Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8kK0VHUMmptYuEwRteI-Fv4LpQ.cer
File: c8kK0VHUMmptYuEwRteI-Fv4LpQ.cer (raw, json)
Hash identifier: hdqFFhcyoIGuvF3AbY59YTRvr+aB3WKYFirmjK8W/SM=
Subject key identifier: 73:C9:0A:D1:51:D4:32:6A:6D:62:E1:30:46:D7:88:F8:5B:F8:2E:94
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B20DF6DE97C1A93AA201700199A684
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:24 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.25.184.0/22
IP: 188.213.234.0/23
IP: 188.215.18.0/23
IP: 2a00:8220::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:0d:f6:de:97:c1:a9:3a:a2:01:70:01:99:a6:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=73c90ad151d4326a6d62e13046d788f85bf82e94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:79:4e:20:5e:77:4f:8c:b6:bd:4c:7f:32:31:
1d:50:b0:18:ab:58:27:9c:ec:7a:69:93:f0:8f:69:
2c:95:2b:71:1b:9f:b6:df:1a:43:00:b9:46:90:96:
db:ca:0e:fa:47:6d:cd:05:0b:ab:96:cd:38:63:80:
e1:1b:c2:93:cb:16:b6:b6:30:67:dd:49:0d:5c:3b:
39:98:56:d7:fb:57:8d:65:03:c9:d7:74:24:1d:be:
0e:1f:ca:c3:fd:f7:85:90:7f:ab:7e:86:df:18:98:
04:28:23:42:43:5f:c2:53:e2:78:d6:4d:c1:5e:12:
82:6d:1a:38:91:cd:56:60:25:92:f4:55:18:eb:7a:
9a:25:23:29:a2:23:39:ba:0b:b7:fc:b5:16:20:4e:
75:c8:f5:db:2e:d4:cc:7a:a6:8b:f2:ef:19:de:52:
88:dd:eb:e9:67:48:2b:c6:e5:98:4e:d7:1c:ec:fa:
c4:f0:9f:24:40:75:8d:81:17:65:74:3f:18:90:07:
bd:c9:bf:96:97:7c:94:41:58:6e:73:e3:8d:51:e6:
dd:03:53:c7:24:54:b2:65:97:4e:42:c8:18:f7:dd:
9b:4e:c1:ba:23:e6:d0:d0:56:3e:97:98:f2:6d:59:
4f:01:f0:69:5f:98:1a:5a:f8:4a:0b:f3:88:f0:36:
45:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:C9:0A:D1:51:D4:32:6A:6D:62:E1:30:46:D7:88:F8:5B:F8:2E:94
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.25.184.0/22
188.213.234.0/23
188.215.18.0/23
IPv6:
2a00:8220::/32
Signature Algorithm: sha256WithRSAEncryption
a9:0e:51:5b:10:50:c0:bf:80:b2:d3:6a:32:c6:97:18:ff:13:
a5:ad:58:14:b6:86:80:14:0d:35:f8:e3:af:d3:81:09:fb:76:
81:93:da:b5:8b:6c:2a:53:68:9f:8c:c9:3b:ff:74:f2:17:31:
11:a1:63:3f:7a:fb:ae:7d:bc:fa:c0:0d:ba:ae:20:db:5a:9a:
c0:e8:1a:82:81:cc:1a:c3:61:b4:c5:ad:dd:31:3a:22:87:44:
2f:d5:7a:cd:8d:5f:4e:83:1a:d2:7f:e6:55:7f:cd:2f:ed:c4:
bf:e5:a4:74:cc:64:14:63:3a:9f:be:e8:a1:2a:a2:59:93:58:
6a:37:c2:3e:4c:d9:b0:60:0f:c7:4f:f3:45:98:7a:84:e5:90:
6d:29:53:88:82:fe:12:1d:18:d9:35:fa:04:b5:99:8b:86:0b:
68:a2:2c:04:c6:6e:ea:cd:7a:f6:26:02:91:af:7b:31:7e:b2:
57:9e:59:8b:78:70:63:6e:02:e7:b5:b9:28:6f:49:3e:bb:38:
47:3f:b0:13:8c:7e:38:6d:24:47:c2:3b:f2:f9:24:22:fa:0f:
72:24:fb:ea:36:35:b0:72:a2:51:28:cb:44:06:40:01:0f:53:
ed:6f:4c:ad:0b:5c:eb:f9:be:c4:ef:da:8e:20:2e:f9:40:ca:
d1:5f:e7:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:25:36 2025 by rpki-client