Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fQGl2Q3DqDbOtjge_HU04Sn0Okw.cer
File: fQGl2Q3DqDbOtjge_HU04Sn0Okw.cer (raw, json)
Hash identifier: Ub6x5ccBX4pA0oEjvp07LY9yhgl0d+1iV31JUlgLlBs=
Subject key identifier: 7D:01:A5:D9:0D:C3:A8:36:CE:B6:38:1E:FC:75:34:E1:29:F4:3A:4C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258EF77E56F9580F4D4BA799F120A89E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:48:34 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2001:67c:23b8::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:f7:7e:56:f9:58:0f:4d:4b:a7:99:f1:20:a8:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d01a5d90dc3a836ceb6381efc7534e129f43a4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e0:5a:7f:31:16:2f:5b:bf:64:8f:fb:4b:a3:
99:d2:61:23:22:6d:29:e4:ba:81:a9:99:ab:da:16:
8d:eb:98:f3:9a:cb:71:bd:f2:fc:4c:ba:ef:f5:d5:
84:f9:8c:b9:eb:a7:f1:e7:d3:f5:d3:14:da:81:c6:
ad:d9:98:f7:0b:27:d0:54:b9:cb:54:6a:52:2b:a1:
b6:dd:0a:7f:af:5d:ff:5b:a0:af:8f:e4:b0:da:40:
09:1d:53:b5:86:16:df:de:a9:ab:40:bc:6c:a3:94:
a5:c9:40:8c:cd:6e:22:cf:d6:c8:7d:da:2b:0d:89:
ee:6a:b1:ed:5a:ad:67:1a:a9:8f:33:03:40:56:0f:
99:1c:a4:c8:bd:0c:f1:bd:bb:68:15:27:5c:fc:d3:
83:d9:5e:5d:67:4f:a7:d1:bb:45:06:98:bd:2a:86:
ef:08:a7:4e:2a:a6:60:02:e2:43:00:84:36:48:aa:
6c:ad:d2:d3:37:d8:25:42:77:8a:41:f3:61:f0:74:
95:57:53:2c:58:d0:82:f6:4d:5f:3e:30:9d:d7:31:
95:13:e4:2e:73:00:6e:6b:7b:a8:c5:4c:c6:d7:a9:
ce:9f:b8:99:88:16:da:8f:30:64:7d:f0:47:39:15:
d7:bb:78:aa:de:8f:41:7f:b6:a8:0b:8b:ce:1d:97:
ac:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:01:A5:D9:0D:C3:A8:36:CE:B6:38:1E:FC:75:34:E1:29:F4:3A:4C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:23b8::/48
Signature Algorithm: sha256WithRSAEncryption
0c:b9:97:7a:7c:bf:19:7f:9b:cc:bb:56:0c:b1:eb:14:c2:6e:
dd:df:f3:e9:3f:39:be:01:a6:64:c9:10:fd:37:e0:2b:1c:c4:
6a:e4:c9:98:ae:8a:c9:e5:ff:35:1d:08:19:31:f2:6b:c6:59:
1e:f2:87:08:c1:07:2b:ca:56:86:2b:4a:f6:34:a6:76:e1:69:
14:87:64:90:5d:6f:70:2b:e6:63:02:85:2f:89:16:36:20:85:
aa:14:7d:fa:b1:7b:93:60:75:82:2e:ee:5f:6e:9a:31:2b:35:
74:bc:b4:af:96:88:05:28:4f:46:ce:9a:e9:55:af:2d:b6:e5:
3a:53:92:f9:94:7d:7a:a8:e4:60:7b:e7:2f:bb:00:d6:8a:0f:
dd:3f:45:78:44:49:bc:c6:54:83:00:e0:3e:af:c0:d9:78:35:
54:17:5f:1f:45:35:c9:f1:bd:26:11:a4:4b:29:00:08:47:1a:
75:b5:99:2c:38:01:ed:f3:f9:79:ab:6e:fb:1f:6b:6e:6f:90:
bb:c4:7c:e1:1e:d8:9f:68:70:d5:45:69:db:0a:bb:bd:1c:cf:
ca:6b:2c:b1:43:dd:cf:68:6d:0d:e9:9c:87:4e:b9:fb:74:f3:
64:8d:3a:75:cd:f7:3c:86:c4:a8:af:f9:cd:79:79:87:e9:94:
0f:2c:c8:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 23:08:05 2025 by rpki-client