Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bXoBv9NLsT37elNXId7EAc2TEtk.cer
File: bXoBv9NLsT37elNXId7EAc2TEtk.cer (raw, json)
Hash identifier: s+afAC0qMYVtp26OueeGswjQR9mzoeTc9vDvqa/oumA=
Subject key identifier: 6D:7A:01:BF:D3:4B:B1:3D:FB:7A:53:57:21:DE:C4:01:CD:93:12:D9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B56AC4B9A2F1AB041CB32E63CCD6BC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f9/51d6dd-6ce8-466d-a2d4-dc17e53caccb/1/bXoBv9NLsT37elNXId7EAc2TEtk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f9/51d6dd-6ce8-466d-a2d4-dc17e53caccb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:49:48 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 176.116.26.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:6a:c4:b9:a2:f1:ab:04:1c:b3:2e:63:cc:d6:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:49:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6d7a01bfd34bb13dfb7a535721dec401cd9312d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a2:76:be:11:f9:24:81:2a:12:d5:d3:43:71:
c5:31:6f:66:83:bb:96:7f:6d:e2:19:2e:b1:44:db:
99:cb:37:76:54:25:ec:d1:ec:ab:07:83:d2:e8:23:
07:3f:11:a5:3b:73:9a:aa:36:be:6b:ae:90:2e:05:
1e:03:c1:bf:ae:ad:9a:a4:54:63:a3:c5:09:8d:1e:
ca:1f:bc:8d:7c:5a:4e:52:2c:1d:9f:b7:89:07:80:
2f:64:f0:a3:25:3e:26:2a:70:65:04:49:8d:c5:75:
aa:36:de:c7:89:9b:87:c4:c6:b6:c7:b5:2e:cc:d4:
9f:31:36:46:c9:1f:dc:9a:95:29:7c:6d:fb:d0:43:
df:75:17:32:f2:2d:da:dc:16:a9:1e:83:18:b1:8c:
79:55:ff:9a:8e:63:58:bc:19:18:ab:ec:fd:f0:84:
ca:ed:fc:c4:a2:ec:00:0d:36:6e:09:0b:45:a8:64:
b5:62:9b:27:30:e1:e9:c6:68:4e:5d:48:cc:cc:96:
97:37:7b:9e:37:9d:16:20:38:36:9f:2a:21:60:d7:
15:2f:0e:5a:5f:af:9e:84:7e:07:e0:d4:a1:2c:df:
e6:18:be:40:cd:d8:bc:bd:14:7d:93:b8:eb:ce:91:
70:99:42:6c:28:b9:47:e2:cf:0e:23:c6:2b:e0:42:
2b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:7A:01:BF:D3:4B:B1:3D:FB:7A:53:57:21:DE:C4:01:CD:93:12:D9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/51d6dd-6ce8-466d-a2d4-dc17e53caccb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/51d6dd-6ce8-466d-a2d4-dc17e53caccb/1/bXoBv9NLsT37elNXId7EAc2TEtk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.116.26.0/24
Signature Algorithm: sha256WithRSAEncryption
71:e6:50:37:2f:cf:17:1f:84:aa:35:8f:df:8e:b1:8d:ae:b5:
49:ea:44:af:e2:1b:87:15:7f:d2:11:aa:3d:b5:1a:6e:12:d8:
00:43:1e:bf:7e:5c:c3:db:1d:45:04:ab:f3:f4:fa:a9:80:33:
f3:35:63:2b:aa:49:e4:09:2c:b1:9d:ef:89:fe:8a:ff:d6:5e:
f1:13:14:17:3a:8c:d9:02:3c:53:e6:48:0b:07:c5:ae:45:8f:
33:b2:be:0d:2c:39:e3:85:41:63:74:77:11:9e:f6:55:bb:db:
0d:8b:de:9c:75:2a:a2:ed:06:6b:ea:46:a6:23:c1:c0:89:73:
93:ff:4f:7e:a3:e2:4e:ca:8a:de:50:ab:52:d8:2a:b0:ed:01:
b1:53:f2:90:67:29:8f:e7:a4:fe:9b:f8:7c:5d:d7:ad:af:4c:
2f:dc:78:ff:c3:77:69:dc:8c:9c:d6:bb:56:0f:aa:2a:82:6b:
63:21:ff:e6:f1:a5:e2:f2:5b:c9:04:de:db:94:59:a8:7b:62:
da:52:93:6d:81:39:61:8c:28:26:2d:56:da:90:0e:68:3e:39:
b1:41:c5:ed:65:3c:9f:99:79:1a:b0:1b:bc:f6:41:9b:fd:05:
d2:b3:1d:f0:1e:26:a2:1a:22:43:24:cd:22:44:03:68:e2:02:
37:1d:d0:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:09:07 2025 by rpki-client