Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eHBiH8CvyOwY7vIGM_YUiBMnmXY.cer
File: eHBiH8CvyOwY7vIGM_YUiBMnmXY.cer (raw, json)
Hash identifier: 91K/2Bk08CYTcO3KDWgomP0x2Ux2EVu8nkZS8HfyB58=
Subject key identifier: 78:70:62:1F:C0:AF:C8:EC:18:EE:F2:06:33:F6:14:88:13:27:99:76
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266BA2EC2E48131CB7783B3B84985736
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/eHBiH8CvyOwY7vIGM_YUiBMnmXY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:49:35 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2001:67c:e20::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:a2:ec:2e:48:13:1c:b7:78:3b:3b:84:98:57:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:49:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7870621fc0afc8ec18eef20633f6148813279976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ea:ad:20:c9:47:58:c9:08:b0:a6:66:66:5f:
1a:91:9f:f6:15:a3:be:1c:c9:e9:46:3f:99:1c:4f:
cf:3f:2d:13:cf:33:6b:b6:e3:c6:9c:6e:2d:38:d8:
4f:94:c4:51:c5:7a:eb:6a:29:d2:82:be:35:f2:72:
1e:d5:0e:17:89:15:48:99:18:49:02:13:0a:b4:8c:
3c:83:cf:c9:18:92:9d:bc:f5:00:a7:7c:ee:65:6e:
fa:ff:0e:c7:77:a2:a0:e8:e5:6e:6b:5f:c0:74:2d:
56:07:7e:10:3d:46:57:4f:b2:c8:f5:60:8a:2b:89:
e2:56:9a:76:b5:9d:92:5e:4a:55:99:1a:1b:40:c1:
95:a7:b7:6b:12:3a:45:29:22:eb:3f:ab:72:28:03:
4e:3e:a4:95:84:fd:b3:ae:fe:68:ba:c2:bd:12:d4:
ef:1a:b7:5e:ed:f5:6d:79:7e:53:b3:30:f6:fd:20:
34:82:05:b4:8e:a7:fc:38:f3:ea:dc:5c:09:f3:82:
c3:cd:d4:b2:bb:6b:62:83:22:94:ed:e5:ff:e4:a5:
19:4c:03:fb:d9:ba:89:3b:9f:5a:f6:bd:8e:e1:5a:
c6:1a:a5:69:6c:ab:84:07:b2:c3:8c:a0:4e:86:b7:
f4:6a:00:1d:1b:f7:c4:60:57:50:6e:3a:d5:88:8b:
b2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:70:62:1F:C0:AF:C8:EC:18:EE:F2:06:33:F6:14:88:13:27:99:76
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/8b4e84-becd-4ecf-beb5-96a79a1d1bb3/1/eHBiH8CvyOwY7vIGM_YUiBMnmXY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:e20::/48
Signature Algorithm: sha256WithRSAEncryption
83:d3:c7:df:61:db:05:ba:49:14:9c:61:23:ba:c4:74:e7:fd:
f1:49:59:b2:22:17:fe:a4:b8:1b:da:b0:3d:02:e6:f8:d4:32:
fb:df:83:4b:3e:50:02:40:2c:82:a6:1e:c9:02:23:60:45:4a:
13:3d:86:26:e3:8d:c1:6e:33:a9:0b:26:71:77:4b:2c:63:3c:
d9:77:5a:9e:2d:44:e3:4e:cf:09:fe:36:08:b3:85:71:7b:9d:
1a:f2:d2:b5:3c:5e:61:d9:f5:ba:d8:6d:93:f4:26:85:5d:02:
eb:93:a5:99:48:b6:8f:6c:2c:17:40:0e:f8:fd:ed:0b:36:dc:
dd:e1:cb:62:e7:b8:a5:f8:82:d9:2e:ca:4e:f1:93:06:0b:f9:
1a:c8:65:2b:34:ef:58:56:02:63:4e:23:a0:b5:ca:ce:aa:63:
ac:e0:7a:c1:ff:9d:7d:ab:bc:ec:af:96:21:c3:fa:ca:d5:fb:
e7:70:14:0b:2e:d8:50:f5:1c:e6:50:e8:1f:65:24:c0:ef:d6:
25:dc:72:77:09:87:f2:b2:55:1e:bc:5a:e0:02:83:78:e5:2c:
a1:d6:ee:24:73:dc:3a:b0:0f:42:b6:1b:ce:0e:66:c7:70:2b:
90:5d:6c:d5:b1:b1:2e:2f:72:0a:f1:27:58:f1:72:dd:49:fd:
e1:be:10:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:21:09 2025 by rpki-client