Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dCZ_Ps_MYWaOBQG8pgztbdddNHw.cer
File: dCZ_Ps_MYWaOBQG8pgztbdddNHw.cer (raw, json)
Hash identifier: IUHICcLy9f7zDF+BT+A1AxqK88zyFguZU8TWYyD+4O8=
Subject key identifier: 74:26:7F:3E:CF:CC:61:66:8E:05:01:BC:A6:0C:ED:6D:D7:5D:34:7C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425217333BB056B730462CA8A699040AB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:48:56 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 192.44.75.0 -- 192.44.77.255
IP: 192.108.115.0 -- 192.108.119.255
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:73:33:bb:05:6b:73:04:62:ca:8a:69:90:40:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=74267f3ecfcc61668e0501bca60ced6dd75d347c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4b:81:2a:c1:f5:91:84:36:fd:e5:e8:e6:ac:
85:e7:39:25:a4:bc:ef:35:a8:75:f5:6b:43:9c:47:
d5:10:12:b3:04:d2:c3:78:1d:2b:5b:ce:03:fc:be:
e2:2e:8a:bd:2c:54:89:2d:c7:15:4d:00:b1:b7:5b:
51:f7:6b:3a:03:b2:47:04:de:1b:69:af:d5:9a:16:
19:03:e4:82:bb:1b:f8:78:7f:97:64:8f:e9:73:e6:
21:2f:b8:78:be:c8:b6:bd:ff:2f:68:68:ef:4b:02:
36:4a:f7:a2:91:ab:f6:55:fe:6c:94:54:2a:4c:de:
dd:2e:de:07:9e:c5:1c:46:78:4e:37:85:e2:76:27:
3c:f1:81:bd:60:3f:99:23:24:ab:49:3b:76:f6:69:
cb:8c:41:81:90:e8:70:9a:02:16:22:b9:ed:32:2d:
e7:4c:56:6c:d8:19:34:cb:fb:92:48:37:bf:db:64:
c9:73:87:a7:99:32:c1:a4:8f:41:f7:6b:44:06:e3:
6d:5e:d0:ac:68:f7:c4:ee:d1:b9:09:13:01:68:3c:
96:25:a5:69:3b:7e:16:2d:85:db:fc:b5:42:c7:db:
63:0a:00:0c:14:9d:d0:2f:cc:97:75:d8:59:7c:bc:
3d:d1:ca:2b:73:d3:fd:e4:1a:05:d2:6f:d9:cd:87:
a4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:26:7F:3E:CF:CC:61:66:8E:05:01:BC:A6:0C:ED:6D:D7:5D:34:7C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/dCZ_Ps_MYWaOBQG8pgztbdddNHw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.44.75.0-192.44.77.255
192.108.115.0-192.108.119.255
Signature Algorithm: sha256WithRSAEncryption
03:86:ac:bc:dc:d3:97:02:7e:6b:76:98:33:37:6b:45:c6:ec:
c5:4a:7d:40:c6:9e:43:e3:cf:ec:6e:18:b2:3f:43:3a:73:6d:
ba:5b:9b:c7:8c:57:8d:d7:c7:55:ae:49:2e:0d:f4:38:2e:49:
82:86:0a:ab:92:4a:51:9d:de:96:ba:25:e7:c1:ac:9f:03:89:
1b:41:39:cb:9e:52:6e:c8:20:6e:79:37:8a:73:55:6b:00:2a:
8a:f3:00:6e:c3:46:e6:2b:76:30:48:10:84:3a:ca:d4:d8:80:
9f:4e:67:06:32:70:82:8c:8e:50:fd:b7:b1:e5:b9:09:6c:9f:
5a:96:9b:96:c3:45:90:72:f7:21:a0:1b:37:ea:c1:74:84:2b:
f3:49:b2:1c:42:83:ff:31:82:d1:8c:17:a0:2c:36:4b:1c:b8:
70:23:52:d0:ee:42:f4:70:37:45:9f:29:0c:4d:09:76:06:b2:
34:4e:82:3e:d4:84:a3:b6:88:af:0d:bc:f8:ad:d7:80:f7:c3:
55:4a:62:8b:50:e9:42:66:7e:59:fc:f5:08:79:b8:65:48:db:
b1:f0:82:3a:b8:da:5a:f4:8a:2c:77:0c:af:51:5d:ad:b5:4f:
2b:9f:70:06:08:0d:cc:0b:8d:b5:ff:96:8c:36:39:7c:90:e9:
30:88:31:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:11:52 2025 by rpki-client