:9b:
f0:1f:f6:d9:ab:43:38:c2:df:0e:cd:90:e5:a0:39:5a:d5:cd:
77:74:11:05:91:c1:89:f3:9f:c1:2c:1a:3a:a8:d7:d2:6f:8e:
54:c1:c8:34:8a:26:30:a1:cf:a4:e9:a1:f4:b3:d3:f1:c5:9b:
58:b4:89:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:43:07 2025 by rpki-client