Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XBxjojad99_s88hQhZM0HNNpsjc.cer
File: XBxjojad99_s88hQhZM0HNNpsjc.cer (raw, json)
Hash identifier: mHjiZnHMbHy9jkJpU9Nhcz3nude+k8gVV4vtzBtwcTo=
Subject key identifier: 5C:1C:63:A2:36:9D:F7:DF:EC:F3:C8:50:85:93:34:1C:D3:69:B2:37
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B1E8EB504C2602838924BE33601EF7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:15 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.26.104.0/22
IP: 194.26.110.0 -- 194.26.113.255
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:e8:eb:50:4c:26:02:83:89:24:be:33:60:1e:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5c1c63a2369df7dfecf3c8508593341cd369b237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:15:4e:4d:c1:af:e7:80:de:6e:2d:16:0e:2b:
e2:c7:d4:81:50:b7:ad:3d:d0:73:d0:67:4b:47:b8:
d4:30:63:d9:f2:0b:b6:37:cb:0a:5b:bd:cf:85:ca:
b7:a1:74:61:92:ec:2d:c6:b8:41:c5:0e:d0:a0:c1:
ad:d6:f1:ec:74:d6:5f:69:2d:3e:d6:9a:dc:cb:1a:
79:4b:7e:64:64:80:28:a3:12:fa:3c:c9:9a:79:46:
a8:bc:2f:30:fb:17:b2:5e:08:da:99:9d:53:b2:f4:
49:8c:0b:36:9f:77:20:d1:94:24:b7:c3:36:7b:72:
3e:04:74:ba:ae:01:40:c8:13:f5:7f:6e:fb:e2:62:
fa:a4:33:41:31:56:b4:72:4a:8d:a6:3a:9a:6f:cf:
ac:73:9a:35:47:e0:b8:ea:a7:26:fa:b2:f9:f3:70:
b3:1b:7c:8e:9b:c2:48:05:17:37:38:da:f7:8c:ae:
ff:f0:1a:dc:52:4c:49:76:43:26:19:2e:f5:1f:da:
49:4c:39:68:df:69:8a:49:ab:4c:fa:57:1d:3f:60:
ca:3f:ba:71:71:c4:6e:03:6a:65:9f:de:e7:92:7d:
a2:d7:ce:10:4b:16:c0:ff:9b:e1:93:27:e3:44:1e:
38:e8:c0:b9:44:4c:ca:95:df:95:9e:04:f9:4c:0d:
03:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:1C:63:A2:36:9D:F7:DF:EC:F3:C8:50:85:93:34:1C:D3:69:B2:37
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.104.0/22
194.26.110.0-194.26.113.255
Signature Algorithm: sha256WithRSAEncryption
2c:5e:34:9a:f4:84:20:a1:88:39:21:a0:b3:33:f0:ce:1e:c6:
e1:57:2e:b0:03:5f:5a:7c:52:99:60:4f:93:4b:3c:36:e3:d9:
f1:9a:d0:35:8f:56:8b:bc:54:d4:5b:d6:cb:69:11:aa:5b:f5:
c4:22:ff:62:55:11:26:c3:27:41:7d:76:d5:83:df:b1:a3:4f:
df:f0:56:4f:d6:6d:9d:9c:51:f3:a6:f5:8d:32:7e:45:55:11:
9e:b7:b4:70:07:49:f8:8f:3f:99:16:6f:63:0c:6c:66:74:29:
47:e1:cc:90:0b:95:e0:b7:44:d4:5b:2c:62:4a:76:99:cb:06:
5a:1e:7a:41:be:25:47:42:22:53:60:b9:21:56:c4:c4:cc:30:
2e:f5:69:f9:d7:9e:ff:5d:08:9c:40:6a:85:2c:4e:ca:bd:44:
c6:67:91:2e:71:e5:27:51:27:3d:80:ab:87:6d:0e:b4:a0:4f:
1e:28:f7:c0:20:6c:d2:d2:bd:40:a0:36:92:aa:8a:1f:45:22:
68:7c:56:74:1f:dc:10:0e:ff:e9:76:b7:7e:59:ff:d1:1b:02:
74:b0:0c:eb:c7:2f:2d:33:31:d8:c9:86:76:13:fe:99:7f:6b:
c9:13:9b:6a:a0:02:e3:29:11:6e:fa:29:ca:39:87:90:66:6b:
d8:00:e6:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:27:40 2025 by rpki-client