Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TFFjb96QX4Uh9BFHnoEyHNz0kEk.cer
File: TFFjb96QX4Uh9BFHnoEyHNz0kEk.cer (raw, json)
Hash identifier: rLHZsLn+LR+At23/9Q+s39YbPWEUdpF3vCLc5Fc0y9s=
Subject key identifier: 4C:51:63:6F:DE:90:5F:85:21:F4:11:47:9E:81:32:1C:DC:F4:90:49
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B1F8D0FE0BC30ADEA0A0FD006C2420
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:19 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 45.93.40.0/22
IP: 2a0e:23c0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:f8:d0:fe:0b:c3:0a:de:a0:a0:fd:00:6c:24:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c51636fde905f8521f411479e81321cdcf49049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:09:6f:cc:19:69:5e:54:0b:33:4c:7e:e4:2a:
62:7e:68:80:32:74:25:a8:63:45:d9:67:54:6c:6e:
96:8c:98:5d:0c:9c:76:c2:f0:1b:2c:87:b0:07:0f:
d2:e9:dd:8f:b1:29:ea:82:f0:53:51:f1:ad:ae:ee:
45:00:08:e1:e1:a4:2c:42:4c:09:e2:a7:e4:b1:29:
a5:a4:d4:eb:72:00:87:88:2d:e8:a8:7d:85:08:0b:
eb:c6:99:5e:b6:f6:d1:2c:a0:33:a2:34:80:d5:c0:
31:ba:96:f6:5f:1b:c6:8d:0f:8d:0f:cd:5c:34:46:
08:6d:8f:0e:23:b0:f4:b4:d0:84:2c:3e:81:2f:0c:
81:4d:ea:35:03:32:ee:52:82:75:6f:7f:40:9d:17:
93:9e:21:4b:ed:07:f5:74:cb:05:01:a2:77:aa:15:
d2:48:9e:41:22:15:e9:c3:5c:42:96:70:d6:2d:1e:
fe:86:3a:87:bf:92:fc:d5:05:e6:37:39:de:8c:61:
1a:4c:b5:61:19:27:da:5f:a6:9e:12:c9:b4:1d:ae:
db:57:db:49:69:de:88:d1:26:b7:e1:12:8d:ed:ec:
32:1e:d7:6f:df:0d:74:12:c9:91:4f:08:cb:ec:14:
f4:45:ac:08:9c:03:ab:8e:f7:e4:85:ef:00:91:82:
f6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:51:63:6F:DE:90:5F:85:21:F4:11:47:9E:81:32:1C:DC:F4:90:49
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.40.0/22
IPv6:
2a0e:23c0::/29
Signature Algorithm: sha256WithRSAEncryption
0d:11:98:f1:f8:6b:0d:2c:6b:f3:a4:02:aa:69:a3:01:fc:1e:
ec:39:9b:16:60:3f:0c:36:a7:4f:2d:d0:ea:df:01:17:37:aa:
02:5c:84:6c:9f:40:2b:44:86:a1:6a:bd:75:c7:74:1f:79:03:
88:ff:07:f4:77:08:e6:ca:e2:14:7f:f9:da:73:7b:20:e0:f1:
4e:c1:11:0f:70:a1:ca:b2:4b:e8:35:76:10:64:73:ab:74:97:
9b:e7:6f:b2:07:72:10:07:eb:3b:5d:2c:83:ed:4c:64:77:d3:
de:c4:b1:67:91:20:5d:5e:44:63:53:1f:fe:c7:4d:0b:bf:4a:
db:88:49:33:8c:6f:7b:81:c2:1f:34:c3:88:dc:5f:96:36:58:
a3:c4:c5:94:2f:a3:3d:a7:3a:cc:82:87:d9:2c:cb:88:a5:20:
d2:47:8a:bd:0f:88:64:cd:6c:07:cd:e4:29:9b:3e:1c:1f:bc:
c2:63:d3:61:03:c9:0b:5b:df:5f:a5:e3:35:df:f5:ef:b7:3c:
23:65:ab:fa:ae:9c:cf:8f:7b:cf:2a:6b:41:dc:67:98:4e:4c:
7d:08:5f:41:2d:98:31:30:9c:b0:61:61:51:86:00:88:3a:4e:
54:e3:6b:95:78:53:be:b2:e0:ee:8d:42:76:7e:db:98:d9:cb:
8d:8c:8b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:20:59 2025 by rpki-client