Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/T6iT4zqCH_ZtOPDrzkmRHzpflk4.cer
File: T6iT4zqCH_ZtOPDrzkmRHzpflk4.cer (raw, json)
Hash identifier: Iud/tcMnm2FDE30M4wssN8hQB6BFv7OKJ5+DjHI430c=
Subject key identifier: 4F:A8:93:E3:3A:82:1F:F6:6D:38:F0:EB:CE:49:91:1F:3A:5F:96:4E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425221269BDF89DF42C955A1F9959802D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/43/b85caf-f20e-4b67-98a0-ff7f48f93f01/1/T6iT4zqCH_ZtOPDrzkmRHzpflk4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/43/b85caf-f20e-4b67-98a0-ff7f48f93f01/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:49:37 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 62.205.32.0/19
IP: 217.19.64.0/19
IP: 2a02:2a70::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:12:69:bd:f8:9d:f4:2c:95:5a:1f:99:59:80:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:49:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4fa893e33a821ff66d38f0ebce49911f3a5f964e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4b:fb:29:d5:73:6f:c5:a0:bb:19:e3:48:bd:
28:23:1f:2d:24:91:b6:6c:1e:f9:1d:5c:ee:ad:b0:
3c:7b:ea:72:24:5a:08:dc:dd:f6:66:5a:c5:62:30:
1a:fb:b1:3e:93:4b:e0:2a:b4:46:29:e6:95:54:e8:
b4:33:aa:7b:1d:f3:d3:e6:79:80:fe:95:fe:be:0d:
44:0f:5c:d5:4d:ab:2c:01:7b:91:e0:8c:51:34:cc:
09:84:84:43:71:c9:9e:cb:97:57:72:33:10:e3:8c:
07:ca:cb:0c:68:86:c1:bc:74:2d:c7:ea:5e:bd:fb:
25:82:44:71:04:db:01:50:b3:09:5a:f3:3a:f5:ed:
10:26:e1:53:14:73:72:59:3d:7d:5b:a4:eb:14:cd:
ba:29:24:58:25:d1:88:65:10:75:07:f3:35:9f:ab:
a5:38:64:0f:24:8c:73:9b:b2:29:ad:da:9d:21:7c:
3d:2d:00:b5:0f:f3:54:ca:9f:19:eb:81:f2:46:7d:
f7:c6:02:60:d2:ae:aa:f2:88:fe:52:95:39:55:e2:
a8:86:3c:54:cb:34:bd:40:b4:9a:23:70:d0:5b:39:
9d:bc:65:b7:e9:dd:30:29:41:f3:82:92:0e:0e:32:
1d:e4:bd:5a:de:04:02:29:06:ae:eb:8f:88:32:05:
ed:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A8:93:E3:3A:82:1F:F6:6D:38:F0:EB:CE:49:91:1F:3A:5F:96:4E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/b85caf-f20e-4b67-98a0-ff7f48f93f01/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/b85caf-f20e-4b67-98a0-ff7f48f93f01/1/T6iT4zqCH_ZtOPDrzkmRHzpflk4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.205.32.0/19
217.19.64.0/19
IPv6:
2a02:2a70::/32
Signature Algorithm: sha256WithRSAEncryption
54:7e:f9:8f:fe:c0:c7:4c:3e:5f:bf:4e:64:e4:74:28:90:e7:
98:ff:96:4f:e1:4e:a9:61:5d:a0:52:5f:cc:2a:96:2d:c0:fd:
34:66:05:16:ab:68:4c:40:f6:75:90:d7:5d:81:5a:dc:29:c2:
f4:b5:88:ed:e3:df:16:a1:77:3e:95:2f:b6:b1:aa:c4:b7:7b:
1c:97:45:be:c3:64:be:5e:d7:f1:b5:53:66:4e:75:f5:cc:11:
96:aa:6c:8d:08:c2:6f:ad:63:f8:d8:26:b1:99:b9:c4:a6:72:
48:bd:7b:4b:e0:d2:a5:66:72:cb:c9:a2:6e:fe:c4:2f:ad:fa:
99:f2:da:cd:90:80:8a:1f:ca:95:26:1c:71:6f:3d:61:8a:3a:
3b:c9:e2:63:ef:b9:fe:0e:36:52:af:19:4c:a3:25:a6:0c:c3:
ec:e1:66:d7:d4:50:59:cd:a8:78:d9:59:eb:99:98:dd:f8:e4:
7c:83:20:0e:5c:5c:68:94:28:87:a4:86:14:39:37:45:81:fd:
f3:65:b5:0d:e1:c6:da:f7:71:00:44:bf:69:1b:23:c9:a5:0c:
6d:df:7c:11:59:3c:ee:89:ab:09:c1:1d:be:7a:eb:dd:a7:ab:
bc:92:f7:c2:02:4a:b6:4c:04:ad:7f:e8:a9:f4:90:27:1f:9c:
b3:bf:8d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:28:42 2025 by rpki-client