Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SmN2zpIIfkx85TZoZTd2nizDQFk.cer
File: SmN2zpIIfkx85TZoZTd2nizDQFk.cer (raw, json)
Hash identifier: I/zyCUIMAYOgmL9WuK+RAVrMkpyvRw/4UoeLju5GYoY=
Subject key identifier: 4A:63:76:CE:92:08:7E:4C:7C:E5:36:68:65:37:76:9E:2C:C3:40:59
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B2D3B0586CCA6F1A4C54A845FF72EF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:48:06 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2001:678:490::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:d3:b0:58:6c:ca:6f:1a:4c:54:a8:45:ff:72:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a6376ce92087e4c7ce536686537769e2cc34059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f7:d8:28:de:1b:da:cf:d6:0b:a7:d2:a2:ce:
80:ed:04:02:a4:dc:98:8e:88:83:f0:24:76:02:96:
12:e0:3a:4f:73:8b:20:bf:78:e1:9a:0e:34:b6:38:
9f:61:a6:b9:44:10:c0:d2:83:79:23:c7:be:24:43:
22:27:0a:f8:38:5f:cb:9e:d4:e0:93:f6:5d:88:fa:
3a:82:d8:e2:3f:2b:56:77:2e:1b:36:55:75:ff:ee:
63:7d:75:12:e6:39:79:56:ea:56:ed:39:4f:a4:ae:
29:31:82:0c:19:81:91:90:ea:4d:73:bb:72:51:b5:
c3:50:28:4f:91:77:6e:85:31:b5:0c:d3:bf:5b:3d:
8a:3b:c6:52:37:75:5b:51:5c:84:fa:ac:03:dc:2e:
15:e9:7f:c3:f1:81:06:3c:b4:c2:70:05:35:a6:77:
01:a1:77:8e:ec:fa:45:de:75:0b:c2:4e:b4:43:14:
b9:5b:37:24:9f:f7:6c:cd:9f:80:14:8a:cc:f8:f9:
f3:56:f8:de:70:4e:52:3c:8e:73:c6:a7:39:97:8d:
00:68:45:6f:54:ee:d3:fa:a9:5b:a4:f8:41:39:90:
14:d5:dc:f7:cf:a9:f2:7f:f3:00:d8:36:0e:90:e8:
e8:0e:d4:bb:5e:5e:58:e4:bb:39:91:46:3b:b3:92:
a0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:63:76:CE:92:08:7E:4C:7C:E5:36:68:65:37:76:9E:2C:C3:40:59
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7cf42e-2ae8-4f13-a0c4-4e1fb76c847a/1/SmN2zpIIfkx85TZoZTd2nizDQFk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:490::/48
Signature Algorithm: sha256WithRSAEncryption
1f:d9:82:08:92:d9:2f:fc:b5:3f:a3:7f:e9:e9:dc:b5:f9:ae:
f7:0f:a7:08:5a:05:12:b7:6e:01:c3:b3:46:a8:49:95:7f:3b:
80:61:eb:54:ba:b1:54:ca:ec:fe:66:48:91:47:e6:0f:74:cc:
3c:a4:14:47:a3:95:fc:12:0a:9d:a7:a4:45:80:d5:60:a8:8d:
4d:f5:b7:4f:85:87:0d:66:9a:28:cd:7c:6c:65:c7:58:9a:09:
08:63:68:99:da:f2:c8:f0:97:28:99:6d:66:88:61:e1:12:85:
08:7f:0d:fd:07:b2:d8:e1:1c:81:0a:1d:80:d0:32:e0:dd:c2:
9a:29:b6:3d:89:1d:df:b8:62:d0:84:20:a1:6f:c9:95:9a:a3:
20:2e:72:69:a3:48:04:44:74:ef:bf:f1:e2:38:97:50:3e:29:
71:bf:0b:ef:27:c8:6f:4a:22:0b:e7:18:74:bb:52:56:03:36:
03:06:40:84:1f:4f:a3:37:0d:b5:6b:61:2c:18:c9:f6:29:e5:
8c:aa:72:e8:88:c7:f8:dc:f5:ff:ba:a4:f6:24:f8:9d:e9:92:
d7:1b:12:44:16:15:80:88:17:84:e1:90:cb:66:de:f7:46:f2:
44:23:d0:61:a7:24:90:59:0e:49:8d:e3:e8:e9:94:a8:48:9c:
4b:bc:28:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:20:02 2025 by rpki-client