Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XxSk5lWLq4nTbjuiHJXir91o--o.cer
File: XxSk5lWLq4nTbjuiHJXir91o--o.cer (raw, json)
Hash identifier: 4UgZFzmP7OCkN1UtQGYts3zab2jKti7vmeF6bs5OP90=
Subject key identifier: 5F:14:A4:E6:55:8B:AB:89:D3:6E:3B:A2:1C:95:E2:AF:DD:68:FB:EA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B335F2BA6DA5A109457BA5B484A545
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:48:32 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 195.182.50.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:35:f2:ba:6d:a5:a1:09:45:7b:a5:b4:84:a5:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5f14a4e6558bab89d36e3ba21c95e2afdd68fbea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:03:e8:10:e4:0a:ca:e3:27:f2:4f:c0:b8:59:
bd:88:2a:07:f6:c6:c9:31:6f:f3:98:74:42:9e:87:
88:59:9e:a1:27:22:b6:7c:94:3b:82:62:db:03:ea:
67:74:3f:b0:d5:fd:fb:80:97:7f:2c:13:60:cc:9e:
ff:7e:ad:74:69:2e:a4:3a:a0:ef:8c:dc:9f:aa:af:
52:4c:cf:43:82:53:1a:e6:10:e3:6c:91:54:3a:23:
30:de:23:7d:00:7b:f9:41:60:ca:06:f0:66:7a:e3:
4f:ed:91:5d:e2:24:4a:a7:9b:21:f3:c6:4d:b9:9a:
d6:4d:40:1a:09:cf:b2:0d:8d:98:b7:ba:91:58:01:
18:ed:4b:56:7a:99:8a:68:b1:bc:82:64:94:91:a3:
a8:c0:61:c3:31:e3:df:13:ce:db:c5:45:1e:4e:4b:
df:61:31:af:e2:0c:8d:3d:6b:d5:8a:aa:9d:56:d0:
58:de:b0:70:95:a2:3f:5b:7b:bb:54:c6:f5:8b:a7:
c8:6b:fb:64:4c:40:3a:05:4e:a0:ee:1d:a1:82:35:
86:b8:66:e6:69:10:b2:5d:06:b3:bc:f0:71:f7:e6:
66:6b:47:2c:3d:61:0d:47:c0:26:94:68:e1:22:2e:
1e:0b:d4:25:d9:63:b9:d2:f3:93:ad:63:1a:a5:bd:
5a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:14:A4:E6:55:8B:AB:89:D3:6E:3B:A2:1C:95:E2:AF:DD:68:FB:EA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.182.50.0/24
Signature Algorithm: sha256WithRSAEncryption
04:4a:e2:e2:f0:c2:19:ec:0d:b2:c1:3e:eb:9e:43:f9:c0:99:
83:f4:76:d9:28:77:ad:53:54:e1:53:49:9a:05:ed:49:7c:59:
3f:ec:ee:0f:c2:7a:69:85:20:a4:9e:18:b5:0c:64:5b:0c:d7:
46:ff:a1:00:25:3a:2b:dc:c4:c3:30:5f:76:a4:85:cc:71:92:
b9:1d:28:5d:d1:ce:f6:eb:9f:91:8f:c7:fe:f4:34:8e:79:ff:
22:e5:1f:02:80:5e:81:b3:f1:b8:92:83:18:7e:02:5e:db:d8:
b5:ca:8a:c0:de:b8:62:3e:14:a8:55:43:c7:26:53:0e:ca:ce:
ac:bf:f9:5e:ee:76:ef:6b:8e:a1:f9:4c:86:1b:ef:ad:73:cc:
92:11:4b:7f:91:f8:97:3d:15:25:40:0b:2d:a4:77:cd:5c:8e:
35:46:1b:c8:8f:7b:f4:3b:d6:e3:bf:9a:3f:bf:db:47:39:15:
86:a0:8a:62:d4:20:57:ed:a0:1a:19:af:6f:a1:44:a0:c5:b3:
84:27:53:c3:b3:f7:01:54:30:f0:bf:99:0a:86:87:0f:55:6d:
92:d2:5e:38:d8:e8:d6:74:06:9b:82:07:b7:46:74:eb:67:07:
0b:b5:3a:a2:8a:11:6d:19:25:ed:85:a2:80:21:b0:a8:c4:a0:
14:12:ed:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:11:32 2025 by rpki-client