Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ar0nEML89VGzH9fMxg3x9rtKksQ.cer
File: ar0nEML89VGzH9fMxg3x9rtKksQ.cer (raw, json)
Hash identifier: SXqc8YKtdSSY9d7d9ClGhFOL+fB8FQ2JhXKqufEXCok=
Subject key identifier: 6A:BD:27:10:C2:FC:F5:51:B3:1F:D7:CC:C6:0D:F1:F6:BB:4A:92:C4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D6BD5B14F7D3DC9B7501F15F3D1625
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:47:43 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2001:67c:a30::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:bd:5b:14:f7:d3:dc:9b:75:01:f1:5f:3d:16:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6abd2710c2fcf551b31fd7ccc60df1f6bb4a92c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:55:2b:e9:bc:8f:7f:13:7a:c2:ea:67:68:b0:
73:12:c4:14:6d:fd:a7:2d:30:81:c8:2b:ec:e7:56:
dc:2e:74:5d:8a:7c:5b:74:d1:3d:b6:6e:4e:bd:ce:
97:71:19:8c:f0:83:9b:8c:ab:73:9a:1a:e5:1c:5a:
a5:56:46:74:b6:35:c9:da:1e:0f:b3:78:5a:75:d9:
14:84:2e:f6:17:d0:e0:a2:aa:c2:c8:25:a4:42:ce:
1e:76:78:ea:5b:13:79:44:9a:7d:ce:d7:8a:75:17:
25:7e:a7:db:93:9b:05:d0:54:42:ea:6b:e2:0f:84:
bb:22:6e:1c:b1:f7:ad:fa:04:f9:62:15:43:f8:73:
6a:b0:7d:7a:c9:9d:54:61:44:9c:5f:6a:0c:2f:48:
62:3a:22:74:de:b6:b1:8b:55:78:e7:01:e7:4a:4d:
2d:ae:aa:0b:05:a7:af:dc:20:cd:88:d1:ec:b8:3b:
a4:ff:22:b2:21:52:47:2c:23:91:aa:bb:6e:bf:6c:
ca:74:fa:0c:38:8d:1c:6c:48:7b:a8:6c:c4:f3:62:
63:79:22:e8:fc:bd:d1:09:da:12:c9:5f:ee:4e:4f:
74:46:a3:42:b2:62:93:45:67:a8:31:96:6d:b0:05:
0f:8c:7a:d7:a1:bb:85:49:41:3f:98:4c:03:65:03:
e4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:BD:27:10:C2:FC:F5:51:B3:1F:D7:CC:C6:0D:F1:F6:BB:4A:92:C4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/62f809-e231-4ef5-9014-74e331dbd07f/1/ar0nEML89VGzH9fMxg3x9rtKksQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:a30::/48
Signature Algorithm: sha256WithRSAEncryption
05:76:1d:0d:34:a7:42:44:e7:86:0c:4f:b0:30:88:d1:f6:f6:
3a:34:47:e3:e7:9e:a8:37:7a:5d:98:c6:09:b6:ba:4d:25:29:
09:33:33:8a:1a:70:5e:dc:d2:b1:6f:81:56:23:99:a0:9f:7b:
f9:fb:56:e0:af:4a:03:e1:25:aa:72:ca:92:6e:49:a1:6b:37:
9b:3e:6f:37:fa:e2:6d:c4:c7:ba:be:5d:f0:f1:8d:cb:31:c4:
46:34:85:95:92:05:bd:21:b2:2b:91:75:54:fc:46:77:ba:f8:
fb:49:92:5a:78:dd:51:4a:fc:88:3d:15:d6:f1:8c:af:d8:97:
6a:03:90:8d:b8:65:bc:d3:f9:59:72:31:e5:1f:d8:e0:d9:05:
d5:7a:66:30:c1:c3:ba:b5:eb:23:10:0d:3a:df:2f:11:01:ad:
c7:18:b1:26:9a:c9:7d:fd:9b:ba:a1:3a:ea:03:30:75:1f:17:
a7:65:c9:2c:ec:be:65:c9:63:7c:6b:f2:0a:8d:7e:20:e1:6d:
06:8c:6c:46:e6:50:81:62:5e:4c:c0:39:df:6a:c7:55:cd:f6:
b4:7c:d7:52:23:d8:c8:07:a9:83:8e:c9:6b:55:d5:76:da:97:
32:b9:5e:e0:8c:57:5d:f4:5f:35:7d:d3:1f:6b:12:81:5c:36:
b5:60:3d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:42:42 2025 by rpki-client