Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fVllljYInjIyRpdinCGNo4orZz0.cer
File: fVllljYInjIyRpdinCGNo4orZz0.cer (raw, json)
Hash identifier: QL2ZnG1lgHDgihcVbHwSv6SMTIH2xrb+zBagCkpeIyc=
Subject key identifier: 7D:59:65:96:36:08:9E:32:32:46:97:62:9C:21:8D:A3:8A:2B:67:3D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942369A2BBF4F59AF5F4CF7040B96C6FC8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:48:33 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.94.28.0/24
IP: 202.61.192.0/18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:a2:bb:f4:f5:9a:f5:f4:cf:70:40:b9:6c:6f:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d59659636089e32324697629c218da38a2b673d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b9:35:ae:5c:a4:97:48:54:52:c7:f8:60:12:
e2:05:4a:af:c6:03:2c:b1:6b:28:d5:61:3f:76:2f:
54:4f:e6:b5:bb:2f:5f:7b:79:51:44:da:56:26:11:
bb:fa:14:a9:d8:d8:5a:5d:51:7a:48:3c:5c:3a:6d:
c3:b4:ee:da:31:db:3c:ac:4e:b1:67:30:1d:b6:32:
0b:de:70:47:31:c1:f4:23:d5:11:ed:be:09:3d:c1:
12:79:d8:ef:ca:ad:97:bf:ca:95:a6:12:c1:cc:99:
5b:82:cb:bf:fc:c6:8d:60:96:ad:fe:6f:ce:7a:af:
65:de:3d:bd:1d:29:51:e7:bf:04:5f:f6:b0:18:21:
9d:78:6d:82:6a:da:8a:5f:f0:fb:40:ad:e1:8a:58:
7b:7e:53:ab:b4:d2:2e:9a:0c:23:df:20:ec:bd:c8:
f2:c2:34:a7:ca:a2:4f:25:3c:6b:69:fe:f8:30:83:
d6:a8:f4:bf:f4:a5:38:39:77:50:39:70:48:cf:b9:
db:b3:db:95:2e:8d:c4:44:5b:74:7a:33:6f:d4:a8:
92:59:24:8d:71:e5:04:5a:6a:5b:01:9c:c9:ec:80:
88:3c:0a:6c:22:f6:41:f1:f7:b0:e9:e6:e0:41:5e:
d2:9a:8b:c8:b7:24:74:1f:af:9c:62:bd:49:18:cd:
e2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:59:65:96:36:08:9E:32:32:46:97:62:9C:21:8D:A3:8A:2B:67:3D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.94.28.0/24
202.61.192.0/18
Signature Algorithm: sha256WithRSAEncryption
31:79:b8:5a:84:68:b3:ad:4b:81:1e:c7:f9:3b:ca:11:04:4e:
59:e4:aa:03:b5:01:a0:7e:0b:0e:eb:9f:fd:4c:70:7e:a6:1b:
d3:94:77:6e:52:80:c8:e1:eb:2a:d5:b5:13:cd:55:89:ef:66:
28:b0:06:32:14:98:5c:b6:d1:b3:40:a5:c4:df:6f:33:28:0a:
07:42:fb:a5:ae:f0:ed:9b:a7:22:fd:13:72:31:5e:d9:4e:53:
60:6e:b6:9c:0f:c1:f2:34:73:94:65:75:6a:bd:c1:aa:d6:7c:
66:46:f0:40:34:dd:cf:64:57:4b:6c:18:50:08:6d:d8:38:74:
a0:f0:6b:3a:d0:1e:40:26:e6:85:e2:0e:2b:01:af:05:d3:44:
a2:63:c8:a7:4c:d5:dd:50:bb:e2:58:1e:c1:17:28:9b:4d:85:
33:82:b9:25:f0:2a:4a:5c:02:d4:cb:e8:16:c4:85:2f:40:4e:
20:b9:d7:d7:7d:90:1d:5e:0f:3d:50:3d:0a:07:e6:e1:37:9e:
34:f1:c5:bc:03:b9:c2:23:33:62:9a:5e:7a:7d:b1:97:8b:4d:
af:67:46:48:5f:0c:70:ff:27:0b:55:eb:6d:58:13:4a:66:5d:
d2:84:cd:b8:94:34:88:af:3b:dd:25:3b:b1:5b:0a:9d:55:ec:
c3:18:69:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:04:04 2025 by rpki-client