Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PXD-HXX32nbS49w0T7HwsLad4AE.cer
File: PXD-HXX32nbS49w0T7HwsLad4AE.cer (raw, json)
Hash identifier: ViJYAOQqeKYVuMYnncZewl03Vh/CG9Olu6Qk8wG9CY4=
Subject key identifier: 3D:70:FE:1D:75:F7:DA:76:D2:E3:DC:34:4F:B1:F0:B0:B6:9D:E0:01
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C3589586D503CB89FEA4197AB0376
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:47:50 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.23.148.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:35:89:58:6d:50:3c:b8:9f:ea:41:97:ab:03:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3d70fe1d75f7da76d2e3dc344fb1f0b0b69de001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c4:66:16:52:80:9d:06:ce:63:1f:36:9a:9a:
a4:15:40:75:f0:86:ff:dd:8f:dc:31:af:2e:a9:c8:
72:ea:27:9b:c1:3c:8e:68:84:e2:8c:6a:6d:7a:38:
89:6f:eb:dd:97:07:20:70:88:a4:da:86:50:bb:0a:
bd:78:e7:de:24:4d:c1:de:0c:fa:a8:f6:cf:1f:de:
3d:2e:fc:a6:2b:6d:ad:3e:e4:35:b0:7a:e2:da:99:
72:7d:4a:d3:74:5b:cf:4b:e7:81:db:9f:e7:bb:42:
37:1c:36:c0:69:05:4e:41:fe:ed:8c:e4:9d:20:35:
08:d8:50:a3:fb:60:46:8e:74:e7:00:8e:8f:5a:c4:
1a:5e:f0:39:43:f9:ff:97:ce:97:dc:79:88:6f:6b:
c9:ad:6b:89:54:f1:75:13:42:1d:2e:6c:6b:e7:93:
aa:30:c7:89:86:65:f0:a8:99:d0:dd:cc:38:24:32:
94:78:76:d1:b9:84:a0:6b:8a:4e:ae:e4:a1:3f:f5:
4a:28:ba:e7:3c:fb:0d:1a:2f:14:bf:2f:e5:06:b1:
85:12:7a:13:0f:b8:94:f7:0e:b3:db:84:42:c4:d3:
9f:d3:52:18:4f:4c:26:40:c3:30:b1:03:0d:d7:7a:
22:0b:f5:6b:3c:0a:e4:58:c8:5b:10:89:ee:cc:fc:
9c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:70:FE:1D:75:F7:DA:76:D2:E3:DC:34:4F:B1:F0:B0:B6:9D:E0:01
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.23.148.0/22
Signature Algorithm: sha256WithRSAEncryption
46:45:2f:e1:51:c4:24:b8:8e:6e:12:d7:54:57:37:66:7d:b8:
f0:40:9c:ff:1b:ed:a9:87:cf:64:f6:e1:3c:48:07:0d:13:cc:
32:ec:c7:35:7a:ed:c1:90:8c:03:1d:81:6b:c3:5b:37:97:c9:
95:99:a4:11:d7:67:41:b7:92:76:aa:8a:03:73:e1:45:f6:c0:
0d:7c:b8:60:df:ea:12:03:36:27:95:6b:27:53:b1:8f:4a:e2:
9f:b0:47:dd:ad:79:14:cb:53:b5:7b:54:19:c4:c8:51:52:7b:
4a:5f:70:f9:a7:16:52:f7:42:7a:ca:4b:ec:bd:eb:e7:27:fb:
8f:63:d5:e0:08:e9:7c:4d:77:0f:0a:85:b3:28:3b:60:84:dd:
78:00:76:70:80:d6:fd:3e:dc:df:2a:10:35:2b:44:71:bb:0a:
7b:36:ea:e1:1c:8f:18:0e:b7:b2:07:0c:51:5a:08:66:b0:fb:
b6:76:92:86:52:0d:ca:4e:41:98:29:39:58:97:4e:28:5b:12:
db:25:f9:d8:58:91:d8:35:bf:4a:f3:02:fb:22:10:ef:fb:4a:
91:b5:7a:30:54:7a:68:a2:6d:44:98:b7:08:94:d7:28:2d:52:
a2:f0:3b:d8:17:4a:05:f2:92:bf:aa:ac:35:c7:b2:ec:80:17:
86:d5:a2:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:56:05 2025 by rpki-client