Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/K_L644DF1MHigYEKNNuYg8nZ_y8.cer
File: K_L644DF1MHigYEKNNuYg8nZ_y8.cer (raw, json)
Hash identifier: IiGxJMjUv0rFgWd/RBsyujR77C5jWxsNOu4muKP+PHI=
Subject key identifier: 2B:F2:FA:E3:80:C5:D4:C1:E2:81:81:0A:34:DB:98:83:C9:D9:FF:2F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D9100827EEB5BE862F63C4D6A0DC51
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:07 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.223.187.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:10:08:27:ee:b5:be:86:2f:63:c4:d6:a0:dc:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2bf2fae380c5d4c1e281810a34db9883c9d9ff2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f3:31:92:51:70:e3:7a:22:38:75:42:f4:bc:
e6:a3:9f:3f:85:6f:cf:76:f1:f8:c2:87:fc:44:9e:
7b:aa:76:b4:b7:ed:9a:1c:82:62:44:18:26:fb:8a:
f6:c5:d9:c1:7b:4e:60:9f:7a:6d:92:df:25:e0:f7:
e0:0f:f2:2e:77:12:4d:cb:3f:ea:51:e5:d1:88:f6:
33:a6:e2:b6:c4:0a:29:e4:f3:1f:ef:ce:a2:a2:6c:
54:5a:b2:85:e1:ec:f2:e4:79:62:3e:3a:e7:9d:52:
ab:db:69:0f:a1:62:f7:22:4b:b4:42:fd:37:6f:2f:
62:5b:4d:2e:ac:47:fb:6c:92:99:89:7d:74:0f:fb:
7f:94:48:1b:9e:02:aa:6e:f2:6f:fa:ec:79:7b:b3:
26:55:c7:99:3e:1a:6a:c7:7c:1b:48:bc:74:2d:f7:
70:25:f9:95:c7:6e:bd:aa:aa:47:ff:45:7d:5f:2a:
90:a9:19:a4:58:3d:5d:34:df:b0:4f:05:03:f0:84:
21:82:c7:2e:75:8b:1d:3b:aa:5d:a1:3a:be:19:50:
09:75:04:8f:b7:55:55:de:0f:37:39:e0:d5:f7:ed:
67:5c:d8:76:9f:9a:09:ce:e4:11:76:08:c8:c5:8e:
f0:09:3a:f1:db:ca:d6:53:4c:2c:2a:9e:24:35:11:
44:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:F2:FA:E3:80:C5:D4:C1:E2:81:81:0A:34:DB:98:83:C9:D9:FF:2F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/13e1ff-a5d3-44cd-b1be-fbf0ed3f9157/1/K_L644DF1MHigYEKNNuYg8nZ_y8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.187.0/24
Signature Algorithm: sha256WithRSAEncryption
02:bd:8d:88:9f:77:6f:41:40:a9:1b:a9:84:66:49:39:48:1c:
24:28:cc:84:f3:f6:27:f8:d3:a3:2a:b5:91:2e:15:ac:a5:50:
1b:82:4a:76:8b:3e:e3:fb:d5:ed:a6:80:0f:4e:94:91:4e:f1:
1c:75:f0:59:6c:da:cd:8c:f7:29:de:67:c3:63:b8:14:3c:32:
d8:a4:94:d7:95:de:df:ab:22:8a:35:1f:f3:be:eb:2d:8b:66:
e4:b0:fc:c2:dc:b4:e8:4d:11:24:15:c3:a5:d7:2d:f5:21:73:
4f:4b:3e:30:3a:ae:b0:8e:1a:51:dc:cf:09:f7:b3:e2:03:12:
50:be:aa:5c:10:4b:cf:5a:c2:cc:4e:c5:c3:3e:c8:d3:28:40:
73:4a:9a:60:c8:61:70:ae:29:3f:c0:95:ed:85:58:e6:9a:84:
40:e8:4d:b6:1e:15:cc:8e:f2:0a:8d:3d:c7:f1:fa:81:92:9c:
71:e2:7b:da:e3:3a:3d:0e:ca:3b:98:8a:9c:fb:35:af:f5:cf:
49:4b:af:54:3e:4c:49:19:f5:be:68:cb:d1:ce:1d:3c:76:0c:
26:b3:5e:a7:a0:6f:da:52:2d:d5:9a:05:a5:85:e3:3e:ea:7b:
c3:64:f2:9e:f5:c7:bd:ff:0f:2c:11:3a:56:9c:64:c2:7d:d1:
6d:8a:5f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:56:04 2025 by rpki-client