Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_EjmUG7G1TxZFdyPKWREhd-S_Ok.cer
File: _EjmUG7G1TxZFdyPKWREhd-S_Ok.cer (raw, json)
Hash identifier: Z7NaxlsNjZB0RHSpgN0mX41INNL58PIUYpQbTYzUn5A=
Subject key identifier: FC:48:E6:50:6E:C6:D5:3C:59:15:DC:8F:29:64:44:85:DF:92:FC:E9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942521F64A92BC6DB09C4B012A9F4D9F29
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:49:30 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.220.68.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:f6:4a:92:bc:6d:b0:9c:4b:01:2a:9f:4d:9f:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:49:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc48e6506ec6d53c5915dc8f29644485df92fce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:98:fb:25:85:32:e7:f3:37:66:b5:e2:36:f5:
f2:88:a7:c6:3d:50:eb:99:65:53:a0:21:47:a4:40:
30:bd:f3:6b:0f:bd:ce:61:2d:9a:41:27:99:77:3e:
7d:9a:40:5f:91:41:ac:06:00:d9:21:ed:44:37:89:
ee:6f:54:ed:47:23:34:11:a5:96:a2:81:ef:08:39:
35:5e:48:43:29:f9:d5:8a:3b:bc:ad:82:07:a9:35:
25:d2:e3:2e:38:16:1a:f7:1f:fa:6a:89:9d:d4:cc:
dd:94:de:7b:f8:a5:fc:7b:dd:9a:31:f2:d3:d5:d1:
67:e0:f6:0d:fb:c1:0e:a1:f7:a5:9d:34:12:57:31:
ed:b7:0a:38:f9:64:18:05:dc:52:88:85:e7:bd:7f:
80:c1:a4:ab:fe:e1:dd:96:25:75:41:6d:68:db:94:
39:40:16:a9:af:45:ca:2e:3b:b9:af:fa:fd:03:61:
9c:84:d2:53:64:96:76:29:0c:18:8c:6f:ba:a9:f3:
04:c5:b3:d7:ae:55:b6:00:b2:c2:01:4b:e1:9a:12:
bb:c5:e3:c9:86:20:15:04:d1:51:7a:03:e1:0d:e1:
08:52:e0:25:df:fc:cd:62:fb:8b:d6:15:07:28:0b:
c1:28:34:9f:61:12:75:cd:38:01:8a:fa:15:e0:ec:
6f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:48:E6:50:6E:C6:D5:3C:59:15:DC:8F:29:64:44:85:DF:92:FC:E9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/3ab6cf-99cd-4ac4-9013-f5bee16ed3a7/1/_EjmUG7G1TxZFdyPKWREhd-S_Ok.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.68.0/24
Signature Algorithm: sha256WithRSAEncryption
76:bf:c4:82:4a:7c:fd:33:c7:07:9f:c7:c2:62:42:f9:ba:ca:
61:27:d8:61:15:04:5d:92:31:02:5b:76:d3:e7:a0:6e:5e:45:
09:30:1c:53:93:55:16:51:dd:3e:08:99:5a:fa:75:ed:91:33:
8c:97:09:23:b3:42:8d:e4:f1:52:58:79:1b:4e:5d:23:e4:39:
02:97:df:3d:d7:e1:2d:6c:90:a3:6a:dd:a1:fe:ec:87:dd:b4:
aa:94:e7:24:a3:1b:28:bb:76:7a:bd:a2:b7:ab:e7:b1:dc:78:
15:5c:9c:90:2e:44:cf:43:75:6d:ed:d6:74:9b:be:42:bb:cb:
50:47:f9:d2:88:27:bc:8e:c0:c6:8c:2f:96:aa:41:06:e2:08:
df:d9:9b:ef:01:98:f1:87:be:6e:38:08:a8:3f:f8:5f:b3:dd:
ef:59:1b:28:db:c5:3e:05:56:d4:0b:c2:7c:6f:74:0c:bc:c1:
55:fb:37:af:17:78:fb:6d:1d:5c:8d:52:f6:11:e0:1d:0e:e1:
f6:48:04:b2:0c:7c:db:23:21:e2:75:0b:9b:f2:e9:b5:bf:80:
94:81:5f:f8:88:36:49:1b:23:5a:9e:0c:79:94:c3:7b:98:4d:
b3:b1:38:67:49:2a:40:54:a8:8a:94:d4:44:ed:0d:8a:7d:d3:
53:6c:51:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:32:53 2025 by rpki-client