Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZHU9ILmKDudww7UWaj9KB_BRW90.cer
File: ZHU9ILmKDudww7UWaj9KB_BRW90.cer (raw, json)
Hash identifier: rmtO1h+iiBqJWbj+eqKHZKcTaTxSo5Bw/E4XrRw/AVw=
Subject key identifier: 64:75:3D:20:B9:8A:0E:E7:70:C3:B5:16:6A:3F:4A:07:F0:51:5B:DD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194252212546558CAB6AEE073E377082955
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8b/ebed7d-5090-417a-b5b8-aa995902b84b/1/ZHU9ILmKDudww7UWaj9KB_BRW90.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8b/ebed7d-5090-417a-b5b8-aa995902b84b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:49:37 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.37.253.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:12:54:65:58:ca:b6:ae:e0:73:e3:77:08:29:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:49:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=64753d20b98a0ee770c3b5166a3f4a07f0515bdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f8:67:c7:6c:0d:f0:b4:d7:c2:36:ee:dd:89:
b3:a0:47:26:c9:77:84:71:99:0e:00:77:b8:97:e6:
dd:83:dd:56:a4:65:11:8a:10:df:08:be:72:f4:54:
65:05:77:65:f3:8f:8f:19:84:b6:57:1b:ea:d9:b7:
93:76:be:ac:55:39:d2:aa:ea:1c:50:80:eb:2f:ea:
ad:66:1b:c3:a7:5d:ed:6a:45:6a:ac:10:5e:9e:5f:
54:6e:ff:2e:a5:fd:96:53:4a:37:95:86:ea:72:1f:
6b:8d:09:8b:74:a8:a9:46:44:f9:6f:a1:a7:b1:d0:
f8:0e:34:36:b0:cb:ba:b4:b9:b4:a5:33:ca:30:e7:
f6:46:bb:96:14:3c:4b:14:56:07:02:01:15:58:12:
c4:4b:b5:ee:7d:09:07:35:e9:10:c2:8d:d1:67:1b:
9f:34:c2:c8:25:86:17:3a:84:cc:d2:f9:46:ac:d6:
1a:72:83:97:d9:7d:cd:3b:96:c7:56:03:aa:c0:10:
1d:1a:7c:62:b8:92:c4:d0:f3:32:f9:8b:ac:f4:73:
b8:86:97:98:ea:a1:7b:fb:1c:97:ab:4b:47:52:35:
32:ac:42:28:e2:1d:3d:0a:ce:73:07:13:52:c5:72:
9b:b6:76:0c:3e:97:b9:98:7f:b9:5c:b8:db:9f:21:
7e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:75:3D:20:B9:8A:0E:E7:70:C3:B5:16:6A:3F:4A:07:F0:51:5B:DD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/ebed7d-5090-417a-b5b8-aa995902b84b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/ebed7d-5090-417a-b5b8-aa995902b84b/1/ZHU9ILmKDudww7UWaj9KB_BRW90.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.37.253.0/24
Signature Algorithm: sha256WithRSAEncryption
20:22:61:8e:bf:59:61:2a:5b:bf:fc:27:bd:0a:6c:1e:59:20:
46:5c:9c:b7:00:83:90:5e:11:1d:24:eb:d1:6c:50:cd:1b:fe:
ba:72:a4:10:76:f2:9d:6a:61:d4:3b:ba:c1:b1:b5:bc:4a:cb:
74:c0:d2:0c:e6:d4:d0:3c:be:a1:5b:37:79:06:35:ca:e5:e6:
9e:4d:79:d5:1c:c8:11:55:76:cb:ad:e6:ce:68:c3:b1:f7:9b:
99:80:59:9e:e4:e6:85:ad:14:74:63:c0:be:5f:4e:90:85:a1:
e1:30:af:46:83:83:49:d1:4e:4e:ab:8c:a7:a5:97:10:9f:3a:
ad:1c:83:47:13:8c:e8:fd:9e:d0:14:34:d6:d4:d6:9c:19:2f:
92:e3:e6:db:8e:af:3d:3f:20:48:2e:90:61:fd:7d:5e:96:a7:
73:62:12:cd:05:7d:8d:7a:f9:cf:41:c0:b6:08:2e:98:11:9d:
57:7e:5c:16:56:f1:4e:73:99:23:22:fa:11:c9:eb:98:13:62:
f7:c9:51:8f:f9:5d:8a:51:6d:a6:45:e1:9c:57:11:5d:48:fe:
f9:92:ae:93:66:8d:92:32:83:c9:bc:61:b0:ea:d2:ad:e4:e2:
13:b7:40:1a:e5:9b:22:16:81:b4:e2:d6:a4:b6:6a:96:3f:2e:
00:2a:f9:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:53:40 2025 by rpki-client