Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Zp7b-uhlCtvWryB7bqIlZUObSZw.cer
File: Zp7b-uhlCtvWryB7bqIlZUObSZw.cer (raw, json)
Hash identifier: v6owkT6kQrvsIVZD84xY+9D8YLUZ8lXecsFX5LYnU4o=
Subject key identifier: 66:9E:DB:FA:E8:65:0A:DB:D6:AF:20:7B:6E:A2:25:65:43:9B:49:9C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B6206464A54F1E75BC0F7DC0BE57F9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a2/a4ee0b-46eb-4e1f-87ab-9049bcadb64b/1/Zp7b-uhlCtvWryB7bqIlZUObSZw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a2/a4ee0b-46eb-4e1f-87ab-9049bcadb64b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:50:34 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.217.200.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:20:64:64:a5:4f:1e:75:bc:0f:7d:c0:be:57:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:50:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=669edbfae8650adbd6af207b6ea22565439b499c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d2:28:84:3c:4a:75:b1:9b:23:12:db:ab:cb:
19:ce:93:58:79:4c:33:e2:a3:59:33:bc:77:e7:b2:
90:53:05:72:9f:52:3d:c7:d8:41:27:0a:3d:1d:c1:
03:04:ca:e6:03:b0:0f:23:21:37:b0:2f:eb:7b:d3:
08:92:3d:17:2e:d8:22:ab:3f:d2:75:47:ca:f5:1f:
c2:c4:c1:a7:6b:42:95:c6:fc:d5:b9:d8:31:17:d3:
04:62:38:ac:86:dc:30:f6:60:1a:21:49:0e:74:23:
59:a0:64:da:39:5b:37:44:ce:c0:e3:c3:31:e6:3d:
cc:45:e2:d9:a0:53:a5:c6:d8:f2:d5:57:e4:ec:11:
cf:f0:dd:1c:fe:58:6d:15:14:39:15:62:03:1b:40:
4e:e5:2b:05:da:b6:a1:0a:18:3e:af:15:e3:15:c9:
fb:ec:29:f5:9a:31:ea:61:87:84:a7:94:65:a6:ea:
44:ed:84:fb:98:49:ed:e5:da:45:d0:78:72:7c:85:
62:bd:b7:38:39:39:9f:84:14:44:9f:7d:75:bb:ff:
eb:f3:87:30:ed:2f:5f:eb:43:61:f8:45:46:26:43:
aa:b5:07:68:ad:ee:84:22:7f:90:21:ca:e7:4d:c5:
ba:21:28:b0:fe:b0:f2:fa:dc:1c:f8:9a:26:3b:16:
15:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:9E:DB:FA:E8:65:0A:DB:D6:AF:20:7B:6E:A2:25:65:43:9B:49:9C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a4ee0b-46eb-4e1f-87ab-9049bcadb64b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a4ee0b-46eb-4e1f-87ab-9049bcadb64b/1/Zp7b-uhlCtvWryB7bqIlZUObSZw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.200.0/24
Signature Algorithm: sha256WithRSAEncryption
42:c6:d5:a0:e7:45:66:40:73:5a:9a:15:60:7d:94:13:77:52:
01:32:70:07:55:55:1a:e2:4e:15:49:17:34:4c:ff:b1:f2:2b:
52:9c:ef:76:a8:4a:63:6a:7b:e2:93:30:b2:9a:a8:e6:2b:5e:
1d:64:2d:52:a8:6b:91:ea:19:a7:25:e6:cd:a6:93:87:7c:53:
59:5c:62:90:c4:80:3f:e8:62:c1:ec:e4:b2:05:5a:c3:79:e3:
92:49:df:e7:4a:77:29:af:04:ff:6a:22:07:1c:81:2f:2b:50:
5e:bd:8a:f4:ee:7e:51:00:b1:f6:40:83:f5:3f:24:30:f7:c1:
fc:97:b4:29:56:97:77:8a:f4:7a:b6:da:40:51:0e:dc:1a:c2:
a1:7a:4b:70:e8:d2:b0:f2:8f:06:23:3d:31:18:20:8b:0b:ef:
3e:e0:71:cb:d8:5a:0b:72:cd:07:7b:6d:ce:7b:42:fa:87:86:
e7:7e:60:80:63:c5:45:d7:1b:f2:84:5c:9f:ee:08:e9:c4:36:
b4:8e:af:21:b0:32:c2:a9:29:d4:e8:a1:22:4f:c0:20:0c:80:
00:bd:c6:fc:65:c7:bd:46:e0:49:f9:c2:eb:be:49:78:73:01:
f0:d2:92:d8:35:12:3a:52:be:1e:4e:f4:04:28:10:52:72:04:
a4:a7:b3:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:42:55 2025 by rpki-client