Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ez3u2IPCppDOVIKbSPnXjNeyX9c.cer
File: Ez3u2IPCppDOVIKbSPnXjNeyX9c.cer (raw, json)
Hash identifier: ERVYwX5R/UkcPyjxU9ae4XSPVa65yfe1G6yAnkU/KjA=
Subject key identifier: 13:3D:EE:D8:83:C2:A6:90:CE:54:82:9B:48:F9:D7:8C:D7:B2:5F:D7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194206847642199EDBE5D22C8DDAD4ABCD6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:48:12 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 89.28.144.0/21
IP: 185.94.220.0/22
IP: 2a01:58c0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:47:64:21:99:ed:be:5d:22:c8:dd:ad:4a:bc:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=133deed883c2a690ce54829b48f9d78cd7b25fd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:50:53:cb:d0:4b:b2:bf:ca:a9:46:a5:2f:d8:
60:98:cc:11:46:fc:4c:46:59:32:b1:b0:0c:c7:8b:
3b:7e:f4:e1:c9:e6:5c:6e:58:ec:ea:56:db:1b:bd:
f9:8b:4c:e9:ca:ab:77:c5:79:58:64:5e:cf:b3:87:
6b:bd:be:28:09:39:93:af:cb:42:54:19:25:d0:03:
5a:8e:4a:9d:a4:e5:c9:3a:95:e8:21:86:2f:4f:d7:
93:96:5e:1d:ec:9c:1a:d1:6c:9b:6e:04:c3:40:22:
d4:a5:ab:ba:a7:0e:9b:d7:ff:86:a8:d9:33:1f:06:
a8:fc:94:33:7d:6b:43:92:a3:22:b1:61:39:e6:60:
c7:a1:44:aa:43:85:8c:24:ad:36:ed:cd:80:c5:87:
2a:d1:ca:4b:11:b7:a6:60:a8:9c:4e:ec:86:94:9f:
59:3e:3d:5f:ea:8d:e0:24:f4:a7:8a:2e:ca:f4:72:
34:f7:38:32:78:51:d6:33:de:e7:c9:b1:50:84:ba:
4b:ca:ce:05:fd:08:ae:92:ac:22:c8:4d:c3:2b:67:
48:12:a7:c5:bd:f1:69:95:c7:7c:7f:0e:e7:b7:a5:
3d:8d:5c:a9:9f:da:c1:d7:c1:03:ea:93:4e:e0:9f:
8d:cb:86:ca:e4:fa:06:3e:95:02:da:58:ed:ab:c3:
66:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:3D:EE:D8:83:C2:A6:90:CE:54:82:9B:48:F9:D7:8C:D7:B2:5F:D7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c44409-a65d-4b8a-bfea-4bedd3bd6ea1/1/Ez3u2IPCppDOVIKbSPnXjNeyX9c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.28.144.0/21
185.94.220.0/22
IPv6:
2a01:58c0::/32
Signature Algorithm: sha256WithRSAEncryption
3d:a7:8c:ea:35:7a:b8:90:47:91:e5:89:d0:45:42:8e:69:c2:
38:77:28:63:3e:3f:25:75:b4:ec:9a:3e:3d:11:fd:a7:26:ac:
0f:39:e2:c4:78:9c:1e:45:93:36:98:60:1d:39:10:c1:a0:c4:
18:8a:54:b3:e8:37:0b:9d:87:61:fb:80:78:37:f5:23:9a:91:
bf:fd:29:2e:fd:67:72:d0:72:c2:58:ba:d6:b5:14:82:8c:bf:
52:25:d1:5a:a7:7b:d3:b6:59:32:3c:2e:eb:e2:6c:f7:ca:1b:
1a:d6:a5:7e:09:57:cb:ee:9b:e0:6c:2f:1c:bc:ee:2e:84:a4:
57:9a:c9:89:0a:eb:6b:c5:f0:53:c7:e8:d0:6b:cb:37:3f:28:
14:c3:ed:10:91:ef:fd:96:5f:be:f3:00:39:20:c4:46:ec:27:
11:07:c7:6e:d8:14:db:83:ca:fb:cc:3c:e6:11:62:80:bf:19:
42:23:56:49:a2:0e:b5:2c:f4:0a:4f:af:b0:87:e8:3b:9e:f1:
d3:72:84:5e:dc:95:77:ac:d7:68:70:df:e6:37:fb:98:af:74:
cb:2b:a9:82:9a:27:ec:2d:2c:a1:f0:a7:17:ec:7d:a6:ce:f5:
49:8a:fb:ee:55:1d:b2:5a:c3:27:e8:3d:fb:71:b9:f5:e4:bb:
59:96:25:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:46:25 2025 by rpki-client