Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.cer
File: PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.cer (raw, json)
Hash identifier: d+KWPlkV2xVqtsb3OudRf3JSNOOdl8JRZDpIpz1U4kA=
Subject key identifier: 3E:D2:39:45:FF:75:61:EE:99:D2:E2:78:E7:38:8D:04:5F:AD:D3:14
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194274820BD1206D79AB677001D6E2B7FA1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:50:25 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 157.24.0.0/16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:20:bd:12:06:d7:9a:b6:77:00:1d:6e:2b:7f:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:50:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3ed23945ff7561ee99d2e278e7388d045fadd314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:95:ec:4b:8e:9b:54:19:4c:00:69:dd:fc:4e:
82:8a:4c:e3:7a:4e:b1:53:39:43:ca:b1:fc:5b:0e:
eb:3a:dc:a3:4d:b2:e2:c2:e6:50:04:cf:73:69:e8:
c0:67:70:5d:64:55:ad:ad:54:b8:d1:a9:a7:85:86:
a2:55:67:7c:ad:23:24:39:24:44:c8:ca:09:43:14:
5b:84:7e:6f:77:86:a4:ab:b8:59:51:8f:39:c0:e0:
e8:18:47:b1:1f:67:1a:d7:ba:e1:8e:8e:f9:9e:0f:
d9:c3:de:7c:08:3d:93:d0:3a:3e:4d:58:8c:e0:0f:
32:1c:ae:33:02:12:8a:9e:2e:e3:c3:39:ab:81:19:
fa:10:7d:cd:4d:f2:97:61:2d:22:7f:79:7f:17:68:
a2:6a:71:af:ef:6d:86:a8:0e:cb:9f:29:85:fd:47:
ca:9f:84:df:67:96:44:0a:3d:9b:b2:53:21:f9:a1:
1f:94:18:9d:a1:94:85:e6:18:06:b6:81:51:a6:20:
38:92:f1:00:b2:5c:e5:c1:7c:ec:23:cd:68:cc:3c:
31:d3:ff:64:6c:e8:d8:64:7e:8b:44:08:b7:02:87:
07:02:6a:8f:29:22:47:c9:da:6a:61:31:f8:f5:ba:
71:ab:ce:e7:18:35:7c:ce:11:05:c5:bc:4b:44:e1:
b9:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:D2:39:45:FF:75:61:EE:99:D2:E2:78:E7:38:8D:04:5F:AD:D3:14
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ce762b-dceb-4d5f-b1fb-77329a7e7dfe/1/PtI5Rf91Ye6Z0uJ45ziNBF-t0xQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.24.0.0/16
Signature Algorithm: sha256WithRSAEncryption
56:a6:b4:27:34:f3:04:d3:04:83:fa:74:15:2c:66:11:15:32:
57:cc:59:f7:a1:43:0f:cd:0b:1f:a7:d7:d0:cf:cd:55:b7:a8:
f9:3c:82:d6:28:bf:02:05:a3:4e:c3:19:9f:e1:ad:54:b0:18:
ae:4b:1f:bb:c4:c8:ae:f6:6a:44:4e:7f:bd:d8:67:ec:12:30:
c2:59:ac:b4:db:94:e1:78:e0:58:4e:70:4a:5c:f0:90:ad:27:
28:63:f6:2d:e4:32:82:1f:39:00:91:b6:92:75:e5:21:3e:1f:
73:56:87:51:75:b1:49:11:0e:90:00:98:d8:67:f4:40:3f:5e:
fe:b0:62:83:8e:b7:9b:ef:c5:e2:ce:8b:d7:0d:86:ea:b2:3b:
93:97:9d:b5:68:c0:ba:e0:84:a5:93:4d:27:8a:96:c0:14:a7:
83:dc:88:0f:fb:fc:7a:0f:f0:79:11:57:d0:e9:2c:5c:fe:5f:
b6:74:b2:45:96:8e:fa:f7:9a:c2:53:cf:54:03:d1:d9:0b:76:
bb:37:be:3e:3b:cf:d8:64:bb:b0:a3:93:21:67:81:9d:61:0f:
83:23:68:39:49:a1:42:f0:bb:ac:86:9d:41:2e:24:09:90:ef:
b2:08:3f:a3:d6:d5:21:b4:31:c8:1b:69:f4:04:88:7f:a0:6f:
65:72:bb:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:02:48 2025 by rpki-client