Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cZLyKnioBxsCo2Ko2zPo8_ct00g.cer
File: cZLyKnioBxsCo2Ko2zPo8_ct00g.cer (raw, json)
Hash identifier: MRgATiiIJm/10NezR5p+y2ajQccdn3mivyoCIwa9Wm8=
Subject key identifier: 71:92:F2:2A:78:A8:07:1B:02:A3:62:A8:DB:33:E8:F3:F7:2D:D3:48
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258F68D220367C6D538B3EED466E013D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:49:03 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 192.145.108.0/22
IP: 2a09:5d80::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:68:d2:20:36:7c:6d:53:8b:3e:ed:46:6e:01:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7192f22a78a8071b02a362a8db33e8f3f72dd348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0e:04:e6:d5:c6:2d:7d:19:16:7a:93:49:c1:
18:a4:b5:36:90:e8:58:aa:7e:a3:65:e2:65:af:ca:
ce:a4:c9:ac:d3:9a:c2:65:6b:84:f1:b7:0f:38:f3:
f2:63:fb:47:2e:12:78:b1:59:75:5f:d9:ee:5b:6c:
02:2b:44:94:5d:1a:ac:38:1a:96:73:0d:fc:d3:57:
20:8c:74:64:46:b8:d5:7b:64:12:b4:b2:33:b7:7a:
88:57:de:c7:23:3c:b4:c1:44:03:00:4c:4e:0f:fa:
27:98:a5:32:5a:61:db:7b:51:3e:80:7d:c5:c5:76:
bd:7c:ea:e9:dd:10:bc:8f:e4:1d:6b:eb:af:83:e9:
2d:ac:82:03:24:9b:0c:a5:e8:fa:d2:c1:20:3f:90:
09:8f:0b:6a:6e:01:12:ac:e9:b2:64:37:b0:e4:f8:
e6:9f:dd:65:b1:ff:47:b5:74:64:1f:84:38:28:90:
a5:94:c3:a9:6c:f5:d7:9f:78:25:de:fc:e1:42:6b:
2c:88:21:05:76:f0:a0:74:34:95:da:63:35:c1:6f:
75:f3:f3:ef:85:31:a1:ac:19:ef:1a:dd:57:57:03:
e1:53:91:41:a0:97:7f:ab:2b:0c:91:4a:3b:1c:08:
ab:82:08:0b:ad:3b:a8:5c:70:dc:6b:fe:6f:44:ab:
d9:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:92:F2:2A:78:A8:07:1B:02:A3:62:A8:DB:33:E8:F3:F7:2D:D3:48
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f7453d-96ec-4d4e-9f3e-0e8bc8e812ee/1/cZLyKnioBxsCo2Ko2zPo8_ct00g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.145.108.0/22
IPv6:
2a09:5d80::/29
Signature Algorithm: sha256WithRSAEncryption
6e:ee:3a:c6:c3:1c:0f:91:2c:62:62:3f:45:8b:25:1e:51:c8:
44:c2:a9:e0:c3:04:3e:2c:db:c4:f9:c6:6a:ea:7d:ca:8a:7a:
bd:6f:c2:71:6e:6f:98:7b:a4:bc:5b:93:b9:8b:42:15:ff:52:
4c:e3:c9:82:f6:91:34:b0:5a:01:42:2d:6c:89:be:be:a1:7e:
ac:7a:32:74:93:29:92:12:eb:f9:44:04:11:34:f8:44:b8:0c:
f3:53:a6:3f:4f:ab:8b:85:a4:d0:2b:2b:ad:ee:f6:95:69:49:
43:aa:0e:d1:58:d2:fe:98:35:d4:b4:2b:42:0b:da:88:8e:f8:
91:b4:a7:8f:32:11:f7:06:de:fb:e8:58:5a:41:06:4d:9e:a4:
5e:5d:2c:f2:68:77:54:b5:38:ac:ef:4e:04:62:98:97:b2:cf:
06:53:57:78:9d:11:95:cb:e4:3e:9e:70:f4:5a:f5:1b:5a:41:
33:8e:d2:48:61:6f:ee:c1:49:39:14:6b:e5:32:10:82:2b:53:
87:c1:80:41:cb:6d:a5:97:73:ec:94:c7:14:0e:b7:a0:8c:03:
53:6e:c5:e9:08:1f:fe:c4:5d:f3:40:d4:30:2d:1b:8f:da:d8:
57:56:95:07:4b:d1:ce:f1:48:9b:45:ec:a1:e3:76:af:29:ab:
66:d0:74:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:07:39 2025 by rpki-client