Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/X89dJaNmGj5y0nKUVPf_gEtDvbk.cer
File: X89dJaNmGj5y0nKUVPf_gEtDvbk.cer (raw, json)
Hash identifier: Bl4rjlMGJmZAud91uZYYn7JKktqgcHNZnnKA3bzaFzM=
Subject key identifier: 5F:CF:5D:25:A3:66:1A:3E:72:D2:72:94:54:F7:FF:80:4B:43:BD:B9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258F2742B18A5B5FEA8CF51C5E717C96
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4f/251f4a-82d7-46a5-a130-0a9b06e16ddc/1/X89dJaNmGj5y0nKUVPf_gEtDvbk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4f/251f4a-82d7-46a5-a130-0a9b06e16ddc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:48:46 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.105.0.0/22
IP: 2a0d:a380::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:27:42:b1:8a:5b:5f:ea:8c:f5:1c:5e:71:7c:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5fcf5d25a3661a3e72d2729454f7ff804b43bdb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:36:61:55:b5:0f:b8:e3:15:e0:98:2f:48:b5:
bb:6a:2a:ff:76:ee:14:f3:6f:86:29:17:00:1a:0d:
f3:8d:c0:3f:57:fd:30:ec:01:35:d8:36:b8:a4:ea:
fb:00:ca:b1:2d:bf:ab:40:e7:06:49:3b:e3:4d:30:
61:f0:15:7c:92:50:74:48:bf:b8:d2:93:05:bd:4f:
81:28:5e:1f:70:9a:ea:73:b2:e9:81:6b:3c:89:0e:
ef:37:94:be:34:6f:25:31:4e:f9:ff:c5:00:8f:0b:
11:c7:9a:31:9f:22:b5:d6:22:22:60:33:f4:d4:4e:
a7:f7:73:f1:4b:18:e4:ee:9f:50:09:c7:74:b6:5d:
4d:d7:08:3e:99:94:26:92:62:8a:22:74:b3:89:3b:
7f:13:b6:dc:5b:e8:fd:64:80:23:88:ca:63:9e:67:
57:32:4e:0c:7a:eb:15:e3:0e:7a:a0:d0:cd:7b:2d:
4d:4b:dd:66:b5:9e:0f:22:04:ae:a7:bc:26:86:40:
9e:e1:ca:51:71:6b:a8:61:3f:5b:13:8f:9f:d1:aa:
93:91:62:8a:b6:f5:9a:87:67:89:97:a6:5c:ca:a4:
f8:80:73:e0:76:26:93:ed:1f:4c:2a:db:d5:c2:c5:
38:35:69:03:f2:0d:98:c2:20:6c:9e:ca:93:4d:47:
16:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:CF:5D:25:A3:66:1A:3E:72:D2:72:94:54:F7:FF:80:4B:43:BD:B9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/251f4a-82d7-46a5-a130-0a9b06e16ddc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/251f4a-82d7-46a5-a130-0a9b06e16ddc/1/X89dJaNmGj5y0nKUVPf_gEtDvbk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.105.0.0/22
IPv6:
2a0d:a380::/29
Signature Algorithm: sha256WithRSAEncryption
9c:78:3e:cc:ff:82:1e:ed:d6:f2:e1:df:d7:fd:24:60:fd:2f:
9f:85:0c:a2:13:70:4b:d4:64:e4:db:5e:a7:bf:36:f3:de:97:
cf:12:75:62:a6:ae:6a:8b:6a:c6:78:d3:d4:ec:2a:ee:4a:b4:
a7:b5:4d:f6:0c:4b:32:44:ad:ef:de:45:f2:ff:e5:a7:92:15:
f7:af:d5:3a:ce:e4:a5:f1:39:b0:7f:c6:fc:9f:cc:59:5a:8d:
cf:55:2c:38:7c:85:1f:ba:68:dd:c5:34:51:4f:c4:a3:a5:f7:
00:3f:46:15:a2:f6:fa:e1:f6:5e:67:43:46:a8:80:ec:f1:59:
c6:d9:b1:f8:c6:20:7f:a9:92:2b:31:57:6b:df:f1:61:e0:ca:
dd:01:92:4a:f2:53:3b:b6:03:92:11:c3:ac:39:83:b2:b3:06:
29:2a:88:6d:4f:d1:b0:4e:6d:ab:53:a2:73:38:4c:af:af:d1:
83:74:47:67:04:88:68:ee:63:de:a8:fd:a4:d8:54:a5:73:d8:
f1:0d:c2:69:f7:0e:d0:0e:9a:af:9e:e8:3f:10:5c:be:06:f5:
92:e3:ea:ac:f0:d5:27:e4:ca:c7:df:03:da:43:0d:df:c1:55:
5c:5e:51:5c:27:97:be:f4:ba:0f:4b:06:17:3c:1b:7c:c7:c3:
ea:5d:89:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:53:32 2025 by rpki-client