Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LkX41ix0LqB9y_jFfVjM9dKOPrk.cer
File: LkX41ix0LqB9y_jFfVjM9dKOPrk.cer (raw, json)
Hash identifier: knq4XfTz+eR2N/KCVkYrTl5ze4kmini5oinpPG3t1kU=
Subject key identifier: 2E:45:F8:D6:2C:74:2E:A0:7D:CB:F8:C5:7D:58:CC:F5:D2:8E:3E:B9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D9C16013B728A8AF0329B77F669958
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:52 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.208.173.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:c1:60:13:b7:28:a8:af:03:29:b7:7f:66:99:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2e45f8d62c742ea07dcbf8c57d58ccf5d28e3eb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2f:be:b8:33:cd:89:1b:49:22:b6:9a:6a:e9:
fb:10:62:6f:0c:6a:37:ba:68:4f:2e:ff:df:bf:68:
f7:3d:26:03:27:35:c4:68:43:63:0d:37:35:f6:39:
f0:92:e2:19:3c:83:af:5c:ec:0a:03:16:64:a8:6e:
35:e4:1b:db:78:7e:73:ba:8e:5c:49:9c:ea:6a:ba:
f3:ce:91:f9:fc:41:06:81:12:ba:15:57:e7:a9:47:
5c:6a:af:69:7e:08:b4:42:f9:6e:bf:c7:7c:c6:e5:
41:77:89:37:73:ad:99:b0:58:28:47:4a:73:92:b9:
14:e8:15:b5:54:c3:0a:6f:37:59:e7:76:5a:70:25:
4b:8c:75:c6:7a:f4:4d:91:9a:1a:66:51:09:58:59:
94:2d:fa:03:d2:6b:14:26:82:42:5e:0f:ca:e6:85:
43:86:5f:b0:a1:42:e1:c7:e3:44:5f:6a:80:6a:0a:
1c:92:e1:4d:14:25:b4:e0:32:49:6f:46:4f:77:6e:
8e:d2:ee:2f:76:33:61:83:28:f7:84:4d:23:0e:a6:
18:38:2a:e8:b3:7e:db:bc:78:ac:91:38:f1:a9:c2:
1b:2e:b8:f8:24:55:15:4e:d4:e8:33:f3:a2:f2:5d:
e6:61:cc:5e:ea:85:0b:41:cf:c3:5b:25:47:83:26:
51:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:45:F8:D6:2C:74:2E:A0:7D:CB:F8:C5:7D:58:CC:F5:D2:8E:3E:B9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/327742-8156-4fa4-9bd5-2120fd0575ff/1/LkX41ix0LqB9y_jFfVjM9dKOPrk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.173.0/24
Signature Algorithm: sha256WithRSAEncryption
30:00:eb:01:88:d5:c1:5b:84:bd:19:11:b0:c2:e8:4a:51:1f:
86:ec:76:ae:c4:32:8a:84:1c:49:fb:ce:a7:83:a7:ae:e1:70:
dc:b3:6f:67:ff:83:b9:35:ee:3c:1b:61:e1:9a:d2:aa:95:fa:
c1:59:3d:15:a5:87:90:e6:10:c5:17:9c:61:9f:d2:6e:f5:b0:
90:f1:2f:ab:ec:62:ae:97:c7:f7:6d:75:d9:18:7f:87:e1:44:
17:c0:8c:42:e1:29:dd:bb:86:b8:0b:1f:3a:bc:1b:c3:47:ad:
2f:6c:b6:45:15:fd:95:6f:a3:3c:52:aa:1e:72:a6:89:f5:c3:
af:51:cb:f5:e7:47:dc:bd:6b:fd:04:08:89:5a:96:d2:5f:d7:
12:3e:94:22:bb:7a:9e:29:60:79:0a:6f:51:ec:ee:5d:39:eb:
ad:fa:12:f5:18:f4:42:ff:b8:58:05:04:36:e1:39:63:96:9e:
db:b7:46:e1:f5:79:c4:f7:48:6b:32:66:24:b5:97:2d:9b:df:
4a:d8:f0:97:50:5d:aa:81:e6:4d:74:b2:36:dc:4e:1e:f4:ca:
61:84:9c:34:6b:53:7c:c8:56:fc:4e:6b:8a:44:86:b7:1e:52:
1b:c2:25:3a:8b:8b:7f:3a:9f:66:e5:b6:64:ba:72:51:a6:fd:
65:b2:f0:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:39:44 2025 by rpki-client