Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9CjqymaZZjTK8dUUAIYiHlbPSs.cer
File: c9CjqymaZZjTK8dUUAIYiHlbPSs.cer (raw, json)
Hash identifier: eemr1gRmRVoH4D9OI/vGYpiKZrfdY2SOaNd+lByXzSI=
Subject key identifier: 73:D0:A3:AB:29:9A:65:98:D3:2B:C7:54:50:02:18:88:79:5B:3D:2B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942444DFA3D4ED88D5C4324503710FE6B2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3d/2be7bb-ab98-4ed3-b5ee-10cf65948a56/1/c9CjqymaZZjTK8dUUAIYiHlbPSs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3d/2be7bb-ab98-4ed3-b5ee-10cf65948a56/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:48:01 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.33.157.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:df:a3:d4:ed:88:d5:c4:32:45:03:71:0f:e6:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=73d0a3ab299a6598d32bc75450021888795b3d2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f3:e5:c2:df:52:a0:b4:c2:32:5e:cb:4e:9e:
9e:0b:89:23:33:f7:d3:be:5d:85:16:a6:e0:44:bd:
50:14:50:78:61:5d:9b:75:0c:8e:61:83:a5:8d:4f:
31:15:5a:25:e3:00:6a:74:1d:1b:12:9b:87:e5:7a:
49:a9:ce:ca:d3:78:87:25:6d:49:74:2b:45:75:9c:
3a:cf:6c:2f:9e:14:3f:14:b0:e7:51:10:4b:b4:a5:
a1:6f:a1:f0:84:7c:ba:9f:b1:dc:7f:ec:43:cd:d9:
5d:45:d8:b8:ff:46:86:46:27:31:8a:82:b7:bd:53:
42:fd:a1:54:4c:36:11:fe:57:cf:e1:f4:b5:53:d5:
27:ae:93:98:49:d1:dc:40:ba:30:45:bd:f1:a0:27:
aa:28:12:31:5e:a3:75:d9:0b:fe:0d:91:e9:2f:86:
9a:45:d2:a5:4f:64:de:91:2f:be:91:25:00:07:c1:
35:ec:5c:84:9f:08:04:dc:a5:87:89:27:47:34:76:
ae:90:53:15:37:bd:76:10:e0:95:6c:2f:f6:bc:7c:
47:db:2e:51:d4:3a:89:18:a1:7a:70:c2:ba:04:01:
07:b6:9a:7e:41:17:67:da:9b:92:8b:2b:29:80:20:
18:a8:4b:6b:52:49:26:ba:4e:87:f6:84:17:26:92:
2a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:D0:A3:AB:29:9A:65:98:D3:2B:C7:54:50:02:18:88:79:5B:3D:2B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2be7bb-ab98-4ed3-b5ee-10cf65948a56/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2be7bb-ab98-4ed3-b5ee-10cf65948a56/1/c9CjqymaZZjTK8dUUAIYiHlbPSs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.33.157.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:c5:76:bf:31:db:c5:f3:8f:73:9f:2a:13:26:49:cd:0a:ac:
57:e8:2b:f1:d3:dc:c1:28:dc:54:97:57:c2:03:ea:39:6a:ca:
68:7b:5e:c8:51:b3:40:42:ab:c1:9b:6c:3f:f5:2c:28:35:39:
f7:4f:1e:e2:9a:33:c0:bd:df:04:ea:1c:5b:b9:7a:db:01:8e:
5b:23:7c:7b:c8:a8:d0:52:9d:6e:46:26:3e:94:00:e1:63:ad:
79:18:b5:b4:55:7d:92:3d:d1:a3:35:fd:6a:86:39:ec:e1:e1:
2c:9e:f7:c2:84:8a:b8:25:36:19:7e:83:31:1a:9e:39:92:c3:
a0:e5:80:a0:d8:dc:46:1b:f9:ec:8e:56:2b:e5:16:e7:9c:40:
7c:75:6e:26:2d:8f:ff:52:c6:08:aa:2d:1d:e7:d4:e2:9f:e3:
1f:c3:39:48:53:fb:b9:d3:68:73:3e:72:5e:4b:a3:21:b1:22:
53:0c:73:a7:95:e4:3d:ed:f9:75:f2:74:05:ae:de:3e:47:91:
72:12:a3:29:f5:43:dc:87:c7:9c:e1:c7:f5:60:dc:bd:9b:53:
a3:a0:5d:53:84:76:96:fb:5b:c7:73:92:64:60:27:40:ea:4e:
0f:0f:a3:2e:a4:d5:91:f6:77:e5:25:00:bd:d5:33:74:35:e1:
2d:de:d7:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:25:12 2025 by rpki-client