Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aMDy0Hdvfh00kHWIHDXp04dGNAU.cer
File: aMDy0Hdvfh00kHWIHDXp04dGNAU.cer (raw, json)
Hash identifier: xyasl/ZFzPEpRoOtIAZLAk/CZcrpE4doZhQyiz02VJY=
Subject key identifier: 68:C0:F2:D0:77:6F:7E:1D:34:90:75:88:1C:35:E9:D3:87:46:34:05
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194236A10C14CDA51FACB357C9E3B5ECDBB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:49:01 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.0.234.0/24
IP: 2a13:9600::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:10:c1:4c:da:51:fa:cb:35:7c:9e:3b:5e:cd:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68c0f2d0776f7e1d349075881c35e9d387463405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:91:ca:7c:23:e7:62:89:66:ca:2f:a1:f5:2d:
81:6b:db:14:11:f2:22:53:64:0c:65:47:d1:8b:35:
05:2b:5b:cc:fa:4d:1a:93:ec:92:af:4e:7b:95:d4:
ef:3c:80:96:78:44:a8:ac:91:73:b4:e3:d6:68:7b:
4e:f9:25:f6:2e:bf:e4:3e:5f:a4:a7:8a:1b:46:44:
1a:c7:55:12:fa:f3:ee:cd:b3:f5:c6:1f:8c:ec:7a:
95:87:ce:53:ee:0d:be:62:6c:e2:a7:f6:df:23:90:
91:f9:00:bb:dc:78:49:a6:21:ed:45:1d:b8:c7:5b:
ed:1c:d3:49:53:d9:27:4d:9f:33:14:76:29:81:ac:
18:82:50:f2:75:33:72:ed:46:33:aa:f7:81:93:d0:
4b:2d:85:a8:9b:42:0b:b7:d3:6c:eb:5e:be:e0:1f:
c8:d8:36:46:8c:9e:89:ca:4e:38:78:c4:e2:54:fa:
3f:d6:b4:e1:4c:71:3c:53:97:ce:70:eb:6a:97:59:
22:63:f2:bb:93:50:4a:05:12:e8:3a:95:03:fb:83:
5e:e5:5c:42:ed:34:28:78:aa:4a:ef:95:31:58:d2:
dc:ff:16:ae:2b:bb:68:d5:7a:42:ba:b1:94:a9:e9:
f5:35:07:82:6f:ce:12:d7:40:75:ee:82:8b:cf:63:
c2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:C0:F2:D0:77:6F:7E:1D:34:90:75:88:1C:35:E9:D3:87:46:34:05
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/84eedc-a2f6-4a39-a918-f9d9c03d4b4c/1/aMDy0Hdvfh00kHWIHDXp04dGNAU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.234.0/24
IPv6:
2a13:9600::/29
Signature Algorithm: sha256WithRSAEncryption
46:e7:f4:8b:a4:e5:2d:e6:7e:29:34:0d:65:0c:07:da:f2:59:
d1:e0:23:76:70:d4:c0:dc:40:18:17:5e:8d:f8:ea:c9:41:1f:
c3:88:b4:a8:00:91:31:6a:c9:b5:d5:bb:09:62:58:34:1c:11:
0c:68:79:23:f9:fd:e6:fb:a2:2f:b5:dd:9d:88:e2:bf:6c:2b:
60:c9:41:01:07:fe:32:fc:de:4d:aa:84:90:e0:4d:c1:57:2d:
d2:31:44:f2:bb:06:a2:ea:85:c1:1b:08:ae:87:f7:aa:78:e1:
e0:1d:5d:70:22:75:c6:ef:9c:b9:6c:46:33:75:77:b3:63:cf:
04:14:f0:65:22:c6:73:5d:4e:73:e2:83:0f:ec:38:8f:70:27:
d2:13:e5:b4:f0:2a:4a:2b:c6:1b:2d:c2:9b:5b:6f:85:8b:32:
15:0d:4f:37:c5:ec:27:f5:24:63:f4:0d:2d:8a:1b:fe:81:70:
ef:9f:e5:68:0d:11:2b:da:13:70:58:fe:82:ce:b5:45:d6:14:
ca:80:a5:bf:08:0d:de:e6:fa:d5:df:c6:eb:3c:a1:88:6d:b8:
32:a2:f9:94:4f:f7:e4:28:ec:18:64:cb:c5:18:2a:29:47:62:
66:89:2e:2d:51:e3:43:24:e7:29:0c:e6:11:af:0e:a0:74:40:
d6:8e:74:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:45:28 2025 by rpki-client