Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec-LeUKRfpYPFyl9xhdHvLB2jhE.cer
File: ec-LeUKRfpYPFyl9xhdHvLB2jhE.cer (raw, json)
Hash identifier: nvn+WKmGmFW2E7BOAAahpkHkF41YWrAWH8ONV2csJkw=
Subject key identifier: 79:CF:8B:79:42:91:7E:96:0F:17:29:7D:C6:17:47:BC:B0:76:8E:11
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FC94B1FDA6A0881DA556ABBB69243F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e0/444d22-4b05-4b83-b8e7-779820a6c81c/1/ec-LeUKRfpYPFyl9xhdHvLB2jhE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e0/444d22-4b05-4b83-b8e7-779820a6c81c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:48:17 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 217.18.90.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:94:b1:fd:a6:a0:88:1d:a5:56:ab:bb:69:24:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=79cf8b7942917e960f17297dc61747bcb0768e11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ca:09:e7:70:85:ae:9d:c2:81:7a:e9:4d:af:
f2:04:4b:40:ac:c4:4d:47:41:17:d8:c3:77:17:d6:
00:70:15:39:c4:12:b4:63:94:11:c8:cf:18:a9:79:
3f:df:e1:cf:8d:7e:ca:37:ce:94:17:de:d8:55:31:
6a:18:36:c5:78:30:1b:4a:fc:bb:fc:3b:b8:69:84:
5a:90:6c:d7:6e:d0:7c:0d:e3:f2:53:13:c6:81:dc:
dc:2f:0a:88:b0:b5:1d:2c:56:79:81:11:ef:bd:e5:
63:ad:36:ac:39:07:37:98:d8:15:38:55:1a:be:b1:
72:26:6b:5f:31:d9:3e:63:47:06:7b:c4:45:20:5f:
b9:ed:82:99:fc:6c:75:10:c6:63:ab:9e:4e:11:95:
0c:d0:d2:fa:3d:7b:36:a5:62:14:24:f3:33:64:88:
76:3a:31:cc:0c:a5:89:bf:a8:bf:68:40:5f:b7:80:
c3:89:0c:b9:4b:5f:ba:eb:a8:2b:7c:3b:82:d6:f6:
95:09:44:3e:58:98:fa:c8:31:64:ee:3b:dc:42:f5:
a2:94:03:32:48:74:52:e8:c4:4c:d9:2c:50:79:00:
7b:d6:b0:24:03:c4:a8:87:dc:0c:a5:0a:c2:42:92:
f6:f4:0d:61:b3:66:c3:1f:19:19:9a:b3:c6:a4:b8:
71:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:CF:8B:79:42:91:7E:96:0F:17:29:7D:C6:17:47:BC:B0:76:8E:11
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/444d22-4b05-4b83-b8e7-779820a6c81c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/444d22-4b05-4b83-b8e7-779820a6c81c/1/ec-LeUKRfpYPFyl9xhdHvLB2jhE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.18.90.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:df:5d:ab:10:eb:7b:32:e3:08:bf:06:96:79:17:8a:4f:e6:
0a:6c:d9:98:16:52:7c:b7:67:ef:70:a7:51:0e:fa:1b:4d:07:
05:8e:09:75:d7:a3:4f:cb:08:39:07:64:93:b1:0f:78:41:4f:
08:b2:14:58:07:ae:6d:61:c2:97:67:11:f3:54:0d:d7:ff:4a:
09:25:e4:cd:b1:fe:7a:75:7f:af:73:96:b3:64:09:28:16:20:
91:0c:b9:3e:cd:a4:4b:a4:08:43:b1:e4:4b:be:68:a6:86:80:
99:2e:9a:6e:1b:df:f0:6f:54:4e:8d:9d:d2:44:07:d0:d8:36:
05:c0:70:a1:ab:b6:16:7c:bc:86:ea:cb:a4:df:38:b6:71:4a:
b1:ff:1b:8e:1f:01:ff:f0:38:0e:2d:54:51:08:5e:bd:65:55:
d2:09:1b:7e:b1:50:50:c1:20:15:59:30:7e:a2:8d:23:f2:66:
af:74:9e:05:46:6f:35:27:82:54:ad:fe:9c:0b:7d:b0:ef:4b:
98:44:14:cf:80:f0:cf:6a:6b:17:88:2d:66:8a:16:65:dc:25:
99:6b:9e:ec:de:a8:cf:2b:e3:7e:ba:4f:79:88:c7:2d:d5:b7:
47:de:91:ce:4f:78:fb:d7:61:ff:74:74:e6:7d:af:09:ef:13:
29:6b:97:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:27:31 2025 by rpki-client