Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KAK1sCXPTqEzlfxXtaTWiY5zMs8.cer
File: KAK1sCXPTqEzlfxXtaTWiY5zMs8.cer (raw, json)
Hash identifier: A3AaA0mSaNMja3JKhhd+nt/wVXE3PAtvWC/0vZrHh6A=
Subject key identifier: 28:02:B5:B0:25:CF:4E:A1:33:95:FC:57:B5:A4:D6:89:8E:73:32:CF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194206813C5CE7645672D1B98FC66A4B223
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/73/375522-b695-431b-8d49-66b434fdf9ae/1/KAK1sCXPTqEzlfxXtaTWiY5zMs8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/73/375522-b695-431b-8d49-66b434fdf9ae/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:47:59 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.200.218.0/24
IP: 2001:678:878::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:13:c5:ce:76:45:67:2d:1b:98:fc:66:a4:b2:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2802b5b025cf4ea13395fc57b5a4d6898e7332cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:70:a1:86:0a:a2:98:92:ba:9b:16:3a:64:8d:
95:30:9d:c4:17:ff:0c:a2:e7:40:6e:1c:87:90:1f:
4e:af:d4:00:8d:2a:a3:a3:09:90:d2:17:e4:8c:6b:
31:23:3f:12:70:42:40:56:96:3a:e0:c7:8f:63:9f:
c4:2e:39:8a:53:ca:de:ff:c7:ae:a4:8b:8f:24:31:
1d:36:0d:f2:7e:43:62:05:51:c8:ff:f2:7e:21:e8:
20:64:d2:33:27:e0:b9:f4:e2:eb:03:12:03:bf:1a:
7d:20:a9:82:93:bb:2f:cf:bd:28:31:ff:b0:97:55:
d1:a3:55:cc:0d:09:b1:2c:38:3d:bf:3e:05:4a:e5:
52:fa:56:b9:f0:e0:70:bd:2b:76:21:0d:e6:54:f8:
63:0d:ed:ab:23:85:ad:a1:7d:45:48:3e:f0:83:a8:
85:36:b2:50:ee:bf:71:e8:e3:f4:9e:ff:40:7d:46:
e7:7a:ed:26:97:21:c2:87:af:17:43:6c:71:8c:7a:
68:0a:c8:b8:57:ba:70:18:a3:27:a7:c8:e4:e1:0a:
88:e7:bf:80:eb:09:c7:97:22:4d:75:5f:81:27:db:
78:6b:2f:e1:61:3d:01:79:6b:8a:4a:0f:b4:5e:e4:
5b:0c:a9:36:8b:89:d5:26:5c:4d:ef:9e:39:60:8c:
dd:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:02:B5:B0:25:CF:4E:A1:33:95:FC:57:B5:A4:D6:89:8E:73:32:CF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/375522-b695-431b-8d49-66b434fdf9ae/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/375522-b695-431b-8d49-66b434fdf9ae/1/KAK1sCXPTqEzlfxXtaTWiY5zMs8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.218.0/24
IPv6:
2001:678:878::/48
Signature Algorithm: sha256WithRSAEncryption
a0:87:06:11:16:20:41:07:37:7d:72:38:d8:f9:ae:39:a4:a8:
f0:a2:4c:20:3c:3d:e8:bb:8b:62:7d:72:1d:65:d0:79:b1:1a:
04:21:e2:78:96:88:2a:52:3d:50:42:29:a9:70:a5:01:0f:66:
73:b2:50:7a:76:76:6f:3a:4c:88:8b:e8:51:4d:c5:0b:34:b3:
a7:d5:86:66:8a:b4:6b:88:ed:93:a5:ef:d0:91:5c:fa:04:a2:
74:7a:ee:28:26:a3:ac:14:6b:f4:12:d7:27:13:f6:fd:57:1b:
ac:10:43:35:b0:89:e3:8b:61:4c:c8:39:d5:99:43:0b:3b:f9:
26:85:67:03:72:4d:d9:c1:aa:c9:91:1c:71:d0:cc:a1:c6:c6:
44:ef:f0:45:86:90:43:9d:e9:d6:62:f4:79:5f:67:b5:79:1f:
4e:8d:89:80:5a:6d:bb:a1:07:d4:0f:24:0a:3b:d1:65:50:f6:
af:f1:3c:10:18:52:44:d3:c3:2a:ed:84:22:5d:41:14:ef:8d:
e4:8b:50:ad:c3:b2:96:36:78:91:3f:a5:20:d8:99:de:3d:79:
b7:98:d1:48:1a:3c:56:09:e2:e7:17:a6:ab:48:85:2c:97:da:
8a:89:6a:b5:43:78:01:ec:b5:d9:45:70:6b:84:85:a1:a3:3e:
1c:58:0a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:53:54 2025 by rpki-client