Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UkEeUtq30L4mdDE7a10udL0RNg4.cer
File: UkEeUtq30L4mdDE7a10udL0RNg4.cer (raw, json)
Hash identifier: GmwdLk3Kh+9LcyIkDCspfHdSeNs5HKol/ei979RGDPM=
Subject key identifier: 52:41:1E:52:DA:B7:D0:BE:26:74:31:3B:6B:5D:2E:74:BD:11:36:0E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221F49C2E7720C51B551AFFBE127CFB8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:47:43 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 217.198.189.0/24
IP: 2a11:ffc0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:49:c2:e7:72:0c:51:b5:51:af:fb:e1:27:cf:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=52411e52dab7d0be2674313b6b5d2e74bd11360e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d9:c8:25:ad:05:5e:63:87:ae:ee:0c:cd:31:
6b:ed:db:50:c4:01:9b:17:9d:9e:1d:44:0e:13:6f:
cb:98:a8:40:dd:8a:f3:f7:a0:4f:73:d3:32:8a:26:
ca:ac:fb:17:83:b3:03:e4:9f:d6:6e:e1:b6:7e:6d:
45:46:ac:5c:d3:2e:90:c3:2d:b4:18:9d:7c:7b:eb:
4c:ff:9e:7f:e5:55:81:e7:94:05:f5:91:42:af:4f:
74:20:08:64:ed:98:16:08:35:a3:63:7f:8a:c6:7f:
ce:3b:3a:1a:b9:10:c3:9f:c7:d2:f2:92:6b:76:a8:
9d:d9:0e:e4:8f:ca:0d:24:5c:d9:e4:07:e3:c9:0b:
6c:72:df:19:c9:4d:c2:7f:89:29:fb:80:a8:0c:e8:
3f:a2:5b:cb:7e:13:5e:91:4f:85:e9:49:29:7c:99:
91:8b:87:2b:fb:92:7f:9d:c9:18:cc:c4:42:53:19:
ef:a9:62:08:69:8f:f7:7b:38:8b:c1:84:ed:19:ce:
46:e9:fa:5c:47:be:1c:05:fe:66:36:11:09:eb:6c:
6c:1c:03:87:29:ca:a4:f8:c4:33:c2:6e:3c:ae:70:
78:e4:eb:ac:ca:6b:9f:31:65:6d:52:80:1b:2b:28:
3a:8d:bb:7e:1a:38:ba:a9:e2:6e:00:12:a1:ab:dd:
e4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:41:1E:52:DA:B7:D0:BE:26:74:31:3B:6B:5D:2E:74:BD:11:36:0E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.198.189.0/24
IPv6:
2a11:ffc0::/29
Signature Algorithm: sha256WithRSAEncryption
67:67:d5:6a:2c:d0:78:49:86:f6:c9:dc:dd:29:07:6b:eb:47:
01:9f:13:ba:1b:6b:66:3a:9f:83:fc:5d:0f:0c:49:e7:47:93:
17:90:7a:d9:67:47:ff:68:12:f6:eb:57:57:56:9b:e0:b1:25:
b3:f9:09:a3:9f:98:8f:f6:51:0f:d4:94:5a:fb:ab:1a:c6:98:
5b:27:1f:66:74:aa:d7:56:8c:0a:43:ea:17:35:9f:a6:e3:da:
f7:1a:8c:d2:10:39:bb:83:92:e2:c2:11:28:a1:36:be:6f:d5:
fd:ee:0d:48:0a:f1:d7:ca:6b:73:e2:16:96:48:7a:50:e6:d3:
48:b2:a9:91:20:b8:0d:eb:cd:be:80:d0:b9:d3:55:de:85:4f:
de:76:a8:af:02:b5:5d:12:1d:81:e9:a7:52:24:76:32:29:9e:
85:9e:9d:b0:ee:88:21:ec:71:e4:cd:84:2a:51:f1:c4:98:e4:
8e:fd:69:da:85:85:28:3a:df:b0:00:36:75:8b:af:6a:49:a4:
95:35:88:10:bf:9b:e9:15:98:38:80:5c:39:1e:14:77:a5:63:
48:b7:6f:f7:11:a3:8d:3e:54:cd:c1:c7:b5:06:d3:f7:7d:09:
0f:8b:c0:cb:c1:df:6e:b9:71:b5:bf:bf:52:f1:e8:1e:9e:eb:
12:b6:7c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:36:44 2025 by rpki-client