Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Nia55ERl8L1xPAoeBQED05EdzWc.cer
File: Nia55ERl8L1xPAoeBQED05EdzWc.cer (raw, json)
Hash identifier: nGMOK35Vz65fvGDRz87QtErDJFqscuOf73FBEFArgmA=
Subject key identifier: 36:26:B9:E4:44:65:F0:BD:71:3C:0A:1E:05:01:03:D3:91:1D:CD:67
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942747D4D0282B057D157AB1740E8A628B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:50:06 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.116.62.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:d4:d0:28:2b:05:7d:15:7a:b1:74:0e:8a:62:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3626b9e44465f0bd713c0a1e050103d3911dcd67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c0:fc:38:23:c9:c9:aa:a2:1e:4e:0a:f8:fa:
e3:9e:e7:84:0e:61:af:83:8f:2c:d1:25:26:1a:c4:
e9:f5:c2:57:a7:be:a5:ad:2c:09:aa:2e:36:22:ae:
44:d2:ca:51:d6:5a:85:60:a2:65:95:42:d2:38:2a:
54:6b:f9:44:b4:f0:db:1a:81:f3:df:f8:22:7d:61:
a8:bb:ea:6f:5a:df:60:d9:c0:ab:aa:a6:6d:20:da:
12:3f:1e:28:c6:22:f1:71:c3:18:59:53:8e:26:39:
3d:34:9b:4a:ff:92:50:45:4a:84:29:3f:52:75:53:
32:14:24:52:7e:a8:bb:66:e5:38:aa:9c:c3:c5:7a:
42:13:7a:d0:a3:23:bb:ed:d6:f1:f7:66:66:2b:9d:
b5:c3:0d:6f:8f:0c:f1:08:18:d2:1a:41:46:c2:1c:
81:9b:49:2a:e3:df:01:0c:bf:df:5e:d2:e4:4d:23:
1e:d8:25:fb:97:9e:0f:7b:23:90:23:97:95:8b:f7:
77:aa:88:ea:17:b4:72:25:d4:ef:3d:59:69:fe:3d:
ef:a2:94:c1:65:16:1c:c5:24:d9:cb:77:25:13:a0:
40:25:40:25:64:9c:30:c9:09:cd:40:bc:a9:f4:2d:
09:70:90:bf:2b:cb:f9:9c:9e:9f:7c:01:49:b1:29:
e1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:26:B9:E4:44:65:F0:BD:71:3C:0A:1E:05:01:03:D3:91:1D:CD:67
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/022af5-862c-428e-bee8-28a4681c37d6/1/Nia55ERl8L1xPAoeBQED05EdzWc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.116.62.0/24
Signature Algorithm: sha256WithRSAEncryption
56:68:a3:a1:e3:7a:74:28:43:8e:bd:51:35:b9:35:e1:27:fa:
b3:2d:8d:b6:db:c8:76:3a:d8:03:c8:7a:03:9c:90:5c:c9:94:
36:d1:12:7f:72:d1:7f:30:24:bb:53:fb:01:34:65:f1:53:1c:
8b:74:d0:66:6e:fc:01:32:89:79:a5:ee:d1:f0:ec:c9:3b:28:
6d:7c:9a:49:28:30:bb:44:a3:e5:c0:63:ba:9a:f7:3b:8d:06:
fd:8d:76:7d:97:80:f6:8a:b0:1e:a6:78:05:e3:52:40:a2:05:
33:db:71:06:d2:4d:6d:55:74:1b:8d:1a:df:9d:e9:e3:9b:8e:
fa:87:c0:75:eb:35:1a:ab:73:6d:2a:c4:4f:33:b4:67:f6:44:
a3:f6:c6:51:30:4d:89:e5:f5:f7:7c:5a:df:ab:62:ec:c2:32:
8a:f5:a0:af:51:f7:d6:19:bf:b7:9d:2f:0a:db:10:fe:2a:c1:
ac:10:93:a3:46:bf:c6:4c:69:c2:a2:0a:af:1e:54:6f:ba:8d:
b5:96:57:3d:bc:37:66:dd:55:4c:6b:de:af:75:ca:2c:d0:03:
fb:e6:11:21:54:db:f8:02:43:5d:42:8b:8f:f4:f9:8f:f9:1d:
cb:c2:3c:44:a9:c6:c1:09:8f:6a:eb:60:04:11:17:73:34:b4:
5f:15:42:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:42:29 2025 by rpki-client