Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/K33FrWYAWqG23GCT-xHzWBp5UzU.cer
File: K33FrWYAWqG23GCT-xHzWBp5UzU.cer (raw, json)
Hash identifier: M/xHwYgJm8zddZl91tsAytPZ0nrp95w/uea2gRnUUSY=
Subject key identifier: 2B:7D:C5:AD:66:00:5A:A1:B6:DC:60:93:FB:11:F3:58:1A:79:53:35
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B2910546AE7CAB0E1FBD53A032E80B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/13/0689ab-d8e4-4a4e-8793-481d075e62c3/1/K33FrWYAWqG23GCT-xHzWBp5UzU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/13/0689ab-d8e4-4a4e-8793-481d075e62c3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:47:49 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.46.70.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:91:05:46:ae:7c:ab:0e:1f:bd:53:a0:32:e8:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b7dc5ad66005aa1b6dc6093fb11f3581a795335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9d:a1:3d:b4:52:8f:f0:fb:9f:18:38:58:8b:
78:76:3f:75:77:77:04:90:83:0b:80:3f:53:2f:cb:
63:6e:9a:f3:f1:39:ba:83:a5:41:08:66:0f:18:db:
33:f8:21:72:e4:b1:40:7b:ba:e5:cb:bb:78:f4:6a:
14:76:3c:8a:43:d2:46:f5:5a:31:be:cd:56:d3:1e:
30:a1:f6:10:14:44:81:e9:61:e5:b3:84:30:a1:fe:
c5:56:c5:79:e7:8a:51:73:fa:7e:39:fb:fd:e4:7b:
13:8b:55:86:c5:19:29:eb:d8:45:55:64:7a:03:dd:
96:f9:26:7b:e6:5d:34:46:69:f7:57:f1:4c:d0:13:
ed:39:2e:d6:ef:9d:59:1a:86:26:cc:02:1e:32:2a:
99:cb:e3:23:c1:a9:23:87:4f:b1:12:a2:52:43:26:
a7:89:e0:e2:39:ac:58:a0:45:bb:d1:38:eb:08:84:
6e:c3:b8:33:3d:0b:15:8f:6a:31:e4:27:70:59:e8:
1e:02:71:e4:88:b4:e1:a5:e7:f4:78:77:2b:c4:1c:
12:b8:bf:ff:2f:26:f0:8e:62:73:d4:22:ee:cb:50:
25:57:e0:40:d8:d3:97:d0:3f:6d:4b:84:a1:08:f2:
3e:8d:96:28:74:66:7c:2b:fd:5b:e2:0d:f8:aa:1b:
de:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:7D:C5:AD:66:00:5A:A1:B6:DC:60:93:FB:11:F3:58:1A:79:53:35
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/0689ab-d8e4-4a4e-8793-481d075e62c3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/0689ab-d8e4-4a4e-8793-481d075e62c3/1/K33FrWYAWqG23GCT-xHzWBp5UzU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.46.70.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:6d:bb:aa:85:84:0b:db:9a:60:b0:8b:3a:11:79:a3:8e:67:
b3:da:55:c6:9b:95:cf:3b:db:70:1e:04:e1:4d:3a:d6:81:26:
51:2a:bc:6a:a3:90:6f:03:69:15:cc:f2:64:9e:0f:0e:af:d3:
24:f9:7e:91:ce:0d:06:f8:04:98:0f:4e:73:d7:ef:ce:8f:f9:
92:11:42:eb:f1:06:1b:3f:cd:0a:40:49:43:33:e7:70:4c:fb:
d0:91:ac:5d:bc:39:8b:f0:cb:38:5e:c3:40:6e:29:76:93:b7:
48:94:ec:c1:41:5b:c6:4d:db:6a:47:e6:5f:a2:52:07:fc:0d:
7e:41:43:d5:29:6e:6b:2e:e7:4f:24:12:90:0a:58:f8:37:75:
a1:ed:f1:06:87:f3:95:a7:a9:61:69:8c:41:4e:1c:11:ca:5b:
74:cc:eb:4a:e8:8b:95:8f:49:9e:b7:56:cd:0b:72:3d:31:0f:
6c:bc:6c:c7:21:69:83:b5:a8:ec:34:31:05:17:78:c1:13:e4:
61:87:32:3f:36:7d:bc:e4:fd:0a:79:f6:fe:bf:ab:cc:ff:08:
57:ae:79:b6:e8:52:3e:eb:d2:a3:b1:b0:b9:63:dc:d1:09:06:
37:31:bd:74:ed:76:6d:2e:aa:0f:3b:3f:ce:ec:ae:23:ea:7f:
2b:1a:b1:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:19:38 2025 by rpki-client