Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UFzWGp9t6drMDTySFwbffVCvvW8.cer
File: UFzWGp9t6drMDTySFwbffVCvvW8.cer (raw, json)
Hash identifier: iAtWr1UYuAsZjs/iBYkyVGBvArwSXlhYuUDsqJnSIpw=
Subject key identifier: 50:5C:D6:1A:9F:6D:E9:DA:CC:0D:3C:92:17:06:DF:7D:50:AF:BD:6F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FD6017E9D2CEDF11966382AC17EAA0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0b/a3735a-eccc-41d7-b723-e01237b5fc10/1/UFzWGp9t6drMDTySFwbffVCvvW8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0b/a3735a-eccc-41d7-b723-e01237b5fc10/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:49:09 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.194.27.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:60:17:e9:d2:ce:df:11:96:63:82:ac:17:ea:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=505cd61a9f6de9dacc0d3c921706df7d50afbd6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:20:64:8c:39:33:1e:d1:9d:07:5c:b3:7a:95:
80:63:5f:72:45:12:eb:b0:79:18:f3:cd:7a:42:1b:
6b:65:09:a9:18:a6:a8:fc:7e:1e:39:dd:e1:49:d3:
76:99:d7:d5:c2:99:98:df:b5:99:71:04:01:c3:3f:
95:45:f3:87:82:ef:a5:e7:f6:db:5b:ee:3e:86:94:
18:03:c1:56:97:ad:e1:90:b0:19:29:10:31:bd:12:
08:16:64:9e:b3:5b:a6:da:ae:78:b2:a2:3f:c5:6e:
6f:4b:72:dc:5c:61:89:9f:d9:1e:70:14:74:c4:a3:
ed:c9:f4:87:a4:d2:11:1a:00:44:f2:48:47:c0:92:
fb:60:f3:3d:1e:67:a7:01:25:86:68:68:c0:b1:71:
4b:56:4e:6b:df:f2:f4:50:6a:f9:6a:77:f3:62:3b:
7d:35:98:4d:06:a3:65:b4:ed:66:59:6c:3a:d6:8b:
9a:7a:9a:46:f4:a5:77:19:51:27:e1:1f:14:2f:a4:
03:30:60:28:9d:3f:90:8b:81:68:92:4c:2a:96:51:
d0:5a:7c:10:ee:15:42:ba:b3:0a:82:2c:e4:47:bc:
98:b2:fa:1a:50:01:a2:c8:a7:e8:fa:63:20:95:fd:
c9:2a:a8:cc:a8:15:78:08:21:eb:71:f7:0f:9b:17:
fa:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:5C:D6:1A:9F:6D:E9:DA:CC:0D:3C:92:17:06:DF:7D:50:AF:BD:6F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a3735a-eccc-41d7-b723-e01237b5fc10/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a3735a-eccc-41d7-b723-e01237b5fc10/1/UFzWGp9t6drMDTySFwbffVCvvW8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.27.0/24
Signature Algorithm: sha256WithRSAEncryption
34:3f:df:33:2b:e3:c7:f0:9d:98:6a:60:35:ef:5e:09:46:18:
79:7b:e5:b7:8e:7b:9d:4d:20:5b:51:bf:e8:84:0e:7f:cd:87:
bb:ac:7c:7d:f0:0c:b1:d5:5e:8f:ff:f7:6a:1b:78:8a:46:11:
01:19:aa:95:a4:68:b7:1a:22:04:03:79:e4:93:fa:38:2e:cc:
1f:58:b9:b0:16:ef:b2:9c:51:94:4a:c5:39:1a:42:bf:09:d8:
ea:e8:0d:e5:bb:ba:74:da:b3:a8:1a:a6:52:59:64:cc:19:d1:
0a:5a:48:9c:95:d7:a6:8b:ad:ca:ef:01:9f:9e:00:ef:de:5d:
06:db:42:61:ed:27:c4:b0:0f:b4:77:ed:30:f1:50:31:45:9d:
29:e0:7c:b3:45:dd:9e:e7:db:cd:05:c3:f1:89:5c:90:2c:13:
48:a8:0f:e9:a3:ce:a9:92:38:1e:ee:9f:ea:dc:f0:ca:b8:d2:
ae:1e:95:b9:15:08:1b:25:9b:97:6f:03:ab:f1:01:a0:2e:5a:
47:ef:b8:37:cc:a1:06:fa:65:a6:d9:2c:39:8e:14:29:9b:f8:
42:76:b0:4f:c9:39:fc:91:35:43:4c:3d:b2:12:e0:5f:c6:07:
6f:2a:2b:c6:ed:6b:c8:27:1b:3d:df:e5:1c:84:f0:ce:8d:b9:
8e:c6:eb:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:42:49 2025 by rpki-client