Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YNCwIHYDvkPYSS6YUTeLi08JWU8.cer
File: YNCwIHYDvkPYSS6YUTeLi08JWU8.cer (raw, json)
Hash identifier: 0vU6dvt4jSS0muggPOlMub6AuA6slUoPHg3h0QNWMRc=
Subject key identifier: 60:D0:B0:20:76:03:BE:43:D8:49:2E:98:51:37:8B:8B:4F:09:59:4F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942444C2F6A7044B5970371D9400D0022A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:47:53 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 130.115.0.0/16
IP: 145.5.0.0/16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:c2:f6:a7:04:4b:59:70:37:1d:94:00:d0:02:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=60d0b0207603be43d8492e9851378b8b4f09594f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ce:b4:42:28:21:a5:3f:5d:46:db:2d:d2:99:
67:83:96:1d:6a:c1:69:ab:d4:bd:fc:07:05:00:d6:
ab:9f:31:d2:13:59:b3:97:41:d9:48:5d:04:56:8f:
96:f4:9e:3a:5d:86:a4:e8:e2:4b:c1:f4:07:a3:f5:
9a:54:2d:af:6c:99:d7:47:de:54:78:03:ac:8b:38:
19:da:6d:37:36:df:c9:d5:5c:a6:30:6f:ff:cd:7f:
8f:51:f6:5e:de:e7:5b:b4:7e:91:88:f7:ff:fd:96:
1e:2e:4f:a6:4f:c4:79:ca:57:1c:73:56:32:d3:be:
67:b5:53:cd:fc:ee:21:65:c0:c0:35:52:be:3e:d6:
6d:c2:5b:75:54:cb:73:c7:f5:de:39:cb:2c:82:00:
03:39:d3:98:88:01:fc:66:8c:a3:b0:96:71:73:9e:
1d:dc:67:1a:ff:3f:84:0f:45:87:35:4e:01:d5:61:
fc:cd:59:14:b9:89:50:97:c1:cb:72:bd:27:fd:f1:
50:25:a2:0c:b0:98:7b:80:67:cf:70:f8:dc:c3:38:
ec:52:74:f7:61:a5:8e:0a:57:af:52:5d:be:5e:8a:
08:7e:90:7f:3d:ac:ea:c4:20:37:51:99:af:a6:e0:
8b:df:fd:2f:0d:06:94:f7:b1:32:82:a8:28:4c:2b:
8e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:D0:B0:20:76:03:BE:43:D8:49:2E:98:51:37:8B:8B:4F:09:59:4F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/f5794a-b191-4646-a842-f49fea545e78/1/YNCwIHYDvkPYSS6YUTeLi08JWU8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.115.0.0/16
145.5.0.0/16
Signature Algorithm: sha256WithRSAEncryption
09:3d:94:8d:9a:f1:27:ac:e0:3a:a9:1e:8c:a9:47:55:2f:14:
30:da:49:44:e6:37:57:dc:ce:d0:df:76:64:c6:02:16:9e:51:
94:ae:ac:a0:bb:a0:2e:3e:30:2b:76:06:d1:2e:2c:54:2f:0a:
dc:af:dc:80:cd:50:f0:9f:c2:02:e5:ae:c6:95:be:06:ed:1e:
1e:28:51:d3:7a:71:9f:0e:7c:b9:7c:ef:9f:1a:62:7c:70:00:
18:c9:c3:f4:db:15:b3:1c:c7:52:f7:19:53:0b:0b:58:88:76:
5c:aa:a3:72:a9:ed:40:9a:ee:7d:20:95:30:7b:ad:a9:d5:64:
7d:41:e6:97:a2:df:c8:36:46:71:63:c8:82:37:7a:f4:01:f0:
bb:6f:57:97:ec:5b:d2:97:86:e4:e1:42:37:6b:84:87:56:fc:
48:31:28:7c:42:49:b0:b4:11:3f:dc:b9:a4:be:ce:f4:04:1f:
35:cd:ab:10:d7:cc:3f:0a:81:15:fe:59:0d:b2:17:36:4e:15:
fe:90:6e:d2:df:b5:c0:b3:d6:b2:0c:eb:47:81:ef:bc:3a:c6:
9d:66:0f:29:9b:aa:f3:c4:c7:04:75:13:bf:08:86:e8:ae:02:
70:80:8c:51:f8:56:50:19:8e:b2:7c:97:cf:28:3a:12:48:77:
2b:75:b9:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:36:43 2025 by rpki-client