Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/M29qyC9vKOPT5bZkdVlNgxjnWrM.cer
File: M29qyC9vKOPT5bZkdVlNgxjnWrM.cer (raw, json)
Hash identifier: HYWbjm6J5wZTPpsBf+S0FNMl7/vWqU+vg6LxpFVtG54=
Subject key identifier: 33:6F:6A:C8:2F:6F:28:E3:D3:E5:B6:64:75:59:4D:83:18:E7:5A:B3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D7F5DAA94E39482F0B31DA8F966FB4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:49:03 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 37.19.96.0/21
IP: 37.203.192.0/21
IP: 185.4.192.0/22
IP: 185.109.163.0/24
IP: 2a02:4940::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:f5:da:a9:4e:39:48:2f:0b:31:da:8f:96:6f:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=336f6ac82f6f28e3d3e5b66475594d8318e75ab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8e:74:ce:61:30:ec:a2:2c:ba:19:c4:12:0e:
a6:d2:3b:68:1d:6a:08:f5:04:44:00:d3:32:0e:eb:
8d:39:04:fa:80:85:93:25:f2:5c:d6:c1:10:52:5f:
3b:03:3d:73:a0:12:95:a3:4b:68:cb:1d:2e:2a:83:
f2:2a:5b:0a:e0:70:9f:69:a6:f9:26:b2:5d:72:8b:
a1:68:f4:d3:72:8a:77:91:bd:51:7c:90:69:d9:49:
12:09:c4:01:66:f2:2d:d1:ad:0f:12:4f:ab:1f:cf:
70:d2:fc:61:96:bb:10:4d:9c:68:6d:cf:02:1b:5f:
2f:de:11:e8:98:f6:3e:56:8c:8d:6a:31:44:62:a8:
bc:1e:44:a8:1f:ca:24:ac:71:fe:1c:e6:f2:4e:ce:
15:c7:51:a0:99:87:4f:68:67:32:ae:3d:91:52:b1:
1b:85:fc:08:a3:66:d7:f5:7e:ee:d7:05:fc:fa:19:
d0:d9:df:d7:1f:b3:e1:3f:7c:2a:f2:1d:95:08:29:
0e:54:b6:8b:57:6a:e7:2d:84:3d:62:ed:c3:22:91:
91:07:d1:ab:33:af:d8:8a:2a:6d:d9:ea:45:c5:45:
c0:87:4c:49:67:38:69:e6:fb:a8:56:3c:30:02:44:
ee:67:39:72:32:fa:ba:e0:68:a1:57:95:cc:81:25:
4a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:6F:6A:C8:2F:6F:28:E3:D3:E5:B6:64:75:59:4D:83:18:E7:5A:B3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/915cbb-568a-4f42-8b80-ccb016ae1513/1/M29qyC9vKOPT5bZkdVlNgxjnWrM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.19.96.0/21
37.203.192.0/21
185.4.192.0/22
185.109.163.0/24
IPv6:
2a02:4940::/32
Signature Algorithm: sha256WithRSAEncryption
27:62:67:90:1e:cc:f6:b7:98:e8:79:1c:69:92:b5:9b:e4:9c:
d4:6d:b7:31:ac:f5:f6:44:05:29:76:80:e8:5b:e3:a1:3d:0a:
9c:98:4e:2c:13:8c:73:74:2d:3e:b5:d7:52:f9:1e:df:ae:99:
0b:32:05:20:07:ba:05:3d:09:a6:90:d8:ed:9f:22:28:10:7b:
ce:88:1e:41:2d:0c:77:e5:46:b1:47:6b:bb:44:65:65:33:e5:
e5:fa:18:7c:1b:6d:2b:02:ac:e5:d4:fa:bc:48:da:4e:06:81:
3b:c4:9b:12:d8:15:8b:64:93:0e:0a:30:33:74:ea:61:66:70:
b9:ed:2e:fc:9e:52:96:33:2c:a7:1c:34:a6:05:52:3f:13:da:
9c:82:a4:7f:51:5d:07:df:14:15:83:c4:7d:83:1a:3d:df:1d:
67:59:1a:0e:0e:eb:84:37:f4:ff:67:d9:84:df:a7:8d:24:3d:
eb:ac:94:67:d8:f7:fa:f2:81:e1:8b:8a:7b:2c:ee:96:81:c2:
ef:db:fc:08:2f:17:4f:04:bb:71:66:4a:80:55:49:31:df:71:
f9:b8:6f:92:b8:03:88:71:e3:61:a4:25:ef:f7:18:76:d7:11:
24:64:2a:32:c1:24:81:2c:bc:78:4c:e2:9f:a2:86:59:ad:fc:
44:27:b7:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:36:27 2025 by rpki-client