Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RPMwC82ETWB1L-Xfst4pmWbpuPY.cer
File: RPMwC82ETWB1L-Xfst4pmWbpuPY.cer (raw, json)
Hash identifier: uSOiI7hMx2h8Qkocv7NbG8awsuUtkKThAzIBjdZzn0w=
Subject key identifier: 44:F3:30:0B:CD:84:4D:60:75:2F:E5:DF:B2:DE:29:99:66:E9:B8:F6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425214A3243305E6CCE221047316CD133
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:48:46 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 157.247.0.0/16
IP: 192.102.17.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:4a:32:43:30:5e:6c:ce:22:10:47:31:6c:d1:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=44f3300bcd844d60752fe5dfb2de299966e9b8f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ae:cb:bb:b5:e3:1d:b5:4a:df:66:d5:2e:7e:
9e:8f:da:53:e9:0f:a4:ee:fa:d7:3b:7f:66:bd:2a:
71:6a:10:35:5d:0f:65:f3:81:f0:65:ad:7f:0f:73:
b9:e9:07:c6:c8:1f:8f:5d:2b:de:52:96:73:0f:c6:
cd:ac:af:ee:50:70:22:f5:35:cd:83:0d:ef:54:86:
5c:80:cb:cb:c6:eb:65:28:25:04:48:dd:e8:08:3b:
a2:ca:8c:13:62:7c:c9:b5:5d:48:4b:c9:82:f8:92:
aa:c6:27:f1:a7:04:d4:cc:a7:85:f1:4a:1b:3e:1d:
b4:c3:1f:35:bd:1e:44:ac:f4:e1:81:7c:e6:8a:c8:
01:90:9f:15:aa:86:7e:25:59:46:1e:11:b1:64:f0:
8d:5c:99:8a:44:a6:75:04:12:bb:bc:15:6b:8c:7d:
5a:60:43:bf:8e:6e:ce:12:3c:0d:e8:3d:65:00:ec:
99:e1:22:84:98:fa:06:6e:db:69:63:e3:79:36:32:
a7:d6:6b:b2:a9:5d:2d:66:b3:e0:9e:9d:d4:71:c2:
fc:f8:5c:94:91:0d:37:11:ae:b6:48:7d:61:9f:89:
63:29:1c:b0:99:bd:cf:2c:76:9d:92:37:29:c6:12:
3d:80:ec:b2:81:40:e4:a5:b2:7d:60:af:81:e8:d5:
fd:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:F3:30:0B:CD:84:4D:60:75:2F:E5:DF:B2:DE:29:99:66:E9:B8:F6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c48341-b8f0-40e9-9aa3-81484f7a79ba/1/RPMwC82ETWB1L-Xfst4pmWbpuPY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.247.0.0/16
192.102.17.0/24
Signature Algorithm: sha256WithRSAEncryption
12:ca:6c:d2:50:c2:74:28:49:9b:07:83:4e:d4:30:dc:65:52:
0a:a7:52:9c:41:94:8d:72:e3:1a:b8:c7:c3:9e:2f:97:7e:b3:
9b:1f:9e:3d:6b:13:8b:63:11:58:29:eb:b6:3e:b8:b4:93:0a:
16:7e:61:c1:7a:f3:6c:2c:eb:2c:ae:8d:a7:c6:5b:01:63:6f:
b0:9c:b3:c6:e6:99:53:72:73:27:a4:51:a9:8a:49:eb:9c:7c:
ba:73:e6:b7:8d:99:f5:76:1d:70:ac:ff:34:0d:c3:40:ea:2c:
dc:2f:6a:a0:3f:a2:5d:be:fc:9d:ee:ff:81:f4:f6:56:98:0e:
05:14:1b:33:a8:b3:35:53:0e:18:6f:27:18:fe:4c:78:c6:f4:
54:16:22:0c:03:15:87:51:4f:cf:58:3a:91:02:12:5e:ff:cf:
65:33:21:78:a7:12:80:c6:fb:89:1e:d1:82:8a:5a:b0:86:4b:
39:96:bc:90:50:3e:91:07:85:e2:43:e9:16:5b:77:59:29:01:
c7:29:44:94:5f:b2:a3:92:38:bb:3b:fb:a5:2c:16:27:77:10:
a9:44:93:de:29:8e:27:17:69:b5:55:7e:16:04:4f:b7:0a:03:
5a:29:57:0e:f6:0c:67:3e:6e:8e:33:6b:19:41:61:70:04:f0:
e2:18:94:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:56:25 2025 by rpki-client