Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/duK6XMFQs1PL00ufBF6gUJdAhE0.cer
File: duK6XMFQs1PL00ufBF6gUJdAhE0.cer (raw, json)
Hash identifier: bHzrco2vbdDbR55coo59R/2v+RCes/2v86zVXrjTsi4=
Subject key identifier: 76:E2:BA:5C:C1:50:B3:53:CB:D3:4B:9F:04:5E:A0:50:97:40:84:4D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194274809B92B3A4F46ECAEDF3D3910DCE7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4e/31d2ed-8e2f-4fa9-83ca-70405e3528af/1/duK6XMFQs1PL00ufBF6gUJdAhE0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4e/31d2ed-8e2f-4fa9-83ca-70405e3528af/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:50:20 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.211.120.0/22
IP: 2a0b:6540::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:09:b9:2b:3a:4f:46:ec:ae:df:3d:39:10:dc:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:50:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=76e2ba5cc150b353cbd34b9f045ea0509740844d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a5:35:49:e3:29:8e:b9:cf:35:8d:e4:68:59:
de:46:08:e1:b3:f8:50:83:0f:13:f7:7c:7a:66:72:
7a:8f:c0:ea:d9:62:fc:3a:bd:b6:d7:2e:7d:36:28:
ff:9b:45:5d:b4:80:51:77:4a:7e:c4:96:cd:0f:6a:
c2:0c:3d:6f:58:ce:0f:a0:37:17:3b:b1:ca:44:89:
d8:0e:f7:68:af:1b:1f:6c:fb:15:50:0b:f3:57:1e:
af:12:98:04:78:f1:df:63:5c:05:16:67:2c:0c:93:
8d:8b:66:0f:73:78:94:f5:74:74:7c:cd:f8:43:8e:
50:5e:8c:74:ef:c2:01:f9:f3:9f:64:5a:46:2d:d1:
6c:40:42:bf:0a:f9:82:ec:1b:f7:3d:85:f8:71:5d:
25:f5:9e:b5:b1:6a:b1:3c:bf:64:d4:d4:1d:5b:f9:
83:1a:7f:55:c6:e4:84:74:2e:36:d1:aa:d6:ba:97:
44:a8:1c:72:53:b5:1d:ea:6b:d4:a7:35:b3:5f:c1:
a1:ba:50:cc:a4:74:85:a4:c2:c0:be:6b:39:c0:aa:
7b:7b:44:40:f8:25:f1:22:38:c6:f5:ee:56:49:db:
d3:43:d4:f8:03:ad:4c:dc:85:d6:d4:ce:bf:90:72:
83:09:dc:ba:49:33:f3:d0:4d:9f:2f:2d:3c:5a:52:
d9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:E2:BA:5C:C1:50:B3:53:CB:D3:4B:9F:04:5E:A0:50:97:40:84:4D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/31d2ed-8e2f-4fa9-83ca-70405e3528af/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/31d2ed-8e2f-4fa9-83ca-70405e3528af/1/duK6XMFQs1PL00ufBF6gUJdAhE0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.211.120.0/22
IPv6:
2a0b:6540::/29
Signature Algorithm: sha256WithRSAEncryption
93:1b:57:2a:49:2d:e4:58:a3:e4:ca:02:4a:35:c0:ee:07:27:
96:41:91:f5:28:da:54:2e:0c:97:f9:98:cb:b3:be:43:23:5b:
a8:d2:48:61:b2:d3:e7:f3:14:ac:18:ee:ea:e5:4e:2d:92:ae:
58:bf:55:b7:fc:f4:22:8e:bb:25:6d:1f:6a:9c:44:67:64:2a:
3d:21:4b:bc:5f:42:f0:42:ef:37:56:1c:28:3f:49:7e:68:a6:
a5:43:82:bc:93:2d:a2:3a:43:73:a9:ce:69:86:6f:8f:e7:ed:
04:bd:03:56:ea:9d:c5:72:11:c2:ad:c1:62:2a:bc:1a:24:bd:
37:e7:c2:59:a1:bc:df:8d:78:9f:7f:4a:d6:76:61:58:a6:3a:
9b:02:88:e6:66:1a:cd:f3:cc:a4:62:36:a3:2b:15:c9:f6:3a:
26:5e:32:e6:9e:7a:7a:73:65:03:2c:f1:14:08:0c:c6:a6:b8:
81:b1:4e:22:3d:2e:9b:58:36:fb:7e:97:0c:ba:a4:3b:2b:e0:
10:8d:fd:03:a1:8e:94:2a:03:a8:9f:e6:e8:7b:17:d2:a9:e2:
0b:1b:ad:00:b4:d1:aa:1a:44:35:ad:0f:bd:ae:8f:4e:24:ae:
fd:18:2b:7d:92:f8:b1:ec:4e:dd:1d:a1:db:fa:94:1b:ad:17:
03:1b:67:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:37:00 2025 by rpki-client