Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PgzNJQR7nLi28Bhnze3oJW9zSiM.cer
File: PgzNJQR7nLi28Bhnze3oJW9zSiM.cer (raw, json)
Hash identifier: pd7TKxXs+IL93VTWM4uEjKo/jiK1CfW4s5xqtB6p84I=
Subject key identifier: 3E:0C:CD:25:04:7B:9C:B8:B6:F0:18:67:CD:ED:E8:25:6F:73:4A:23
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266A38B5F588859DDC47C90733D51A79
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:48:03 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.31.50.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:38:b5:f5:88:85:9d:dc:47:c9:07:33:d5:1a:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3e0ccd25047b9cb8b6f01867cdede8256f734a23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2b:1d:0c:f0:f8:dd:df:f6:84:76:ea:4d:28:
70:2b:e1:aa:00:ce:4b:2c:15:d2:97:5a:5a:10:9d:
5b:e0:d0:b8:9e:3c:58:de:7f:1d:d2:d6:ba:49:a5:
5d:24:97:5c:62:39:31:f1:3b:83:4e:cd:86:a3:5d:
f3:9d:68:a4:e2:bb:21:55:90:f9:97:c0:39:13:53:
98:3d:e4:17:59:21:d1:66:7e:d8:0f:9b:2d:57:c8:
1e:6b:f2:ed:78:b9:6c:dc:aa:94:ce:46:cd:c1:65:
f5:0b:4f:c6:01:a2:26:3f:69:c4:df:ce:5a:87:71:
e5:2d:78:b8:7c:2a:ed:f0:4e:2e:0a:1a:0b:fc:d7:
b9:b9:af:b4:7d:07:a6:2b:9a:ef:ce:8f:98:09:26:
26:d7:f6:8e:8f:12:ae:02:77:96:a2:e5:1d:96:d9:
42:a2:8d:08:2e:dc:5f:df:7b:5d:71:23:f2:24:ec:
3b:ac:aa:f8:ca:9a:35:9f:1e:c9:8d:5c:30:f0:0d:
50:4d:b6:6b:46:f6:4b:65:00:e8:39:f2:ec:71:29:
37:0a:13:48:49:16:44:73:27:4b:4a:fb:4b:48:57:
6e:e3:a2:9c:28:c0:7c:01:ce:c8:63:ef:b6:f7:6b:
5c:92:6e:b9:00:00:72:bb:e4:3d:81:14:9d:d5:51:
07:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:0C:CD:25:04:7B:9C:B8:B6:F0:18:67:CD:ED:E8:25:6F:73:4A:23
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9c8631-dc6a-45c2-bcf9-9cd017243a06/1/PgzNJQR7nLi28Bhnze3oJW9zSiM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.50.0/24
Signature Algorithm: sha256WithRSAEncryption
64:09:ee:31:3e:75:ab:e8:11:6c:7e:27:f5:cc:1f:be:e1:e9:
ed:cc:e0:e7:55:b9:79:6d:99:82:26:6e:97:f8:44:79:53:26:
a0:d7:c2:38:e0:61:4e:6e:69:3f:b3:d6:e1:d8:ee:fd:de:d4:
ef:60:1f:b4:b8:5e:e9:25:7c:b9:e6:7e:aa:85:ac:24:45:6c:
c9:ad:c0:06:ba:67:83:87:7b:c6:52:06:e9:57:72:f0:cf:54:
6d:ed:ef:8a:98:a0:30:ba:cd:83:7e:5c:7e:88:c6:73:ef:61:
6c:b8:a2:c6:57:3a:a9:50:28:29:0a:11:36:ec:9d:51:b3:65:
52:13:8b:6f:19:32:40:91:9f:0b:10:9d:ab:be:f3:c5:bd:7e:
40:fc:61:14:97:a6:d1:fd:15:a4:93:3c:fa:70:ab:54:68:a3:
19:5a:09:6c:e3:b0:fe:ee:c5:2e:78:62:a4:9d:e0:54:cb:77:
2b:3d:c4:cb:9c:1f:e8:4c:14:22:45:c1:6c:8b:cf:1d:19:65:
84:92:fd:04:f3:0a:80:12:50:75:31:84:47:18:4c:c1:12:5f:
d9:74:1c:10:1c:2f:60:8d:fb:92:bc:81:9b:9d:08:ab:b9:61:
f4:b3:49:d0:e6:b3:68:10:07:94:7d:d2:15:28:74:a4:93:ec:
98:cf:78:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:20:24 2025 by rpki-client