Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer
File: XstMrbut1QD0nKaX1Waidh4Bdgg.cer (raw, json)
Hash identifier: vuN1gcObf+wiuKh6Ubt1b8V8CUNp3XYRawZF6PZWLgQ=
Subject key identifier: 5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420BDBEE998F27D582E364F4C15FA77E6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:21:33 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 80.75.221.0/24
IP: 141.193.228.0/24
IP: 170.62.190.0/24
IP: 213.254.170.0/24
IP: 2a03:e080::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:bd:be:e9:98:f2:7d:58:2e:36:4f:4c:15:fa:77:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:21:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5ecb4cadbbadd500f49ca697d566a2761e017608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8e:73:4a:c0:4d:cc:95:cb:b3:28:51:49:5d:
64:17:27:6d:18:08:ed:b9:f9:68:75:54:06:2b:09:
17:bc:72:73:0a:a1:b8:74:af:ed:d2:66:91:9f:ca:
48:71:b0:53:a8:c4:eb:e5:79:e4:15:c5:b9:f1:4a:
8b:7d:a8:38:8e:55:66:b4:b3:e5:dd:8c:b6:fe:6e:
79:01:4a:b8:f9:f3:85:36:74:94:c8:72:c0:eb:11:
fa:0d:cd:5b:48:70:1b:fb:cf:dc:f8:2a:93:52:43:
dd:76:53:38:38:68:6d:3c:5f:59:4c:64:85:d6:be:
48:47:55:a6:7a:2c:37:e7:38:22:ae:56:e5:ba:90:
07:a6:76:69:6c:f1:1a:83:1f:88:ea:c6:3b:a3:d6:
55:80:ac:2b:71:e8:8c:fc:a6:56:3b:f0:12:69:57:
b5:27:64:c4:28:7b:28:e8:12:64:40:c0:14:41:7d:
00:99:ca:a1:86:23:71:ac:b1:5e:12:b6:60:04:09:
ed:10:2b:a6:8c:2b:52:91:c2:9f:a6:09:33:e3:0f:
bd:cb:e4:a8:cd:aa:65:d3:c8:f6:c0:7d:25:76:15:
b0:5c:1a:8c:89:a4:1b:54:c4:cd:e1:55:eb:4f:3b:
df:36:ff:25:9d:77:78:e7:dd:1b:e2:b6:fb:c4:b1:
5c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.75.221.0/24
141.193.228.0/24
170.62.190.0/24
213.254.170.0/24
IPv6:
2a03:e080::/29
Signature Algorithm: sha256WithRSAEncryption
a9:1a:59:77:a3:67:e6:08:26:26:2e:ef:0d:52:a4:8b:c1:4b:
61:0f:a8:50:03:e2:19:24:df:eb:c4:36:b7:71:6e:97:27:42:
40:b9:13:32:55:e8:d5:7b:95:e9:25:54:09:06:67:23:93:c2:
3f:76:75:46:63:58:3b:0c:fa:a5:e9:b1:2e:83:fe:b9:b5:23:
0a:8c:cd:ec:fb:7c:30:1d:be:93:12:2f:47:df:c8:c6:8f:ef:
29:90:57:e7:0c:3b:9c:3d:20:74:8f:4e:56:09:35:8f:18:22:
77:af:96:9d:3f:f5:24:4b:d5:30:c1:fc:30:dc:fa:c0:56:62:
22:ce:68:fc:59:fb:0d:32:73:fa:d5:6f:d4:7b:aa:e1:26:17:
dd:96:5c:5c:e0:f6:50:99:59:33:cd:1a:83:e7:3a:10:82:49:
f4:f5:81:5d:86:43:3f:d7:88:85:5e:86:30:3d:e5:da:a1:89:
28:e2:d2:6e:bd:d3:3a:fe:1e:96:86:97:9c:65:1d:87:a4:80:
d2:e8:59:3f:79:55:aa:42:e5:33:ee:c6:20:53:59:c0:2a:d9:
cb:91:8e:2b:84:49:8b:c2:b0:a8:c4:1c:83:15:18:d6:83:6c:
a0:c4:30:c5:c1:93:83:38:1a:80:e7:3b:01:ce:d2:62:6d:b1:
7a:96:dd:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:53:14 2025 by rpki-client