Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/SoCVkn7lfM7iVqpDnxY2hrWMVww.cer
File: SoCVkn7lfM7iVqpDnxY2hrWMVww.cer (raw, json)
Hash identifier: Gj/KlMOcpJ/DI0rCRYXqHFlD8w7UAozYpXbRA3eKMf4=
Subject key identifier: 4A:80:95:92:7E:E5:7C:CE:E2:56:AA:43:9F:16:36:86:B5:8C:57:0C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D801FBCBA79FC5D141844F3FADCCF9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:49:06 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.29.192.0/22
IP: 2a04:4700::/30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d8:01:fb:cb:a7:9f:c5:d1:41:84:4f:3f:ad:cc:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a8095927ee57ccee256aa439f163686b58c570c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:89:2f:b2:62:ab:41:7b:ea:cb:84:27:ab:40:
86:00:1a:f3:bc:6e:ad:b1:4c:70:f5:7f:f4:68:19:
59:e1:ff:54:cb:f4:1c:89:08:95:2e:5a:03:8f:27:
49:67:f2:74:44:e1:db:78:45:0f:9b:04:89:6d:84:
62:4e:99:fe:f4:68:41:e9:a7:18:fe:7a:fa:e7:57:
48:5a:0a:45:f3:11:be:a8:24:6b:bc:28:4b:8d:2b:
9a:92:96:48:4b:28:dd:69:8e:9a:c0:a2:a0:66:ea:
d0:e9:89:6e:c2:ca:68:e6:42:1e:07:27:9f:85:fc:
10:d7:da:1d:27:cb:26:18:b9:4b:d9:dd:8d:32:2b:
f0:4e:f3:57:99:73:dd:5a:0c:4c:92:5e:89:2f:b6:
e9:32:a0:be:0f:57:9a:e3:2a:03:93:a8:45:c7:79:
19:88:4d:2c:03:32:cc:aa:ea:bd:ad:8e:c7:dd:1c:
d5:9a:f2:e5:2a:cc:35:18:a1:d3:03:35:3c:d1:99:
95:77:c0:41:38:4a:d5:83:f5:4e:c5:c1:88:2b:57:
09:82:86:99:94:bc:20:45:5f:8b:1e:86:90:71:86:
12:a0:48:f7:f4:7b:9d:6a:ae:cc:84:0a:18:15:a9:
ab:bd:ee:cd:88:54:c1:66:6e:e3:31:9e:6b:52:10:
dd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:80:95:92:7E:E5:7C:CE:E2:56:AA:43:9F:16:36:86:B5:8C:57:0C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.29.192.0/22
IPv6:
2a04:4700::/30
Signature Algorithm: sha256WithRSAEncryption
8e:33:2f:ea:3d:7b:71:79:27:11:f7:47:83:a0:12:24:e3:fb:
b3:c7:ae:25:ca:bd:dd:f1:5a:fc:9a:52:6d:dc:53:32:03:6b:
16:e0:72:e3:40:ab:e4:b2:a6:d4:cf:e4:e7:d3:c1:3c:8f:e8:
38:e1:28:fd:9c:af:e8:2c:e5:36:93:4b:41:aa:7b:a0:ff:81:
c6:4c:8e:7a:1d:e8:0e:88:0b:d2:c5:32:98:3d:d8:3f:be:d2:
53:b0:9a:6a:50:80:2e:c1:4c:03:c1:59:bc:95:92:07:82:ba:
55:d4:78:c2:a0:66:22:99:3c:fb:ea:cd:13:fe:7f:65:8d:03:
f4:63:4e:4b:b7:de:67:a1:78:bb:cb:29:0c:b1:8f:4d:34:ad:
8b:85:49:97:c1:10:89:03:0c:c3:fa:6c:a3:b9:b6:a5:e0:8c:
25:3c:f6:e9:cb:13:f1:5e:90:eb:4e:68:1a:0f:ac:3d:54:1c:
f4:d0:fc:c0:4e:e9:93:b4:c3:61:23:e9:6b:d0:db:4e:5a:b2:
fb:01:5d:f3:27:c0:88:dd:06:09:e0:53:42:7f:80:4d:2c:e8:
6f:f8:83:59:65:62:5a:2e:57:3e:6c:a8:34:3e:62:42:65:c6:
dd:a6:5b:e8:8b:33:04:61:64:31:f6:5e:6d:6b:11:ee:ce:50:
72:2b:c7:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:25:11 2025 by rpki-client