Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer
File: agFtrScwR7GIhmkUhd7dlxccTWg.cer (raw, json)
Hash identifier: AAdsYqfHVq7IvY0VNUNq8oT3tijjOzrYtIsJtRnWUug=
Subject key identifier: 6A:01:6D:AD:27:30:47:B1:88:86:69:14:85:DE:DD:97:17:1C:4D:68
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266BF09FDB149D98244A50957CE10B6B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:49:55 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.1.164.0 -- 194.1.166.255
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:f0:9f:db:14:9d:98:24:4a:50:95:7c:e1:0b:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:49:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6a016dad273047b18886691485dedd97171c4d68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c8:7c:5f:a6:cb:5d:09:32:ab:19:cd:0e:a4:
7d:d2:2f:03:0a:37:45:64:58:ac:ba:1d:f9:da:7f:
92:fa:c8:30:2a:55:85:9c:64:8b:56:ff:59:41:8b:
4a:00:05:d9:ee:d0:22:5e:3e:49:35:7b:ec:6e:6b:
90:44:4c:f0:6f:c3:7c:14:ed:c9:f8:f1:a0:81:7d:
31:bc:31:5f:3c:ec:2a:34:ae:69:c5:b5:d0:ac:b2:
73:e8:c8:05:be:0b:17:f0:8c:14:fd:84:42:d6:ff:
e3:cb:8e:df:2d:8c:ae:73:96:7f:8d:93:90:c2:13:
6e:9f:67:30:f7:d1:e5:37:a6:81:b5:a2:6c:0a:59:
cc:00:e8:8d:67:a4:ae:c0:47:9e:bd:53:ef:51:ed:
f8:c1:6b:eb:c0:eb:71:ef:c5:4d:c4:37:03:e0:88:
5d:c8:67:66:67:88:c3:27:e8:d5:1c:e5:ba:48:29:
5d:a4:4b:d9:78:b2:14:72:5c:9a:60:f8:86:b8:03:
e7:fa:da:9c:4e:40:d6:16:33:b7:2c:81:7d:06:6c:
b7:6a:10:40:ed:f9:fa:fc:0e:21:c2:4c:12:fe:51:
5f:78:b9:80:ed:d1:f2:c9:4e:f3:15:09:4a:85:f6:
6e:71:36:05:fb:6a:49:84:24:aa:39:86:63:47:59:
4b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:01:6D:AD:27:30:47:B1:88:86:69:14:85:DE:DD:97:17:1C:4D:68
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.1.164.0-194.1.166.255
Signature Algorithm: sha256WithRSAEncryption
57:3d:36:14:e9:22:ac:bd:32:6c:ad:4a:00:3f:fb:2d:37:26:
ca:47:57:9f:18:9d:50:92:07:c0:9f:08:84:37:b0:ad:c1:e3:
5c:db:62:72:e2:b5:b1:7d:0f:13:ab:7e:08:c2:12:65:d1:8c:
8b:d3:89:bb:4e:a3:f8:30:8b:75:c1:b1:b7:3c:d2:cf:1e:07:
e7:d3:0f:d2:31:69:db:22:3f:7f:4b:60:f1:99:31:30:f9:ab:
43:e0:2d:93:d4:5b:54:06:47:17:e0:c6:71:d1:41:a4:68:22:
08:79:99:43:6f:42:cc:9f:2c:e5:57:a8:a1:92:d7:be:47:85:
e5:4d:b8:e8:47:d3:27:1d:a3:8d:12:d4:d4:d9:96:5e:c9:78:
23:45:7d:21:fa:7c:dc:cc:e5:40:1a:17:ac:1e:50:3f:5e:16:
77:97:32:36:d9:2d:66:fa:e0:96:6b:67:ce:91:59:c5:a7:70:
37:49:7e:fc:47:79:ce:28:08:93:b5:45:06:05:56:9c:ed:20:
72:ec:c9:33:65:b0:ce:62:1c:c7:9c:f2:24:7b:ac:00:0d:ed:
00:09:dc:81:8e:21:f8:43:d9:0d:2b:4d:54:90:02:8a:8f:81:
8f:b4:86:fb:70:b4:64:f5:d3:37:e3:5f:68:04:3e:ef:c4:ac:
d5:74:a7:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:58:35 2025 by rpki-client