Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Vjdt7xIkg5phE9HQzdOYEE-q8vs.cer
File: Vjdt7xIkg5phE9HQzdOYEE-q8vs.cer (raw, json)
Hash identifier: zJVB9PcZuX/bojVDXghZduFRLmGALFfwVniNx19dA+w=
Subject key identifier: 56:37:6D:EF:12:24:83:9A:61:13:D1:D0:CD:D3:98:10:4F:AA:F2:FB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421442A7E26D6DBE354FD77492C0AC902
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:23 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 46.232.252.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:2a:7e:26:d6:db:e3:54:fd:77:49:2c:0a:c9:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56376def1224839a6113d1d0cdd398104faaf2fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:96:3d:10:50:3b:ea:b2:70:bb:fe:de:0f:45:
95:b7:f2:05:03:81:c1:30:de:95:e7:1c:00:a5:58:
6b:80:25:9e:b5:a8:97:19:c1:2a:63:2f:f1:67:ec:
04:49:83:00:35:a7:e4:eb:24:74:67:28:09:47:90:
d8:72:32:ed:fb:36:c1:d3:dd:36:9e:78:1e:da:57:
46:fe:18:56:49:57:e0:2b:32:b8:f7:e6:a4:34:b2:
60:d9:9c:83:cb:0b:35:a4:6e:3c:f4:a6:bb:b9:0a:
b3:10:82:13:83:ab:25:17:78:d9:a0:93:7c:aa:c2:
a9:33:b2:a9:71:09:e3:78:6d:90:3a:df:55:2b:9c:
c9:b0:2c:fb:9a:35:41:9f:6f:bc:ad:56:56:f6:8b:
b8:03:e9:a2:f4:2b:25:32:62:c1:fa:ef:d8:ff:12:
01:64:d8:58:27:b4:0b:eb:fe:91:cd:49:b1:52:55:
a0:4e:11:c3:2c:bc:f7:6b:36:f0:4c:f1:95:f3:8d:
9d:c2:c8:db:47:aa:68:7c:78:b2:de:b4:4b:a2:45:
14:07:1d:95:3d:b8:eb:36:12:e2:3c:09:52:78:76:
5f:e7:aa:2f:a8:86:17:dd:99:8b:de:c3:25:f5:9d:
dd:b4:48:32:d8:d7:11:01:fd:95:c2:f8:37:f2:24:
0d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:37:6D:EF:12:24:83:9A:61:13:D1:D0:CD:D3:98:10:4F:AA:F2:FB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.232.252.0/22
Signature Algorithm: sha256WithRSAEncryption
68:56:b5:05:12:76:fa:c8:d9:d5:cb:ea:46:75:d9:3a:f9:b9:
97:49:00:71:51:dc:c3:8b:84:58:bc:4f:f9:5a:d6:67:44:25:
e8:b6:a8:ac:0d:e2:07:b2:e4:9e:76:e6:fc:d1:4d:9c:d4:78:
56:f9:12:b1:3c:61:72:05:a0:9a:c0:c1:26:50:af:45:cb:2b:
3d:81:4f:e1:2f:53:8e:f2:00:a0:2d:2c:dd:10:5a:c4:4c:5d:
56:ea:58:97:c2:d4:6f:9b:4e:bf:c5:3e:c3:73:44:7d:36:ff:
20:7e:53:c3:57:12:99:1c:eb:fd:6e:4b:73:9b:43:34:cb:f5:
b5:5b:09:94:6d:3b:91:d2:d2:2a:45:39:ac:c3:3f:b5:d9:12:
a3:2c:36:ac:28:bb:7c:5d:a6:e4:dd:bb:a2:e0:a8:e7:53:b6:
10:71:d9:eb:59:db:c0:4d:8e:83:42:4a:a9:fc:6a:4e:5a:f1:
ab:74:04:fd:55:c6:fd:b4:bd:b4:84:8b:23:9f:c8:63:7d:82:
f9:42:e1:b5:c8:38:f3:28:5a:22:a0:d1:6e:94:35:b3:5d:86:
23:a2:a8:76:21:f6:94:49:f3:02:9f:fc:c4:60:5a:e1:ea:4e:
c1:a2:f1:a1:b5:5f:d4:59:c5:51:d2:5f:cd:7a:c0:af:61:c8:
c5:4d:e9:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:54:40 2025 by rpki-client