Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ijBK9VNTwDFG9_OmDGq1gE3aXOE.cer
File: ijBK9VNTwDFG9_OmDGq1gE3aXOE.cer (raw, json)
Hash identifier: u2OcPFu7xSS+d9WED1o7BrLcI8iJayRxtbHF/MLuW1s=
Subject key identifier: 8A:30:4A:F5:53:53:C0:31:46:F7:F3:A6:0C:6A:B5:80:4D:DA:5C:E1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194B1E58334A5AA55A9037B4EFA3B8D6837
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d0/67f631-7f07-4d8e-9e96-1f471428b363/1/ijBK9VNTwDFG9_OmDGq1gE3aXOE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d0/67f631-7f07-4d8e-9e96-1f471428b363/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 29 Jan 2025 11:49:56 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2a01:668::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b1:e5:83:34:a5:aa:55:a9:03:7b:4e:fa:3b:8d:68:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 29 11:49:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8a304af55353c03146f7f3a60c6ab5804dda5ce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:da:9c:41:56:9d:5b:60:4e:41:57:a1:d5:62:
25:f8:cd:55:f1:20:97:59:60:22:8f:0d:95:fb:21:
36:10:37:55:f7:75:81:f2:d0:20:5c:16:ab:91:90:
31:fd:f1:06:13:6f:fc:a3:4d:60:45:a0:c6:e7:d2:
74:3f:ae:e2:3c:30:15:e2:79:44:91:70:91:17:2f:
0a:e3:40:5e:e0:a5:18:41:53:92:4d:3e:6f:68:84:
4b:6b:04:bf:d3:74:76:0c:cd:90:32:3f:9d:b7:7d:
09:a9:7c:02:d0:12:05:11:d8:c5:dc:36:94:32:6a:
d1:99:e6:1f:9b:2e:13:82:4a:29:83:0c:de:82:48:
bc:aa:81:17:84:fd:c1:21:29:2e:9d:e7:7e:1b:68:
c1:50:0e:4c:54:99:28:d3:19:12:bf:d0:44:09:9d:
45:4a:34:cf:87:b1:c9:f4:d7:3c:53:fa:2c:a6:03:
d3:03:17:34:ee:dd:23:84:00:d5:05:3a:da:5e:67:
3b:3d:fa:4c:27:90:1c:d7:3a:00:10:53:1a:db:b4:
31:57:62:4f:ac:f6:88:be:d6:6a:7e:04:81:4f:a7:
a9:62:8a:2d:ab:fe:d2:3e:51:ae:14:29:ff:4e:0e:
39:6d:b7:71:7b:90:9a:d9:5e:50:b4:28:5d:20:0b:
19:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:30:4A:F5:53:53:C0:31:46:F7:F3:A6:0C:6A:B5:80:4D:DA:5C:E1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/67f631-7f07-4d8e-9e96-1f471428b363/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/67f631-7f07-4d8e-9e96-1f471428b363/1/ijBK9VNTwDFG9_OmDGq1gE3aXOE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:668::/32
Signature Algorithm: sha256WithRSAEncryption
4d:04:b7:b7:ab:e9:c0:b6:d8:2a:ea:d2:1e:93:12:f3:d3:fa:
6e:ba:04:d7:85:1d:d6:fe:a1:3a:32:45:7c:37:2a:bf:91:b4:
86:ca:e0:c9:ab:70:f4:8a:74:ce:71:74:7e:7a:1c:10:84:13:
f0:e4:da:41:89:01:7b:30:4f:f4:b8:de:73:c1:6f:22:8e:5f:
33:8a:fa:00:0a:b7:14:dd:0f:7d:4f:07:05:ce:98:77:2a:dd:
82:bd:e8:91:e3:e4:9a:a3:32:f3:02:37:4f:47:3f:b8:01:c1:
23:03:61:b8:ac:41:35:b5:86:93:68:1f:ea:db:f0:0c:59:39:
55:c8:eb:20:42:29:28:cf:42:b4:db:86:b1:3e:d1:50:aa:24:
75:2b:99:26:37:5e:49:37:5d:21:65:20:43:10:25:7b:34:70:
46:6c:d9:f9:af:f0:5d:7d:03:e5:e2:28:17:a9:8b:e4:b7:03:
ca:18:5e:dd:2f:69:5e:23:4e:ec:da:d6:d3:67:f6:55:c7:4d:
14:70:f7:36:0e:f5:e4:44:e6:4e:7f:93:19:49:14:44:11:d9:
df:cd:91:7b:c1:55:a6:39:54:fb:44:40:ae:99:4f:f2:91:43:
83:a5:57:b4:97:63:bf:35:a5:a0:e5:3f:3b:fa:a7:ea:ea:84:
40:71:db:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:05:54 2025 by rpki-client