Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1zOqpdLKQWssmKvRSwCKAMWqrs.cer
File: a1zOqpdLKQWssmKvRSwCKAMWqrs.cer (raw, json)
Hash identifier: YuzxAc4MdvKffZOyIrAO14yfLssIToCdVE3IZeWPprA=
Subject key identifier: 6B:5C:CE:AA:97:4B:29:05:AC:B2:62:AF:45:2C:02:28:03:16:AA:BB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942444D7288B3474CC782F7D869DF81B0A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:47:58 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 45.91.122.0/24
IP: 91.103.141.0/24
IP: 2a13:9b40::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:d7:28:8b:34:74:cc:78:2f:7d:86:9d:f8:1b:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6b5cceaa974b2905acb262af452c02280316aabb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fc:d0:4b:a9:f5:3e:3b:fd:40:e3:15:36:f1:
7f:62:3f:77:80:56:fe:eb:af:e7:46:cf:aa:5d:6a:
e8:bf:7b:58:0d:44:56:a5:7e:9c:5b:06:79:34:79:
51:df:7e:d8:03:a9:23:23:d2:e7:87:d3:59:bc:67:
1c:6b:1f:3a:60:f5:11:b9:b9:6e:ee:0c:a0:66:98:
59:34:18:d7:e1:64:01:1f:92:5e:1d:91:34:e3:1e:
5a:c9:87:e9:dd:f0:15:c7:92:93:89:5e:11:e8:e6:
a1:ca:d3:44:bf:e6:43:88:95:7d:44:04:4a:47:46:
c6:85:68:e6:a8:5b:7f:ff:b9:7b:38:eb:b3:45:11:
0e:c9:e1:80:ec:92:98:22:6f:14:04:46:35:44:6a:
8d:92:91:c0:13:e8:d2:01:f9:28:84:f9:be:d8:53:
0e:27:0d:6d:6a:e7:a0:aa:ac:c6:3b:3a:bf:fc:aa:
31:0a:91:ae:d0:ff:d4:85:f3:a7:a7:35:34:93:82:
a4:f2:81:59:69:9f:d2:be:8e:d9:b3:60:78:46:5c:
2c:ec:a1:39:df:55:5a:54:73:44:01:1f:d4:4d:29:
08:a9:73:52:af:42:9d:ce:46:80:b4:6c:0a:18:5a:
9d:ed:9c:ad:d2:39:bb:c6:0e:ce:db:1f:b5:01:0c:
75:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:5C:CE:AA:97:4B:29:05:AC:B2:62:AF:45:2C:02:28:03:16:AA:BB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.122.0/24
91.103.141.0/24
IPv6:
2a13:9b40::/29
Signature Algorithm: sha256WithRSAEncryption
83:0b:8b:d1:10:29:f8:2c:7b:ee:8f:06:2b:3c:72:d7:01:fc:
30:48:ea:46:17:c6:bf:6c:7e:66:dc:14:9b:1d:f8:ef:ea:be:
f4:29:fd:d2:f1:0b:3d:9a:db:c5:7c:55:41:a3:38:75:02:81:
85:61:68:de:1a:8f:29:d4:55:95:af:c1:41:a0:e1:75:39:62:
0f:53:f8:24:1b:13:46:fb:b6:f7:1c:e9:93:7c:09:bc:48:46:
b9:a1:1c:ac:3b:f9:6f:2b:41:8e:ab:ac:a3:46:f7:5b:8b:5e:
8e:7b:fa:b3:75:fb:81:74:c5:54:32:66:d6:85:2e:aa:70:80:
b4:c2:38:6e:55:4a:19:e7:0d:32:81:cf:7b:a0:85:ee:84:99:
7a:2d:e1:f7:71:ae:d7:63:a6:47:55:12:b2:ef:b8:93:b3:b5:
f0:88:dd:f5:46:69:63:84:c5:5f:75:21:d3:8b:eb:b0:a8:62:
fd:6d:3b:ed:9b:66:a4:af:57:ae:97:10:93:c6:1a:2f:44:fd:
f4:e5:91:87:45:43:1a:3f:d6:c2:e5:88:b6:ce:9a:f6:5e:d9:
fa:4a:81:a6:d2:16:1d:31:ee:bb:c8:e3:42:23:a3:ca:70:aa:
bd:57:f4:a8:57:55:ba:e3:46:eb:26:54:aa:d6:62:f5:b4:dc:
9b:f8:a2:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:58:40 2025 by rpki-client