Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_YmzSchPx7NBKlLWX_Jg0swomrk.cer
File: _YmzSchPx7NBKlLWX_Jg0swomrk.cer (raw, json)
Hash identifier: jX+pZ4cJhlt/+wClNdTEjEz0IyfKydgSNOOHLS6RlbM=
Subject key identifier: FD:89:B3:49:C8:4F:C7:B3:41:2A:52:D6:5F:F2:60:D2:CC:28:9A:B9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B1CB226266A93A03AC652C10B00DFA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/_YmzSchPx7NBKlLWX_Jg0swomrk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:07 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 149.255.96.0/20
IP: 185.88.192.0/22
IP: 2a03:ca80::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:cb:22:62:66:a9:3a:03:ac:65:2c:10:b0:0d:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd89b349c84fc7b3412a52d65ff260d2cc289ab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a5:39:90:62:88:52:fc:38:6d:a5:d9:64:e3:
7c:59:bd:0b:30:7c:08:85:31:2a:8c:ea:00:bf:40:
62:52:ae:e9:84:5a:58:08:bc:a5:b6:6d:42:4a:38:
f3:ec:e3:42:6c:1c:79:16:1a:28:fa:40:46:75:7f:
60:a4:f7:22:61:f0:ad:7c:de:4e:37:2d:8f:ed:ec:
30:de:b5:a2:25:16:3d:b2:65:0d:63:97:c9:32:d3:
6d:36:20:b8:b8:72:61:ac:03:68:11:57:c2:46:81:
c5:01:55:9f:26:39:ff:6c:c4:8e:2b:ea:94:0b:24:
70:94:38:44:85:0b:5d:fa:44:78:f2:01:d3:ae:e9:
26:fc:a4:d8:a6:0e:13:2f:b9:1c:05:fa:be:31:96:
c0:a9:0e:98:5c:d9:2f:e0:68:f5:44:91:02:27:7e:
7d:11:c7:43:0c:c1:55:32:5c:59:d6:c4:76:ba:c9:
3b:86:0c:00:67:30:ed:b9:17:90:25:57:de:6e:2b:
64:dd:f6:7c:c4:2d:fa:bb:4d:b7:c3:fe:5e:27:d8:
3a:8a:a7:e5:1a:66:5e:67:e5:0f:c4:43:a2:a6:08:
d8:0e:4c:36:d7:76:ce:dd:cb:a3:fe:93:e9:ea:00:
f4:05:4b:51:03:c8:60:f4:ac:a9:bb:74:7b:bf:be:
f1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:89:B3:49:C8:4F:C7:B3:41:2A:52:D6:5F:F2:60:D2:CC:28:9A:B9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/_YmzSchPx7NBKlLWX_Jg0swomrk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.255.96.0/20
185.88.192.0/22
IPv6:
2a03:ca80::/29
Signature Algorithm: sha256WithRSAEncryption
95:7e:92:ac:d7:e3:ed:23:75:fa:44:87:f7:88:c6:b0:1d:d6:
ee:9f:40:a7:96:ed:57:46:b8:61:a5:2c:2b:ad:6c:f9:67:cf:
ab:0e:64:09:38:16:4d:c3:68:6b:15:a4:0b:c5:ba:2c:b4:8f:
2a:4b:a4:2d:0b:f7:5b:be:13:b5:b6:e5:b7:3f:05:20:e5:24:
f2:a4:12:52:ec:a1:1b:2e:eb:b5:33:14:33:89:0a:1a:a6:5c:
38:6e:2c:0b:1a:49:03:21:31:bc:79:f7:76:08:a5:c6:f0:90:
fb:65:0a:db:13:f4:8b:3d:32:b6:04:62:b1:ab:73:bc:81:a6:
13:bd:e5:59:a4:83:fa:38:34:81:78:92:af:53:da:0b:e1:40:
89:aa:af:69:24:aa:fb:5b:11:05:b1:9d:57:3f:14:85:61:d3:
1d:2a:65:ba:d6:97:9b:0a:ce:0a:7e:9b:86:3d:af:38:54:f3:
e9:d6:7d:b3:dc:9b:29:7e:98:4b:dd:3b:12:fe:3d:3e:32:63:
c8:a8:0f:b9:74:9d:d1:bb:47:93:bb:75:b6:9e:8f:19:3a:c5:
db:7d:e6:c0:7b:d3:82:14:ce:28:39:92:9c:2f:9a:ac:b8:e3:
39:0c:4a:f0:1b:90:65:38:a5:e4:22:fa:f4:71:94:12:48:42:
7b:41:1e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:22:05 2025 by rpki-client