Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VSyaHJxP95PoiL1YPcqYFcxFdMA.cer
File: VSyaHJxP95PoiL1YPcqYFcxFdMA.cer (raw, json)
Hash identifier: 5GLNuv+zxBoH+2534QSoJ21xP2WGKW8CS3btL/7n5bE=
Subject key identifier: 55:2C:9A:1C:9C:4F:F7:93:E8:88:BD:58:3D:CA:98:15:CC:45:74:C0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B23498B20BFB5F6D2B95DB1C732D2F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:34 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.24.128.0/18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:34:98:b2:0b:fb:5f:6d:2b:95:db:1c:73:2d:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=552c9a1c9c4ff793e888bd583dca9815cc4574c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:97:0d:0e:6f:40:06:68:37:5b:91:0d:47:ca:
77:23:5c:7e:03:fd:52:7d:34:52:22:67:2a:0d:86:
d9:e5:58:ea:e7:e5:5b:b0:93:c7:95:9b:f7:55:f2:
60:5c:4a:c8:95:06:c2:85:62:66:b7:ff:1b:0e:2a:
20:8f:5c:8c:c4:63:0b:77:2d:69:31:5c:31:98:a0:
35:8d:b9:3c:99:b4:4a:5e:e6:60:0d:b3:a2:72:b2:
1b:9c:b6:d3:02:a1:00:de:bb:e9:c6:ae:c0:b9:48:
0b:b4:21:fd:15:56:30:e3:3c:53:50:f1:9a:10:93:
b1:e3:bc:a0:7f:3e:d1:09:d6:5f:5f:49:56:b3:da:
14:df:f4:6d:1c:b8:4a:03:c3:65:9b:43:41:dc:ac:
e4:78:b9:b0:3a:7c:d9:87:bb:c3:36:91:75:8e:d3:
82:bf:21:f6:14:46:19:d6:cf:0b:35:53:ad:1a:58:
df:b8:45:2a:41:f5:64:21:f2:5f:fd:24:91:2c:ab:
d2:c2:db:4f:d7:a4:f3:7d:54:c5:db:2c:5a:b5:e7:
15:b3:23:2b:8e:67:fb:a2:96:80:74:c2:23:e8:a8:
80:48:a7:2b:ed:91:7c:fa:8c:e3:ba:30:64:3c:f4:
1d:78:9e:4c:a8:ee:20:f7:f2:2f:50:e9:8f:ce:21:
07:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:2C:9A:1C:9C:4F:F7:93:E8:88:BD:58:3D:CA:98:15:CC:45:74:C0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.24.128.0/18
Signature Algorithm: sha256WithRSAEncryption
23:b2:8b:1c:d4:9a:83:0b:8a:6d:ad:ce:52:64:e2:06:fc:40:
cc:8d:f9:5f:9d:4e:df:6f:a1:9e:df:4d:c6:c8:3a:0a:31:d9:
79:05:43:00:82:1e:d7:d5:a3:f3:d0:f5:d2:b5:65:ad:95:61:
1a:26:1a:bb:ca:21:99:8a:94:3b:cd:d9:d6:ba:f9:bc:94:4a:
f4:68:03:ce:41:7e:cc:7a:2b:15:51:a1:78:fb:19:2f:f2:6a:
55:7b:01:ed:eb:16:e9:46:19:5d:31:56:43:7f:18:54:eb:9e:
4a:21:1e:5e:c3:6e:a2:c9:76:be:e0:bc:52:60:c9:d4:98:85:
e0:72:77:d9:5a:3f:0c:4e:2c:53:7c:3b:68:c8:52:44:25:e5:
1d:0d:55:9d:a0:60:08:ea:57:89:74:4f:77:e0:16:de:86:7b:
87:03:b6:8f:33:8a:c3:1f:5b:7b:2d:47:fe:d6:a5:fd:1f:e6:
83:4f:0b:98:8d:ff:82:6e:7e:d2:99:53:c2:04:46:fc:db:db:
7a:f7:39:a3:56:df:e9:c0:45:4f:b3:d8:21:50:af:c4:77:35:
2a:43:8f:3b:7a:98:68:6e:00:0e:88:82:b0:6e:f5:14:49:2e:
9d:1d:c1:2d:97:f4:6c:d7:96:9f:5b:6a:3e:2e:7e:27:e0:59:
b1:1d:16:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:53:41 2025 by rpki-client