Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Y_qsKbkFNPkan7DrYxjwAZRRxu4.cer
File: Y_qsKbkFNPkan7DrYxjwAZRRxu4.cer (raw, json)
Hash identifier: wfBMJWp+519rLDM01MMx0aeruXCqtCLq2qfFA6uIDdU=
Subject key identifier: 63:FA:AC:29:B9:05:34:F9:1A:9F:B0:EB:63:18:F0:01:94:51:C6:EE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228E3073D8A7B6F295AF3B19E05F9A58
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:51 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.73.211.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:30:73:d8:a7:b6:f2:95:af:3b:19:e0:5f:9a:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=63faac29b90534f91a9fb0eb6318f0019451c6ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5b:fd:60:5e:d6:5a:1f:fe:07:65:e3:14:8e:
6f:b4:d0:c9:4b:44:ed:f1:58:01:f2:85:5b:cb:a0:
9f:8a:40:55:2e:cf:fa:7c:07:02:9e:08:c3:84:4b:
a9:e8:47:3b:6c:9e:4b:0d:cb:f0:a6:b8:4e:f7:ef:
45:1a:6e:f9:85:1e:83:03:84:4a:9f:a9:99:2c:54:
8d:51:cb:db:ab:e5:ec:85:c5:69:62:6d:3f:cb:65:
41:0f:0a:73:04:7d:1a:ee:74:ab:ba:47:2a:19:09:
90:48:ea:2f:78:87:ce:13:ee:22:72:ea:5b:af:f8:
2a:f0:e9:e5:0f:83:78:99:b6:7d:52:66:5f:0a:c5:
0d:c8:79:22:0a:62:4e:b4:e9:d2:98:b4:7a:70:81:
7f:b8:6b:31:14:0f:f2:6a:d2:57:42:ee:da:20:95:
e8:c3:ac:ff:07:55:c9:4d:47:06:b5:9f:01:8b:20:
ce:4f:a5:e7:0c:63:9c:e9:b9:b7:08:b9:77:cf:d7:
8e:6b:02:d3:17:2e:53:92:8a:b6:90:c3:9c:94:2f:
5f:f4:a3:ee:43:77:16:d7:34:1e:f5:2a:76:3a:af:
68:a1:d5:44:17:81:2a:e6:18:87:93:0f:5d:19:97:
5e:59:e1:4f:76:1c:4d:fe:69:38:b6:ca:58:4b:42:
99:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:FA:AC:29:B9:05:34:F9:1A:9F:B0:EB:63:18:F0:01:94:51:C6:EE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/661285-7965-4fa4-baab-74c1405c3475/1/Y_qsKbkFNPkan7DrYxjwAZRRxu4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.73.211.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:2f:e8:1a:18:2e:77:ec:ed:b5:2b:b0:07:b5:c4:8b:1b:11:
f6:42:35:73:ed:5f:6f:fd:56:cc:c9:e5:3c:9e:35:7f:b0:0f:
0e:bc:b1:60:58:84:b9:a5:7c:d2:ba:75:6b:59:d7:b7:60:bc:
eb:1a:72:4c:56:e4:03:a4:1d:21:e7:aa:90:3b:a1:19:7d:21:
69:90:32:a4:37:8a:08:14:05:81:0f:f5:4e:df:9b:57:69:cd:
97:60:8e:97:38:28:22:02:0a:bb:f1:70:5d:ee:77:4a:88:08:
87:d2:c0:2a:2c:33:df:8a:2f:31:6a:aa:e6:45:81:e9:a8:5c:
26:e1:54:29:02:0a:15:eb:55:b4:d1:d8:e1:8c:35:fc:63:be:
d5:63:87:90:0c:71:49:3f:50:7e:2d:a2:9b:cb:0d:74:ed:ae:
93:df:10:07:c3:eb:f1:36:75:c8:a3:74:2d:70:a2:cf:1c:4e:
3a:77:f7:4e:e7:13:b3:e2:93:a4:29:a0:f5:af:2f:2d:36:4c:
80:8d:e9:ba:c9:3a:04:93:f7:fc:d0:cc:f4:06:4f:5c:e9:79:
01:d6:77:e2:80:f5:19:76:9d:85:f5:c0:99:34:2e:8e:94:87:
47:82:b8:92:20:6f:43:6e:95:3c:86:53:43:29:ed:97:5c:51:
52:27:8f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:35:14 2025 by rpki-client