Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PgmlTMIkrXs8oMV1MXuBhOKs4hY.cer
File: PgmlTMIkrXs8oMV1MXuBhOKs4hY.cer (raw, json)
Hash identifier: k4ROxKwQAT5f8YnV8C/uoSh97J8BkrpkjC83TIgAhec=
Subject key identifier: 3E:09:A5:4C:C2:24:AD:7B:3C:A0:C5:75:31:7B:81:84:E2:AC:E2:16
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942067EB5F7B75B2843CBCC0650CD35B4E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a2/5ef3e2-0603-46fd-ad9f-8d8b6e116219/1/PgmlTMIkrXs8oMV1MXuBhOKs4hY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a2/5ef3e2-0603-46fd-ad9f-8d8b6e116219/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:47:48 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.108.240.0/22
IP: 2a06:4d40::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:eb:5f:7b:75:b2:84:3c:bc:c0:65:0c:d3:5b:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3e09a54cc224ad7b3ca0c575317b8184e2ace216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:20:be:bf:ba:dc:ee:ea:6c:7e:ac:f0:26:9d:
a5:b6:04:a6:76:36:5c:f5:3c:a5:19:5d:15:ef:b4:
48:67:8a:eb:be:8c:b4:c5:04:ac:49:1a:a3:cf:81:
9d:d8:50:57:d8:97:fd:b9:7a:b9:8f:35:58:bd:30:
1f:49:77:3a:f1:b4:da:a4:4d:e1:b9:51:4c:d1:bb:
b1:9d:72:4d:f0:59:93:9c:64:4c:a3:1f:c5:1d:4d:
e2:ca:85:20:15:b0:8a:7f:81:dd:01:67:16:b0:5c:
68:c5:54:98:2b:b0:14:21:d8:c3:73:7a:10:d1:5c:
b3:65:0c:90:2b:42:2b:7c:7b:96:20:1d:fc:3f:58:
70:2c:6e:71:29:55:9d:36:eb:88:62:72:5a:e8:aa:
3b:52:5f:e0:ff:13:e5:42:be:32:db:d2:d1:94:5b:
33:14:c1:70:92:bd:62:d4:2f:bb:2c:f9:7c:2a:a3:
6f:ae:4a:7e:5f:8a:cf:02:bd:ca:2f:44:d5:85:22:
dd:41:ee:d0:1d:f7:5f:95:ed:dc:0c:6e:6c:f8:0d:
80:83:12:b4:84:bc:42:61:9e:e9:79:c4:a7:55:40:
f6:a7:bd:8b:fd:04:72:a2:3a:af:60:8b:36:6a:0f:
fd:1f:69:2a:b3:96:e5:88:a0:96:33:82:62:b6:a4:
f6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:09:A5:4C:C2:24:AD:7B:3C:A0:C5:75:31:7B:81:84:E2:AC:E2:16
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/5ef3e2-0603-46fd-ad9f-8d8b6e116219/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/5ef3e2-0603-46fd-ad9f-8d8b6e116219/1/PgmlTMIkrXs8oMV1MXuBhOKs4hY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.108.240.0/22
IPv6:
2a06:4d40::/29
Signature Algorithm: sha256WithRSAEncryption
1b:cf:cb:7b:db:f5:e8:d6:3d:d2:87:5b:56:d3:68:9e:76:b9:
e7:7c:d0:01:03:c5:cc:54:54:78:21:a8:06:0e:42:7c:74:bb:
48:f4:36:3f:4a:85:90:ae:af:c6:0b:d0:9d:d4:7d:6c:83:4f:
b5:06:82:f3:0a:d1:60:ce:fa:c3:d8:99:d3:10:ca:bf:29:62:
12:9b:da:6c:24:6a:00:80:16:6d:bc:64:9f:f8:69:af:0c:d4:
a5:ae:a8:c8:ee:cb:1a:58:db:37:6d:c3:47:91:93:31:a0:25:
bf:e2:2e:27:3d:e1:6b:67:ef:7e:bc:69:ed:63:1c:b3:cb:bf:
c9:ee:1a:94:c5:a7:58:af:df:21:56:47:3d:75:3d:57:0c:56:
87:2a:ed:1c:dd:d2:36:3d:75:73:57:1e:da:dd:0c:8d:87:8a:
b7:67:ed:7e:5e:fe:1d:4e:5a:2e:87:f0:ab:17:cc:ef:ed:53:
4b:55:f4:fd:48:66:32:35:12:b3:43:23:e9:66:08:79:0d:d3:
16:89:40:9a:e2:53:bf:5d:cb:8f:09:2e:91:4a:78:56:1d:b4:
ae:63:58:80:49:22:66:82:0c:f4:50:a0:47:6d:9f:b7:16:d2:
9c:2a:90:82:bf:b3:85:04:e9:e7:59:6b:12:93:af:07:50:6e:
33:b2:e9:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:17:51 2025 by rpki-client