Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2MktbTBPXYGw5LDdONbvmSiTlA.cer
File: c2MktbTBPXYGw5LDdONbvmSiTlA.cer (raw, json)
Hash identifier: VnE3ABRsb7TraQONzSKGhRG8OeGb9k9E4S51ALqpVVw=
Subject key identifier: 73:63:24:B5:B4:C1:3D:76:06:C3:92:C3:74:E3:5B:BE:64:A2:4E:50
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FC2F1D2CA009743F7E2799DAC05573
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/c2MktbTBPXYGw5LDdONbvmSiTlA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:49:00 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 212.36.96.0/19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:2f:1d:2c:a0:09:74:3f:7e:27:99:da:c0:55:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=736324b5b4c13d7606c392c374e35bbe64a24e50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:42:91:3e:b3:9e:cc:31:fb:2d:81:06:ef:ab:
96:34:2f:38:44:d5:20:21:19:a7:36:b7:e8:49:0d:
28:6b:6a:86:cc:d8:66:0a:67:96:8e:53:c2:88:70:
61:95:cb:a3:98:5d:b6:89:0e:64:54:1b:49:84:f5:
d2:14:38:f8:41:4f:0e:6f:74:cd:9d:ba:b4:e6:5d:
0d:22:c0:3e:25:80:de:83:58:bf:28:9f:7d:4e:a0:
3c:59:f3:d2:b1:79:c3:e2:c3:13:77:e9:27:00:ff:
d9:78:c6:f3:40:17:fe:12:65:4f:52:ef:32:67:b2:
a9:db:e8:29:0e:15:1c:04:19:bc:94:8f:d7:90:78:
67:e4:ca:6d:95:a3:a7:a7:08:5a:7d:66:02:26:19:
34:24:1f:8b:33:00:7e:0e:77:74:e4:95:42:f7:20:
58:d4:e3:46:14:24:5a:d2:18:e2:f3:62:e7:0f:16:
ad:68:57:c6:5b:7c:d1:0e:e0:43:f1:50:ff:cd:cf:
8e:17:ee:be:96:db:96:93:df:a9:4b:53:aa:33:22:
f1:a5:4d:df:50:6b:a0:50:ba:38:89:f2:16:0c:8b:
43:d0:9b:30:62:4a:fe:59:c5:aa:03:96:8a:55:7e:
35:b3:7d:1e:18:80:ed:a8:ec:b1:5f:96:4b:96:1c:
cb:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:63:24:B5:B4:C1:3D:76:06:C3:92:C3:74:E3:5B:BE:64:A2:4E:50
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/c2MktbTBPXYGw5LDdONbvmSiTlA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.36.96.0/19
Signature Algorithm: sha256WithRSAEncryption
2e:e2:74:ad:29:d4:83:52:25:d1:f9:39:9c:d4:51:33:34:68:
cd:86:57:56:fb:45:38:2c:fe:2f:32:45:ea:1a:83:f4:0c:3b:
0f:40:c5:a5:8a:cf:80:a2:79:5e:7f:b3:78:49:b3:59:af:e0:
16:85:f3:a1:f7:47:ba:f3:66:ea:61:24:de:0d:36:07:4e:b7:
f3:4b:d9:8c:d4:4b:27:1b:27:d9:82:1b:ca:a6:02:b9:fe:bb:
b8:e2:72:18:99:45:2c:00:e9:ad:98:a3:d5:0e:5f:fe:84:15:
84:a5:3e:6f:f0:fc:93:95:8e:48:94:f5:3b:ac:e8:0a:3e:e5:
99:e3:13:7a:99:41:81:0e:ce:ee:c0:28:a1:be:bc:cb:ee:2d:
d5:a2:a5:6f:d0:b1:a7:47:32:7f:4f:c2:f1:23:0a:96:d3:82:
af:a2:4d:98:3f:b6:b2:5e:1e:96:8a:74:60:05:fb:fa:3d:03:
35:31:cf:c1:72:71:8d:4e:33:a7:e5:41:34:6c:e9:4b:36:46:
20:a7:a6:ae:21:ed:9c:a4:56:26:e0:02:9d:bf:b9:b4:86:25:
55:45:7d:a3:1c:e5:50:b0:22:23:91:a3:85:13:ac:a9:cd:8a:
fc:d3:39:85:aa:24:58:01:9c:2d:39:e6:d5:52:09:c7:29:de:
9d:c8:6e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:42:08 2025 by rpki-client