Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer
File: S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer (raw, json)
Hash identifier: /7LOFDn8U43ZgD8vCxiTB1iOveYFOyz2L1POPoJprTk=
Subject key identifier: 4B:8D:82:21:65:E7:F0:1F:72:2C:97:39:67:F7:55:46:05:24:08:02
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258FA3A36053A57BCDD3A9CE9991E660
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:49:18 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 167.94.170.0 -- 167.94.173.255
IP: 185.251.144.0/22
IP: 190.102.100.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:a3:a3:60:53:a5:7b:cd:d3:a9:ce:99:91:e6:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b8d822165e7f01f722c973967f7554605240802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e5:b3:6e:14:33:0f:4e:ee:dc:1e:b3:1a:e2:
7b:2b:d9:61:34:86:91:83:4f:ce:db:f7:5a:28:1f:
02:76:9c:47:04:2b:ec:3e:0f:24:b2:6f:f1:d6:b5:
2b:2f:4f:cb:27:3a:d9:48:20:b7:a1:4f:72:55:35:
d8:58:ce:24:be:df:c7:ca:90:93:84:00:3e:b6:2f:
0f:66:ce:58:5c:5b:1e:15:e3:0c:ca:e9:3a:38:ea:
89:d1:2e:34:4f:28:d1:a4:df:f9:91:e4:db:85:b8:
41:49:65:2a:56:4d:4c:59:c4:3e:fc:16:45:09:cf:
ec:67:7a:ee:49:d2:5d:16:63:0e:68:ea:3d:12:9f:
15:83:f2:7f:6f:67:fe:cb:fc:bb:bc:21:68:ad:4a:
c4:b7:a2:a2:fc:2a:e9:cb:10:12:6c:f5:a0:29:dc:
5c:e3:e6:08:bf:a5:93:f9:b2:70:ab:d2:9e:c3:ea:
b5:80:66:02:6c:f4:3f:e1:7b:5b:f8:af:f5:ad:bd:
d4:56:e6:01:a9:de:5c:ca:f5:a2:ce:f6:11:4d:e1:
c7:3a:f2:84:2f:d8:70:4d:6f:b5:80:5a:5d:e4:89:
77:1e:8f:6c:f1:d5:0b:5c:63:91:83:65:c5:39:d0:
ed:06:33:51:41:47:9d:ab:2b:f5:80:b3:7d:82:3c:
e0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:8D:82:21:65:E7:F0:1F:72:2C:97:39:67:F7:55:46:05:24:08:02
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.94.170.0-167.94.173.255
185.251.144.0/22
190.102.100.0/22
Signature Algorithm: sha256WithRSAEncryption
15:d0:db:46:46:2e:a5:a4:c3:95:70:ba:ae:c0:bc:8a:bb:d4:
0f:8c:bd:49:d5:9c:bd:15:fe:7c:24:85:10:d6:5d:2d:c3:fd:
9e:d7:9d:19:c7:90:92:d6:87:e3:bb:21:c5:58:ae:fc:2a:21:
62:bc:cb:27:f6:6e:57:22:3d:bc:2f:60:d8:58:4e:58:a8:91:
d6:27:58:b3:a3:ec:d7:29:82:34:a5:5a:8b:b0:a2:b0:43:eb:
86:b6:d5:05:2e:19:b0:b0:29:a2:65:94:a1:d1:e8:7d:93:4f:
e3:6e:c6:35:2d:8c:86:20:d7:76:12:4b:a1:ec:c8:74:55:6d:
12:1e:51:1d:b1:89:fe:91:e6:d6:86:7d:0e:38:28:a4:d0:9c:
a9:e1:84:e8:57:d0:94:49:8f:d4:45:51:6b:48:53:6e:24:18:
a1:26:c2:7b:53:e2:da:a7:01:1e:42:85:64:fa:6b:f2:fe:19:
6c:db:ac:42:28:96:fb:68:db:77:1b:26:43:aa:e7:81:bb:63:
d0:74:bb:70:47:10:30:b5:44:5a:a9:21:0e:df:ba:cc:d9:d1:
7a:9a:5e:81:84:22:b7:50:a2:71:9c:48:58:c5:39:a4:b2:36:
7c:ec:73:f8:c4:9a:c5:d3:99:0b:c0:44:16:1e:d6:f0:bb:46:
cf:7a:90:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:43:36 2025 by rpki-client