Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cNvqB1PfCD5XgrufOAtdeZy3igY.cer
File: cNvqB1PfCD5XgrufOAtdeZy3igY.cer (raw, json)
Hash identifier: 4N42RDfExVJ5C2A2Dgt5olmOz487dGPhxqaTaAVmPTQ=
Subject key identifier: 70:DB:EA:07:53:DF:08:3E:57:82:BB:9F:38:0B:5D:79:9C:B7:8A:06
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA042F2C1E6C240AEF208400F41F41
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:47:46 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 132.252.0.0/16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:04:2f:2c:1e:6c:24:0a:ef:20:84:00:f4:1f:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=70dbea0753df083e5782bb9f380b5d799cb78a06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f7:9c:fb:fe:78:05:ba:ee:3d:4e:77:ef:1a:
c6:10:48:30:fb:f9:c3:91:0e:63:b9:99:c5:23:80:
f7:ac:2f:aa:ce:b7:35:8e:7e:a1:59:2c:3d:b2:6b:
7c:6a:f5:dd:59:38:f1:a1:23:e1:5f:9a:af:a3:01:
52:ce:05:49:0e:7c:e9:71:72:58:93:d1:a8:b9:4b:
bd:7b:6d:40:e2:60:3b:54:27:cd:3f:94:22:2b:52:
56:9b:4c:33:89:2b:6f:3a:cf:ac:23:23:a4:cb:be:
eb:f3:c4:16:c8:f6:51:9f:60:d8:26:4e:71:5f:b0:
ed:d3:2a:ee:38:58:aa:d4:c6:2f:fb:43:c4:96:12:
9d:8d:aa:0b:f2:10:1f:27:91:3f:76:95:4e:6b:dc:
b0:e7:d3:b2:16:73:1d:53:34:5b:08:11:ba:b7:7a:
d9:3b:d0:de:e0:b4:66:af:9f:c0:23:f3:55:44:b8:
d5:ca:7c:0d:d8:89:54:f5:6b:ad:43:25:b8:47:bf:
b5:1a:f4:b2:53:8e:1a:af:d3:bf:a1:94:17:d8:e0:
08:ca:05:8e:d7:45:3c:e2:54:6b:a6:ba:4b:d8:e3:
f6:07:0f:52:10:07:56:ae:83:10:80:db:f7:5a:f2:
5d:85:64:5d:b4:fd:62:2e:62:27:10:94:49:8a:84:
cc:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:DB:EA:07:53:DF:08:3E:57:82:BB:9F:38:0B:5D:79:9C:B7:8A:06
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/deec2e-0cd6-4113-b2b9-2a0cf13173d8/1/cNvqB1PfCD5XgrufOAtdeZy3igY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.252.0.0/16
Signature Algorithm: sha256WithRSAEncryption
64:80:a0:db:5e:54:9d:f4:72:4b:0c:3d:66:bf:74:99:21:e0:
8c:12:df:39:24:ed:d2:82:d1:30:b9:47:5c:18:f3:19:22:61:
f3:17:07:fb:ae:59:ac:45:e9:27:ad:20:43:ab:18:55:41:d5:
c4:dd:ae:02:73:2b:71:e0:cc:0b:c8:09:7b:f1:b7:03:2e:bb:
fb:2a:57:0c:65:99:43:ad:70:2f:96:7b:1e:24:96:5f:a6:8a:
0a:67:96:31:99:91:71:bc:b5:33:cf:1b:36:4a:ba:27:be:dc:
30:52:6c:80:d8:84:32:89:f8:ba:b1:0e:14:5e:52:a6:d0:0d:
7a:47:7d:fd:62:f9:ee:ef:b7:51:30:29:c4:e3:37:34:2d:c1:
66:0e:5a:10:f0:03:2c:ad:80:28:e1:0c:82:58:4d:90:92:02:
3c:12:e6:c0:d8:52:57:b2:fc:2e:26:06:84:ed:36:bd:3f:ac:
f1:5f:f0:b1:2f:bc:74:54:d1:3b:43:42:9b:38:fe:51:24:62:
4e:11:1a:55:b7:95:be:39:61:b7:b2:53:c9:4e:30:5a:f8:f9:
7d:00:57:b0:2a:a6:45:71:1a:c9:8a:08:c9:3a:ed:08:32:c0:
a7:22:6b:62:d6:32:75:af:bc:2e:02:f1:da:63:46:b4:b4:62:
2c:07:70:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:40:06 2025 by rpki-client