Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bLyEAvCSNDucA9OGBpco-Jg-YAg.cer
File: bLyEAvCSNDucA9OGBpco-Jg-YAg.cer (raw, json)
Hash identifier: m29UptwcXDRoQ6rpl2upttZTFmlk3WuxmqlUme9vsA0=
Subject key identifier: 6C:BC:84:02:F0:92:34:3B:9C:03:D3:86:06:97:28:F8:98:3E:60:08
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B5F190188E38502DB0408D6AA21086
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:50:22 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 176.116.14.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:f1:90:18:8e:38:50:2d:b0:40:8d:6a:a2:10:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:50:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6cbc8402f092343b9c03d386069728f8983e6008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:9d:c6:ad:24:95:02:e9:f5:25:6a:a2:3a:54:
ca:2f:f5:01:3c:0f:11:5d:04:49:d7:9d:db:56:ef:
48:9b:d4:79:e2:cf:cd:13:06:ae:77:22:4c:1e:84:
eb:d7:44:3a:3f:83:9b:9d:2e:ff:07:6d:9c:74:e9:
11:d2:05:66:71:f2:42:c9:59:94:e4:54:b3:eb:d8:
96:20:aa:8d:88:9e:8f:7c:94:33:af:5c:67:66:fe:
79:d2:f4:ab:68:cb:fd:c6:5c:d3:37:d1:03:2d:89:
70:7b:8b:5d:e1:e7:65:e7:b5:b6:61:ec:ba:92:f5:
8b:96:eb:85:b4:a4:ee:42:7d:c0:27:61:b5:7f:20:
96:ae:2b:a1:7d:84:cc:60:4d:99:d5:35:14:87:f4:
6d:b5:6c:7b:f6:c3:df:92:38:b7:96:68:20:57:53:
8d:6e:a1:90:13:37:03:59:13:95:82:eb:4e:5e:19:
d6:8a:82:0b:6c:ff:f4:3d:e6:15:24:fe:07:53:0c:
fa:f5:de:5c:96:38:94:44:1b:a0:4f:33:95:96:fe:
c3:08:1c:e3:33:9d:ab:c0:9e:24:27:1b:22:a8:66:
02:c8:26:9a:f1:1c:c0:0e:2a:ac:ac:af:43:12:bc:
0a:ab:4e:da:a6:cd:05:56:7b:19:6f:f5:0c:3f:05:
d6:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:BC:84:02:F0:92:34:3B:9C:03:D3:86:06:97:28:F8:98:3E:60:08
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.116.14.0/24
Signature Algorithm: sha256WithRSAEncryption
80:e5:a4:46:96:b3:e3:43:21:46:9b:a2:e4:95:51:c6:10:23:
7b:0c:4e:4f:c8:29:f3:15:1c:2f:43:f3:e5:bf:5c:1a:9b:a8:
54:de:55:10:3e:8c:eb:10:cf:8f:8a:93:49:18:c4:ae:e8:f3:
55:8a:a6:f5:74:1f:3e:82:32:16:a0:86:4d:d1:a8:32:33:a8:
72:7f:96:ad:4c:c2:e4:d8:f4:47:b2:87:35:a7:57:ad:da:f5:
9c:25:e7:f7:12:ef:29:27:88:0f:6d:b9:94:21:ca:72:f8:d1:
26:7f:d9:b4:ec:e7:4b:49:bb:f0:d2:88:38:68:1a:61:c0:43:
a9:38:ed:01:1e:c2:8c:95:41:1c:13:85:a2:5c:9f:f7:a1:7c:
5c:8e:4f:15:f1:9e:f1:ba:15:84:03:94:28:b4:6b:d2:eb:52:
93:2e:eb:20:ad:34:14:bb:b1:d3:ea:f2:e6:ee:1a:1a:e5:81:
ef:a8:9a:4e:3b:d3:32:09:b8:6c:66:a3:02:fb:8e:02:72:9b:
11:26:de:38:3b:e8:04:da:71:5c:19:af:7d:13:bd:5b:6c:7b:
9f:d9:53:07:9c:74:52:cb:ff:53:e0:76:8a:19:2d:b9:24:79:
b2:76:10:03:b1:04:69:4e:ee:56:e2:fe:9e:04:6d:01:ff:31:
26:be:30:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:37:30 2025 by rpki-client