Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fKBMxn75bZAi89C_xR6ttKS2PuY.cer
File: fKBMxn75bZAi89C_xR6ttKS2PuY.cer (raw, json)
Hash identifier: Cx3Yli6DxyEtemyvLbwt2WPy7EiL0ksUpi97yaR3AOA=
Subject key identifier: 7C:A0:4C:C6:7E:F9:6D:90:22:F3:D0:BF:C5:1E:AD:B4:A4:B6:3E:E6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942067F5D34EBB1FBBF39F3389F46CDC7B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:47:51 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 159.255.40.0/21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:f5:d3:4e:bb:1f:bb:f3:9f:33:89:f4:6c:dc:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ca04cc67ef96d9022f3d0bfc51eadb4a4b63ee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:dc:a2:2b:8a:e2:c1:fc:96:3b:16:64:62:e9:
c8:3e:53:5b:e7:f6:9f:87:b1:a3:78:2e:24:e5:fe:
43:9f:6c:8c:74:17:b1:d8:5b:06:b7:24:81:c4:cd:
92:26:b3:92:4d:98:1d:51:58:9c:df:83:91:c0:ac:
59:38:86:c6:c6:c2:b2:10:f6:ca:84:c2:0c:b8:f8:
39:b6:b9:28:7d:09:ba:e7:89:05:1a:54:da:25:67:
52:45:a3:14:7a:59:be:6b:83:d6:7b:82:c3:b7:9e:
e8:5a:da:bd:9e:54:df:5c:c0:5e:f1:51:e1:89:11:
8d:fc:b1:3a:2b:da:90:55:b3:5e:e6:36:97:8c:62:
cb:3c:c6:6f:77:25:16:8f:d7:d0:11:8a:aa:1b:51:
c8:b6:fc:45:6b:21:cb:03:38:37:bb:b0:b9:48:88:
8e:8c:e5:a0:dd:31:00:f2:be:36:8f:59:b5:ad:ad:
3b:3e:f5:dd:0e:cb:97:4f:ed:cb:75:f5:01:86:dd:
83:c2:ac:3c:fe:4a:04:fe:db:b2:00:0c:e0:8e:51:
5a:9d:4a:be:4d:b7:12:7f:a3:75:f9:52:be:3f:41:
7c:83:61:6c:db:e4:de:dd:b1:6c:1f:a5:46:17:9d:
e5:fc:c0:7c:a6:be:43:f8:d2:dd:f1:b2:6f:6f:1a:
ce:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:A0:4C:C6:7E:F9:6D:90:22:F3:D0:BF:C5:1E:AD:B4:A4:B6:3E:E6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.255.40.0/21
Signature Algorithm: sha256WithRSAEncryption
3c:57:70:ff:c7:5c:c4:25:9d:0c:a1:d3:7b:c1:d1:e3:47:e8:
f8:00:aa:29:7f:ef:03:3b:b4:b0:0e:01:23:57:b4:e2:bc:f9:
60:13:89:01:22:42:a9:66:cb:d4:a3:59:f2:6e:5d:16:e2:5b:
c2:90:85:4f:51:14:16:cb:05:50:4c:c6:3a:ce:c1:3e:f9:e9:
89:ed:12:bc:f8:41:2f:c2:be:5d:11:17:57:9f:9d:3e:76:15:
cb:21:80:b5:c1:a5:d8:e9:65:6f:33:d2:67:c1:b8:8d:f9:40:
3e:e7:82:23:50:db:ab:0c:44:89:c8:b1:36:ac:6a:73:54:c9:
62:9a:db:59:8e:d6:75:2c:7a:62:72:4c:dc:6b:0b:d6:9a:41:
89:5a:a9:24:03:d7:16:cc:44:d9:f0:bc:c1:88:6e:37:ec:58:
e3:a4:e1:bf:8c:46:99:b6:30:e5:ee:91:84:5b:4b:1c:91:27:
15:12:7c:6e:0a:ee:74:de:ea:d4:be:07:0d:cf:78:ce:1f:4f:
b7:b8:c5:01:cc:9e:52:bd:08:8b:d6:01:f9:9e:01:e5:22:b1:
7c:42:3f:49:21:de:58:e0:5d:30:ac:d7:63:14:37:fe:7f:66:
42:8c:f2:89:10:0a:00:92:1a:a6:4b:a9:a1:04:bf:62:69:5a:
69:72:88:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:16:17 2025 by rpki-client