Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QD1jsy5xwcFpJD79ttVu1cprgk4.cer
File: QD1jsy5xwcFpJD79ttVu1cprgk4.cer (raw, json)
Hash identifier: b/p5aeFohZbgsqqOj+326OZZRVl3Hx5wGeIzwqZY7aU=
Subject key identifier: 40:3D:63:B3:2E:71:C1:C1:69:24:3E:FD:B6:D5:6E:D5:CA:6B:82:4E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D9A25F2C9A1324083DAF431D477A2B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:44 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.47.190.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:a2:5f:2c:9a:13:24:08:3d:af:43:1d:47:7a:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=403d63b32e71c1c169243efdb6d56ed5ca6b824e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:b6:0f:e3:6b:09:3d:50:42:6b:27:36:ef:99:
83:63:cb:19:81:e2:46:d6:79:52:db:49:ed:e1:ce:
61:40:5b:77:75:1a:cf:0f:74:f0:ec:7e:08:3a:e6:
52:ee:3f:7e:92:6f:24:8c:35:43:4d:0b:69:37:96:
07:cb:8d:f2:a7:ba:75:af:c6:c2:80:15:e9:71:d7:
51:00:d0:13:ef:74:0a:ca:cc:1e:3f:c9:28:01:66:
55:ae:da:1a:e0:98:cf:55:22:e5:8c:01:78:67:60:
55:df:22:b7:fc:6c:f4:22:fb:76:2e:d0:fb:e9:e1:
a9:ab:5d:b0:78:ac:14:13:a8:2e:3b:de:ae:2f:76:
6d:f3:d8:cb:fa:e5:1f:cc:96:6d:14:36:a8:fa:34:
51:a2:e6:38:c2:3c:52:fb:b5:a4:98:2b:25:b7:a7:
2c:88:0c:1e:47:1c:b8:ca:80:5c:c0:c6:0f:bc:61:
33:1a:a5:3a:4b:83:9c:ff:b8:27:7d:88:51:e3:c5:
4e:1e:15:e9:94:78:27:a1:b2:c4:24:b1:b6:14:fe:
c8:93:f6:94:80:82:60:be:d5:b4:cd:d5:7c:0a:aa:
6c:3a:12:9c:d9:24:13:34:9f:b9:da:3b:25:ce:85:
c0:b0:2c:4b:0e:c1:bc:62:6d:93:d0:0d:b3:4c:5a:
52:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:3D:63:B3:2E:71:C1:C1:69:24:3E:FD:B6:D5:6E:D5:CA:6B:82:4E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d012f0-6b89-40dc-bd56-b354c039375a/1/QD1jsy5xwcFpJD79ttVu1cprgk4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.47.190.0/24
Signature Algorithm: sha256WithRSAEncryption
25:2e:86:94:ba:d1:38:1f:91:79:f4:e7:5a:78:e6:37:c7:e5:
d8:83:fe:e2:2e:df:0a:1f:ed:2f:1b:55:3b:38:72:b2:bc:aa:
d0:8c:8b:50:ba:8e:29:9e:1f:67:df:dc:f3:e8:e1:98:77:ab:
39:f6:fc:6c:d7:66:29:71:48:3e:ba:3a:62:93:55:90:26:ac:
bd:75:9d:a6:52:f8:c7:1f:86:57:17:b4:2a:b4:a5:38:d0:33:
b2:ad:b4:14:86:a8:f8:c3:86:35:1f:f4:73:49:0e:7f:03:a3:
55:3c:6a:fe:9e:6d:5b:2c:b4:17:6a:43:15:6b:3b:b0:1a:8f:
4b:0c:ab:c8:df:0f:06:08:44:68:20:b5:12:30:02:59:fa:72:
14:a3:76:7a:ca:bb:9d:1b:0a:a4:e5:3a:f7:a1:b8:f8:2d:5f:
00:89:45:d8:6e:75:8c:09:2b:60:39:79:55:0b:e8:f2:9a:5c:
a2:04:3b:7d:75:10:9c:de:6e:3b:3b:7f:18:0d:ec:e8:d5:d7:
b4:37:a7:9d:24:43:0f:7e:c9:95:20:b7:4b:3f:c1:2c:b4:12:
15:1d:e0:2d:60:2c:3b:7a:57:08:d7:9f:7c:0e:0a:e9:83:8d:
d1:0f:8a:b0:8a:1d:b1:f6:19:00:65:5c:64:90:27:5d:99:38:
8d:ca:61:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:09:02 2025 by rpki-client