Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IYbEbjsYJreC0j5jBOUPEwFJT8c.cer
File: IYbEbjsYJreC0j5jBOUPEwFJT8c.cer (raw, json)
Hash identifier: o3h1DeZ3R7rAZSxCG6kVlX1XnKj/xbqQFX4FxUJ4EOU=
Subject key identifier: 21:86:C4:6E:3B:18:26:B7:82:D2:3E:63:04:E5:0F:13:01:49:4F:C7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B60CA20210A2AC5D9A89F14C0BED2F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b5/474016-6bf2-40b2-9ba7-27ce85ef7477/1/IYbEbjsYJreC0j5jBOUPEwFJT8c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b5/474016-6bf2-40b2-9ba7-27ce85ef7477/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:50:29 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.30.127.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:0c:a2:02:10:a2:ac:5d:9a:89:f1:4c:0b:ed:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:50:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2186c46e3b1826b782d23e6304e50f1301494fc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5d:66:fd:18:8f:a8:7b:df:d8:e4:c7:8a:ce:
25:54:96:9c:ce:5c:2b:12:14:44:f3:38:36:d9:e2:
c2:1b:cf:2d:ae:3d:ad:43:86:3c:98:1f:5f:41:0c:
19:d6:43:3a:f4:bd:23:70:d3:d5:85:67:14:e9:12:
5b:06:9c:f6:fe:bc:74:4a:f2:0a:82:0e:5f:c9:3f:
e8:1c:2c:8d:b9:0e:35:01:e1:33:5e:27:5a:12:fc:
17:43:cf:9c:56:1c:4e:24:95:29:84:f2:a7:bb:1b:
8a:72:c2:c5:b6:e9:00:3a:36:42:94:3c:51:d7:b7:
b0:ef:c3:6f:84:d0:ed:f3:04:57:05:17:fb:8b:18:
26:cb:74:35:ef:a6:0a:9a:ab:1c:7e:c2:63:62:29:
bd:0b:b3:f8:9b:55:e0:8c:4a:32:ab:0b:b0:ed:20:
2b:cd:ca:92:b2:79:58:68:05:41:bc:6c:c0:73:5d:
37:cc:5f:49:70:58:20:80:4f:34:d2:1a:ae:bf:d8:
7f:5b:86:16:02:bf:6c:a1:63:f1:63:69:71:bb:54:
2c:4d:fd:08:42:99:e3:5c:e0:b9:c2:26:01:ac:96:
8a:f3:0c:94:f1:c1:b3:1a:d0:14:d1:89:5d:d9:55:
f1:11:a1:34:84:21:35:b7:dd:11:c0:dd:ae:9f:54:
d8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:86:C4:6E:3B:18:26:B7:82:D2:3E:63:04:E5:0F:13:01:49:4F:C7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/474016-6bf2-40b2-9ba7-27ce85ef7477/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/474016-6bf2-40b2-9ba7-27ce85ef7477/1/IYbEbjsYJreC0j5jBOUPEwFJT8c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.127.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:71:74:0e:87:a5:cf:5c:6d:8b:b4:a0:76:60:b5:4c:35:18:
b7:23:8f:0d:07:6b:e9:55:b0:b7:46:ac:b9:29:b1:f5:89:a3:
13:b8:91:23:b4:09:be:fd:be:9c:bc:44:ee:2c:f8:36:0d:98:
ea:99:1c:1d:c0:a8:3a:37:88:da:6e:20:a9:1c:f6:fd:0c:a3:
57:a5:3d:89:88:76:0c:59:9e:82:7a:36:c4:62:b0:d3:57:21:
4c:55:20:1b:90:b4:51:20:a0:34:4c:de:bc:7e:96:c6:e8:96:
fb:f5:dc:3d:0a:d7:e5:e9:6b:46:dd:65:bc:9a:4b:c3:1a:eb:
1b:d4:2d:68:1a:b8:b0:80:13:c0:dc:ee:ca:73:1b:f7:4b:4c:
3d:32:8d:4c:67:1c:d7:5d:79:75:f0:72:c8:b2:36:99:20:40:
7e:68:95:0c:cd:b6:c8:ea:70:01:d8:b5:68:2c:13:74:19:85:
33:8a:c9:b1:30:27:83:88:87:b0:36:97:8d:7c:f8:f3:5f:33:
e9:ea:67:36:ab:fa:f9:16:3c:42:45:0d:ba:fe:8d:43:bc:e8:
a1:f5:e2:fb:02:b0:f9:91:5c:db:fe:0f:93:ce:c4:83:b3:01:
22:15:ed:7c:6b:58:d8:71:2e:a4:8f:d1:99:a4:02:2c:05:63:
3d:b6:46:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:09:20 2025 by rpki-client