Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XS8h5aT74BUgX2zviK-uGc0GphI.cer
File: XS8h5aT74BUgX2zviK-uGc0GphI.cer (raw, json)
Hash identifier: hTkAydmLj0py98TqRIgv1UX8Nnk3HJ/jnk37oqnOZNM=
Subject key identifier: 5D:2F:21:E5:A4:FB:E0:15:20:5F:6C:EF:88:AF:AE:19:CD:06:A6:12
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194274860D49765104091874BB3F9904BAF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:50:42 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.29.228.0/24
IP: 194.113.115.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:60:d4:97:65:10:40:91:87:4b:b3:f9:90:4b:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:50:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5d2f21e5a4fbe015205f6cef88afae19cd06a612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8d:45:1d:55:d9:f5:dd:bd:64:21:6f:17:5a:
f8:72:78:39:a6:cc:c2:06:70:4c:f4:bc:54:ea:ac:
df:5a:e4:46:f9:d2:5d:fa:2c:6c:fe:1a:0e:38:2e:
ec:c1:0f:28:2a:78:a4:12:f9:e1:3d:5b:0e:3e:92:
38:80:45:b9:45:29:48:b4:74:6c:f9:43:60:58:59:
8c:96:17:7f:f4:0c:bc:01:62:f7:fa:57:73:c8:33:
70:9a:26:d1:79:cd:72:18:c5:8b:a0:f5:01:a8:67:
0b:fe:72:42:d4:83:22:83:85:c7:13:56:3e:88:2e:
d1:02:45:16:f5:25:9e:8e:6a:24:87:72:10:af:a0:
60:eb:9e:e6:3d:14:63:9e:20:81:3f:60:ef:31:eb:
95:85:8e:a8:35:a2:9e:ea:44:cb:ae:1f:fe:23:35:
2a:3c:82:fa:fc:f8:4f:58:70:e2:4d:7d:34:50:91:
9a:86:05:3e:76:27:c6:a0:39:55:ed:81:62:34:0a:
7b:ba:54:d4:43:44:b2:b2:c3:e7:ec:b9:87:f5:1c:
f9:b5:32:22:50:7e:fa:a8:65:8a:60:e3:f7:2f:c5:
a3:83:a5:4a:68:5a:fe:29:8e:f3:9f:ef:d4:34:d0:
4c:64:91:33:12:50:e6:30:4a:5e:1e:31:cb:36:6a:
b4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:2F:21:E5:A4:FB:E0:15:20:5F:6C:EF:88:AF:AE:19:CD:06:A6:12
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/49e36c-74b6-4547-88ab-214a76210fd6/1/XS8h5aT74BUgX2zviK-uGc0GphI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.29.228.0/24
194.113.115.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:c1:4c:64:d3:5c:c3:98:e0:10:30:f6:4a:c2:14:5b:6c:d0:
72:12:38:bc:0e:3b:28:73:50:4e:d7:1b:c1:aa:68:71:d2:44:
e1:d8:24:52:e4:a5:82:16:19:b3:96:ad:ae:25:8c:59:3f:f5:
72:4e:0d:46:05:f4:1d:49:22:14:47:4f:3e:b4:84:01:e8:e8:
d5:ed:eb:8c:86:ec:ab:3b:d4:8d:41:95:77:bb:ad:00:98:7e:
d1:da:13:61:08:c7:4e:64:ab:24:45:5a:86:18:63:7e:de:11:
ea:67:42:1d:c0:06:e5:e0:a3:a3:94:76:66:0d:59:22:8c:3d:
7a:d6:e6:86:99:5a:9f:b2:b1:29:c5:57:39:73:8d:2e:b3:a5:
5d:78:d9:ec:d4:ba:1a:ef:19:c6:d2:ce:c4:69:fe:61:31:4a:
9d:2b:43:db:6b:85:5c:f2:ba:f9:62:18:97:ca:a5:16:8a:f7:
55:e5:e3:7c:b3:72:6c:7c:8d:b3:19:18:6a:9b:64:de:b1:29:
fb:d9:18:c0:1a:8d:c0:17:6b:c0:ec:be:bf:e2:04:65:ba:ce:
35:b7:ea:39:34:71:81:43:c8:73:ba:a5:2d:92:e9:db:82:16:
0a:21:d9:9b:63:0e:7a:5b:7f:00:38:f1:86:f1:d3:d1:12:b3:
35:bc:44:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:17:53 2025 by rpki-client