Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_-QUYBinY6QqUVVjWb8Vv4XjmsY.cer
File: _-QUYBinY6QqUVVjWb8Vv4XjmsY.cer (raw, json)
Hash identifier: zCuPJbIJBMKNrqfy95aG5hgT6ePNnP6LGzkaVQ22KvE=
Subject key identifier: FF:E4:14:60:18:A7:63:A4:2A:51:55:63:59:BF:15:BF:85:E3:9A:C6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D9502B56E40DB6E88286B2C6394A48
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:23 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2001:67c:10e4::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:50:2b:56:e4:0d:b6:e8:82:86:b2:c6:39:4a:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ffe4146018a763a42a51556359bf15bf85e39ac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a3:63:cf:86:cd:77:0a:14:d4:58:39:23:24:
71:54:26:6a:14:93:ee:2e:dc:b1:44:84:56:cd:e0:
49:9e:8f:51:c0:a5:a3:ce:71:bf:03:d4:ec:4a:85:
f1:fe:52:6d:b5:bd:a2:9e:4c:41:a4:66:84:1f:88:
38:7a:71:b9:71:c1:b5:46:d3:34:48:8c:03:cc:50:
7a:fd:45:02:90:cf:1c:6b:56:d0:2c:be:e7:a9:81:
41:4c:1f:70:08:87:af:b9:95:27:90:d3:a5:ee:2a:
cf:2a:d1:5c:15:99:ec:93:2b:76:70:64:a6:ef:1d:
d9:8a:1e:4f:cd:4f:75:1f:9f:42:63:de:04:45:d7:
cf:4f:a9:55:ca:cf:ee:fc:ca:87:f2:93:34:f7:25:
51:ad:c6:18:97:9c:d5:07:2a:84:a8:e7:40:ee:30:
71:ab:d3:2d:c5:a5:8f:7d:ae:bc:2f:0d:16:ab:2a:
b4:df:68:76:12:c4:e7:39:64:1e:cc:24:cf:ae:41:
26:fd:de:a6:fc:83:43:10:e0:e8:1d:1c:27:82:8c:
07:db:d0:84:04:65:1c:d5:ca:a2:2b:7b:48:db:93:
5e:72:3e:a9:30:fe:7e:55:2c:36:9e:95:dd:00:18:
d6:90:1c:09:64:b3:fd:85:14:41:06:d8:5f:f5:b1:
68:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E4:14:60:18:A7:63:A4:2A:51:55:63:59:BF:15:BF:85:E3:9A:C6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:10e4::/48
Signature Algorithm: sha256WithRSAEncryption
a9:28:ad:29:35:14:bb:2c:9f:03:5f:39:46:89:06:33:d9:7c:
25:93:b3:46:69:12:2a:68:ba:77:94:0d:5d:43:fc:56:05:79:
37:d7:7d:94:d4:72:b6:b9:98:94:70:7a:14:37:25:fa:90:fb:
6e:11:92:00:24:c5:21:13:10:02:5f:b5:f8:8b:29:70:a9:59:
3b:60:40:94:49:ca:2f:d8:4a:62:07:bb:74:51:ea:bf:47:dc:
7c:89:2a:f1:9b:16:6f:c6:84:a9:d4:08:78:3b:04:f5:38:c8:
08:c9:b5:7f:45:18:fc:80:64:49:fb:2d:80:c4:45:12:60:52:
d4:d3:f0:a4:63:db:91:bf:64:8e:76:2c:41:16:d7:11:95:d8:
67:01:f8:2d:af:9e:ec:b0:8b:2f:5b:9a:aa:1d:68:84:87:11:
e3:4f:df:52:7a:9e:0f:fe:26:64:4d:4d:1b:e6:be:94:96:03:
ad:be:da:e4:9a:c0:cf:7a:75:a8:4e:78:a4:9b:13:eb:6f:8b:
58:6a:02:1b:d6:1d:0d:32:24:83:59:3d:5a:63:b5:db:b2:5c:
b2:3b:7f:b0:f8:1a:7b:f8:ad:2d:2a:32:d9:3e:f8:d8:15:c8:
70:6c:07:e5:5e:ca:d6:ac:19:09:ad:46:6d:ad:88:5c:19:f6:
58:01:b5:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:41:20 2025 by rpki-client