Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IY2yiCPzcIslWqEkum73QdET6vM.cer
File: IY2yiCPzcIslWqEkum73QdET6vM.cer (raw, json)
Hash identifier: JAkaRd4cAykn88h/NgSrlg3J7v3Q3rv1540/9Dxq1zo=
Subject key identifier: 21:8D:B2:88:23:F3:70:8B:25:5A:A1:24:BA:6E:F7:41:D1:13:EA:F3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425221E5213445E0E75F126A7826DB751
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/41/75211e-3619-425f-babd-79dc3d0bbed8/1/IY2yiCPzcIslWqEkum73QdET6vM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/41/75211e-3619-425f-babd-79dc3d0bbed8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:49:40 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.48.184.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:1e:52:13:44:5e:0e:75:f1:26:a7:82:6d:b7:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:49:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=218db28823f3708b255aa124ba6ef741d113eaf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5c:5c:54:d6:5e:38:3c:d5:88:ac:be:16:39:
32:60:94:b6:cf:28:fa:7b:8b:15:7f:5a:79:f1:1d:
8a:11:6d:b3:70:7a:b8:5c:3b:ec:e5:90:ba:0f:50:
fa:76:91:92:f5:86:47:7b:60:a4:00:3f:32:44:5b:
25:68:05:9e:d3:f0:55:54:9e:2d:94:30:a2:a8:50:
04:49:c7:23:ea:11:84:ab:f3:b5:57:ae:8d:a3:03:
19:d3:77:20:6e:45:ce:54:1b:a4:b9:a8:62:4b:20:
f0:4c:a1:43:1d:a6:99:1c:50:14:06:df:46:69:20:
ee:bf:7a:0d:ab:3b:7d:19:fd:8a:d9:92:20:87:d8:
40:3d:a1:98:44:92:b6:c3:d9:fc:2c:6d:4f:d0:60:
7b:d8:5a:85:cf:9d:1d:18:32:03:76:fa:2c:e6:b2:
f7:01:34:a2:ab:df:11:53:67:4d:f0:8c:dc:73:3a:
93:b0:51:28:97:70:5b:5d:de:fc:2a:24:12:41:df:
29:1c:42:35:60:ec:c1:06:d0:5e:1d:bb:f3:64:52:
2a:ce:f0:2a:b2:fa:81:33:14:fe:df:70:ad:ec:ab:
39:ce:64:c2:b8:4f:e9:5d:59:65:50:08:8a:9d:45:
eb:13:23:90:f6:2f:b4:28:8d:d1:10:b1:6b:83:ba:
d3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:8D:B2:88:23:F3:70:8B:25:5A:A1:24:BA:6E:F7:41:D1:13:EA:F3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/75211e-3619-425f-babd-79dc3d0bbed8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/75211e-3619-425f-babd-79dc3d0bbed8/1/IY2yiCPzcIslWqEkum73QdET6vM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.48.184.0/22
Signature Algorithm: sha256WithRSAEncryption
20:85:d7:44:00:fb:4e:2c:c3:67:8a:1b:c9:c2:45:93:a7:9f:
a8:de:ec:87:bc:3b:cc:2b:32:9a:77:d3:85:3f:5f:6f:95:25:
a1:e0:3c:c2:55:31:2a:11:66:1b:aa:16:2f:69:3a:8c:66:b8:
b4:c5:eb:ca:e6:37:b4:2b:a1:39:c4:5c:61:52:ae:5b:1b:e3:
0c:84:5c:60:3e:cb:32:eb:a9:c3:21:51:39:87:53:4c:ed:26:
72:a7:97:5c:c8:07:c5:9f:e2:b2:ea:ef:5f:c9:33:04:94:97:
ba:72:e4:f9:13:6c:e8:a7:51:35:fd:d8:14:de:ef:42:44:c2:
27:e9:ab:1f:96:a9:b2:c3:1f:97:8f:4a:7c:82:19:2d:cb:e4:
27:3a:23:61:4f:f7:70:75:7b:7f:3f:78:f3:78:cf:70:62:67:
91:a7:cc:c7:5b:61:32:81:f1:3a:23:e2:58:d3:c1:b5:1f:db:
61:09:18:d7:a9:1e:6a:b9:20:49:3c:d3:39:46:4c:9a:56:f4:
c6:45:f3:af:d5:6b:b1:7a:0e:6f:4b:d8:08:90:98:64:8b:ab:
43:52:31:fd:aa:98:ea:c0:cf:74:29:9a:00:75:fa:16:d4:56:
aa:27:cc:73:36:e3:13:4a:b3:46:20:11:ca:bf:5a:79:7f:d3:
c3:e5:2c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:54:33 2025 by rpki-client