Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XTJb79i36F40cQQgbYwKuKbg-04.cer
File: XTJb79i36F40cQQgbYwKuKbg-04.cer (raw, json)
Hash identifier: VzXwjJ4zAUyAzsIdKcBs4Yp0EF+lnssQjhiQWU2jRgc=
Subject key identifier: 5D:32:5B:EF:D8:B7:E8:5E:34:71:04:20:6D:8C:0A:B8:A6:E0:FB:4E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221FF296449FFE707CD1469F87C85D42
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:26 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.199.198.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:f2:96:44:9f:fe:70:7c:d1:46:9f:87:c8:5d:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5d325befd8b7e85e347104206d8c0ab8a6e0fb4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d3:4a:f5:d3:18:5f:03:17:89:23:1f:0a:bd:
08:eb:0f:25:97:88:e4:aa:e5:78:2c:53:f0:68:55:
98:2a:ca:77:9c:68:61:77:47:59:e1:f7:21:75:ab:
29:5d:f1:2b:9c:62:9e:08:df:1e:69:e1:5b:7c:ae:
43:c3:fb:bd:ac:21:d0:40:18:76:f8:da:06:8d:e4:
5f:62:07:f3:02:c1:09:b7:09:ec:d9:c9:d6:87:47:
36:f4:72:42:ea:24:2d:82:d7:ce:57:e3:0b:c5:d2:
d7:c2:04:89:2b:66:31:4d:df:1d:9f:8e:df:24:08:
f4:3e:83:77:8d:e6:f1:23:04:61:c0:49:3f:fb:96:
c7:2f:99:b6:be:af:4d:e4:30:37:1c:ee:ec:67:06:
8e:bb:91:1d:fb:17:be:18:bb:84:87:66:89:e0:fb:
7f:fb:46:66:f3:35:c7:66:17:74:b6:08:28:56:f1:
3c:6c:fe:e0:26:6e:fd:03:25:0f:ab:99:8a:5a:76:
cb:ee:37:29:96:f2:7c:77:75:36:6b:f7:6d:c0:19:
b9:34:13:0c:a9:7e:46:72:cd:13:c9:e5:81:07:b4:
9b:77:b3:d5:50:c2:6e:8b:2e:89:f1:04:e7:7b:0d:
24:37:bc:19:e5:ca:8d:5f:2e:47:3e:ff:59:b3:42:
af:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:32:5B:EF:D8:B7:E8:5E:34:71:04:20:6D:8C:0A:B8:A6:E0:FB:4E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.198.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:36:e5:e3:03:65:e1:a5:0a:53:ce:af:e7:80:c9:1b:27:a3:
4c:ce:95:cb:fe:d3:63:cd:c7:1a:1e:27:61:b7:0e:70:d1:48:
7b:7a:d0:e9:df:4e:76:9b:5f:43:be:5f:cb:d0:fa:82:23:d1:
86:78:d7:8c:d6:0c:ad:74:a0:19:59:14:8a:ee:af:d4:ea:00:
9d:ff:de:8d:28:bd:60:dd:91:e5:87:08:f1:4f:97:7f:fa:c5:
93:51:a5:c2:ed:bd:9f:80:e2:1d:a7:56:c1:54:48:fe:b9:9d:
e7:77:31:80:80:f6:95:df:0b:5e:06:3e:f2:b4:f4:d0:36:0f:
82:e3:bb:17:33:14:20:67:92:bd:ef:2a:37:b9:b6:63:24:14:
fb:77:11:dc:c4:db:2b:4c:ef:0e:ca:f7:7f:5c:67:00:6e:37:
ac:60:05:8f:af:f7:6c:f3:04:5f:16:54:e4:48:b2:08:06:56:
f1:c3:6a:79:bf:e4:49:bf:c2:b6:7b:fe:ec:58:de:86:d2:1d:
57:99:38:f4:ca:0e:95:ee:80:8c:dc:23:ff:40:7a:b1:a6:aa:
17:39:45:72:c5:81:01:93:b3:80:2e:72:b7:1a:71:ff:c5:c0:
74:a7:98:dc:e7:5d:fe:5c:69:ca:3f:25:9d:80:9f:01:1e:bf:
2a:d5:83:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:26:50 2025 by rpki-client