Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/N0zC_9dpwY5ebw38mg6nT7P4wQg.cer
File: N0zC_9dpwY5ebw38mg6nT7P4wQg.cer (raw, json)
Hash identifier: FyN5iabnUQdMLqEiDnVzFvht7Av14GMaAfjftVxtfz0=
Subject key identifier: 37:4C:C2:FF:D7:69:C1:8E:5E:6F:0D:FC:9A:0E:A7:4F:B3:F8:C1:08
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194274793B53F81C6709FCB23EB984A611A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:49:49 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 85.236.152.0/21
IP: 146.88.232.0/21
IP: 185.22.108.0/22
IP: 185.221.180.0/22
IP: 209.16.158.0/24
IP: 2a00:5de0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:93:b5:3f:81:c6:70:9f:cb:23:eb:98:4a:61:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:49:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=374cc2ffd769c18e5e6f0dfc9a0ea74fb3f8c108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:80:e2:d0:1f:82:73:e0:f4:2b:68:a7:a0:cf:
02:3a:c1:16:6a:24:2b:da:47:35:85:19:41:2c:99:
31:ba:26:5f:69:34:03:a0:2e:f0:fa:34:ac:ad:26:
13:a2:83:3f:dc:85:4c:d8:4e:59:35:ea:26:ec:42:
62:7c:9f:c4:f4:35:dc:f7:48:52:31:98:e6:49:6a:
79:54:1a:68:03:4e:df:60:0b:45:cf:ad:d7:c9:a6:
ed:2d:b6:38:24:00:9e:bc:ef:bd:f0:dd:75:0c:94:
ff:ea:f3:94:9b:49:47:2c:9a:b8:93:40:f0:49:bb:
aa:01:a0:3a:51:6a:b7:e9:38:e2:57:b0:f2:3b:b8:
ae:26:52:eb:c1:96:fc:18:1a:4b:af:80:9e:fa:6a:
41:b6:28:45:97:73:45:c7:8c:f2:2f:e7:f8:20:bd:
02:86:75:2c:41:b2:cb:99:1f:96:4e:87:a6:c7:77:
44:8e:82:fb:35:de:08:76:7b:a3:6b:11:4c:48:65:
25:98:cf:c0:d0:cb:c0:d3:2e:f5:99:69:d2:6c:63:
d0:12:55:c8:d9:f8:13:25:95:56:5f:40:ac:a5:ff:
af:ed:6a:24:21:47:fa:b9:1a:cb:ae:e8:bf:11:7e:
0b:93:32:10:67:d1:42:ff:84:fe:d9:99:39:bc:5c:
3f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:4C:C2:FF:D7:69:C1:8E:5E:6F:0D:FC:9A:0E:A7:4F:B3:F8:C1:08
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.236.152.0/21
146.88.232.0/21
185.22.108.0/22
185.221.180.0/22
209.16.158.0/24
IPv6:
2a00:5de0::/29
Signature Algorithm: sha256WithRSAEncryption
04:ad:8d:28:c3:f0:2b:f8:07:d8:7e:d2:81:45:cd:ae:31:70:
29:de:54:21:6c:d8:1d:1f:31:22:3d:bd:0f:f4:1e:bf:60:80:
72:8c:87:97:ef:c8:14:0c:04:99:c0:fc:94:6b:e6:9a:48:75:
55:d8:a0:22:6e:aa:18:5c:62:13:00:31:42:71:f9:1c:4f:ef:
76:d7:8d:6a:bc:ee:03:32:6c:41:08:37:3a:a5:2a:c9:a3:87:
71:0d:b2:d5:da:3b:44:d0:49:31:1f:51:d7:a6:68:5b:a7:0a:
c3:96:65:4c:1c:f5:5e:71:b6:25:ea:53:40:42:77:12:3c:6d:
d0:39:a4:68:6d:74:82:ff:13:90:42:d7:b8:33:bf:b0:1c:62:
b6:61:01:68:c4:62:3a:17:9f:3a:e6:a5:12:28:23:5e:e2:09:
71:fa:29:31:ea:57:8a:ed:64:4a:1a:5b:d5:58:4a:1f:84:fe:
80:28:37:f5:fa:96:c2:2c:c6:f3:1c:ab:c3:82:bf:91:c3:c2:
5f:aa:da:9e:bc:a6:5d:b1:95:5e:06:b9:0f:43:fc:5d:0f:ad:
f8:47:54:33:39:3a:a4:fe:e5:53:e0:30:e5:0c:de:b7:e1:06:
7b:a8:74:97:3f:fa:e2:b8:d7:45:df:18:7e:33:0c:ca:8e:fb:
a1:cb:4c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:46:58 2025 by rpki-client