Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XnKDhygnB8uQxfqebs30S2IGJdg.cer
File: XnKDhygnB8uQxfqebs30S2IGJdg.cer (raw, json)
Hash identifier: rcAOAWIHHrLTjzuIS5sraUGpFwYaQS5Csl13NajUQjw=
Subject key identifier: 5E:72:83:87:28:27:07:CB:90:C5:FA:9E:6E:CD:F4:4B:62:06:25:D8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D610258E58B50D72FD92DFF571DF6E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/17/7395ee-477d-4fae-aa92-6b9ddecd7506/1/XnKDhygnB8uQxfqebs30S2IGJdg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/17/7395ee-477d-4fae-aa92-6b9ddecd7506/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:48:07 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 45.94.184.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:10:25:8e:58:b5:0d:72:fd:92:df:f5:71:df:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5e728387282707cb90c5fa9e6ecdf44b620625d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:de:e0:b9:6e:78:cc:e3:16:1d:5f:6d:ca:1c:
67:0f:79:bb:26:5b:61:a7:8b:b9:dc:a5:11:57:8c:
ae:e1:4b:68:45:6a:7c:73:39:8e:a8:fe:32:ee:70:
9e:c7:f7:d8:36:74:3f:2b:ed:41:7f:6d:46:26:de:
23:a5:f8:3a:52:0d:33:17:e5:4c:53:11:9a:b5:28:
00:93:50:86:2d:82:9f:4f:30:c3:e9:dd:fe:29:de:
0b:dc:ae:aa:27:bf:47:37:ad:6a:8a:e8:00:b0:02:
b8:b6:53:24:1a:58:9e:4d:b5:e9:c6:94:d5:ae:6d:
47:dd:7e:12:d1:a1:b3:53:c2:b9:03:16:87:75:89:
4b:30:24:70:cd:a5:90:52:9e:d6:4e:c3:77:5c:00:
7d:fd:e3:a0:07:fc:96:23:70:55:b6:43:4c:c9:ec:
4d:54:34:73:66:0f:c7:31:40:d9:6b:9a:92:97:a1:
17:be:72:1b:11:6d:0e:22:83:f6:0d:94:8c:0b:91:
01:2b:84:17:be:cd:2a:21:dd:27:47:ba:68:f5:76:
7c:ae:a0:d9:08:f9:fa:9c:f5:2b:56:69:68:2e:fa:
75:ee:1b:12:b0:4a:a9:74:f6:de:ce:ae:cb:62:c9:
c6:35:d0:bb:f9:f9:37:15:23:73:4a:51:14:91:e0:
d8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:72:83:87:28:27:07:CB:90:C5:FA:9E:6E:CD:F4:4B:62:06:25:D8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/7395ee-477d-4fae-aa92-6b9ddecd7506/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/7395ee-477d-4fae-aa92-6b9ddecd7506/1/XnKDhygnB8uQxfqebs30S2IGJdg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.184.0/22
Signature Algorithm: sha256WithRSAEncryption
42:22:c0:15:bf:78:4c:6c:b9:0a:5c:2a:16:c0:25:6f:dd:0a:
6a:b8:b5:33:3d:4f:3d:29:9a:3d:ae:55:5b:bc:94:51:4e:c1:
63:9e:c8:14:f7:96:19:7b:e8:34:39:a4:ff:2c:a1:91:d4:88:
a8:d6:1c:43:33:b9:02:01:7c:25:63:2e:7e:a5:b1:53:1f:58:
d0:6b:82:fd:c1:d8:d3:4d:b0:ca:af:da:91:3e:6d:5c:3b:04:
54:00:39:c8:89:70:4a:16:0b:19:c9:0d:3e:47:d2:5e:9c:0f:
01:3d:68:8b:80:02:4e:97:52:56:99:c1:b3:9d:92:24:94:e5:
36:9e:eb:76:c1:d9:a5:07:4b:81:62:b5:ff:c2:62:30:34:fd:
84:3f:fc:85:ac:f3:ec:a7:72:0f:09:1b:8b:bd:b0:67:26:a9:
20:36:76:9f:06:8c:9d:61:6a:ca:51:00:a2:ae:24:5e:f6:7a:
c2:32:4d:96:4d:0e:f4:ab:27:51:2c:94:70:6e:17:dd:a7:8c:
41:8f:08:c6:ae:6e:80:a8:57:84:95:50:ca:76:8e:51:60:0a:
7f:9f:a9:7f:46:47:d6:da:91:95:a1:ef:8c:fd:54:0c:e1:2f:
4f:02:f4:84:7b:7c:e3:cd:93:b3:c0:60:51:8e:5e:ee:5a:10:
f8:a8:8d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:42:15 2025 by rpki-client