Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/I-Ivi97cvhm7M_zhT8HbauOkDpA.cer
File: I-Ivi97cvhm7M_zhT8HbauOkDpA.cer (raw, json)
Hash identifier: Y33PmK7X3camc8VQyRazakfzMdTai9T221okYK26ucE=
Subject key identifier: 23:E2:2F:8B:DE:DC:BE:19:BB:33:FC:E1:4F:C1:DB:6A:E3:A4:0E:90
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942067F163B9277F624313688915D1D12E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:47:50 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 213.167.224.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:f1:63:b9:27:7f:62:43:13:68:89:15:d1:d1:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=23e22f8bdedcbe19bb33fce14fc1db6ae3a40e90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:5e:ff:4e:8b:79:85:f0:13:76:e7:9a:da:25:
b4:8e:ae:67:0d:7d:8c:4c:80:05:99:6f:c3:ce:2e:
b3:a6:d5:3b:b0:7e:a3:19:ff:9a:26:75:e4:54:3e:
89:f1:05:da:16:1f:fb:37:16:f0:02:f1:a0:7b:93:
92:18:64:d0:c5:32:c5:ca:65:7a:c9:de:0a:27:2b:
cf:fa:43:65:b7:70:e2:bb:7a:a8:2b:42:a0:a2:56:
61:fb:08:3c:83:e2:18:a3:3f:0d:1b:a9:6c:33:fd:
b0:45:e2:45:b0:52:8f:6b:2d:dd:60:14:07:a2:67:
92:e2:b5:41:cb:37:57:d2:f3:2a:ca:72:b3:53:63:
03:4e:00:80:6e:98:38:35:65:15:5c:be:f4:23:e8:
f8:9e:0a:85:c4:bc:03:7f:7a:57:05:f9:fb:17:71:
f1:64:68:c4:f5:3d:a5:15:13:1b:19:58:23:fc:fd:
f6:fe:9e:9d:5b:ad:d0:4e:f7:42:20:f0:d2:e0:f3:
e2:ab:97:b6:c8:5b:f5:a0:02:76:82:25:95:8f:dc:
37:00:ae:05:da:c4:16:3b:63:1a:24:58:14:59:65:
0d:c3:1e:85:95:56:5c:2b:6f:1b:37:bc:94:70:e8:
22:39:4c:1a:a8:9b:59:9b:30:09:e0:e7:91:44:c2:
38:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E2:2F:8B:DE:DC:BE:19:BB:33:FC:E1:4F:C1:DB:6A:E3:A4:0E:90
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.167.224.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:da:3d:5b:cf:2e:6e:4f:89:63:ab:c4:67:f8:77:ae:fd:de:
71:15:7f:64:b3:35:b2:f4:5d:6a:84:b7:f8:57:99:b4:f1:69:
a2:47:b4:2b:95:c3:12:48:78:e3:2b:ef:ac:35:5b:4c:b2:e9:
38:83:3f:67:a6:11:eb:18:ae:45:85:53:15:90:df:06:29:92:
b8:98:9d:c2:8a:84:a8:94:41:da:14:52:27:8b:0a:79:05:3e:
31:4c:fc:2c:08:65:7a:8d:68:68:7b:5a:1b:8a:31:35:e2:9a:
53:74:e4:c7:b1:a2:15:89:57:5c:00:44:d9:d4:63:5e:0a:71:
69:2d:18:1e:b4:b2:13:84:95:49:b0:c7:f4:60:38:92:38:6a:
8c:9a:21:22:17:cf:7c:f2:39:b0:b0:a2:86:b3:84:c2:9b:99:
ad:fb:ca:a3:44:f6:3c:80:47:8a:82:3e:ef:19:09:62:61:cb:
67:07:bd:7e:37:c8:f7:3d:94:be:fc:86:52:97:d8:ed:4d:3d:
08:59:eb:c7:5a:dd:f9:00:d9:d8:3e:86:71:32:f6:f4:e2:8a:
16:61:c4:a8:d0:5c:cb:c0:53:88:f6:11:f1:42:5b:a5:e4:25:
40:0c:72:5a:7f:39:9e:b1:c9:3d:48:98:eb:24:5b:40:ea:87:
a1:2f:f3:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:48:54 2025 by rpki-client