Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/j2slsXxNBOCwSSNA56wkzITSo0c.cer
File: j2slsXxNBOCwSSNA56wkzITSo0c.cer (raw, json)
Hash identifier: 4wrAwI8eTrj/Fv1eXEb6RZaSLpbEdI8CTI5Y8tPinTw=
Subject key identifier: 8F:6B:25:B1:7C:4D:04:E0:B0:49:23:40:E7:AC:24:CC:84:D2:A3:47
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA2A46D66F8AC99EDA2F94611AD81A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ce/95300a-7d16-4d0a-868c-38383f82bcf9/1/j2slsXxNBOCwSSNA56wkzITSo0c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ce/95300a-7d16-4d0a-868c-38383f82bcf9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:47:56 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.33.244.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:2a:46:d6:6f:8a:c9:9e:da:2f:94:61:1a:d8:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f6b25b17c4d04e0b0492340e7ac24cc84d2a347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2e:a4:d8:ad:da:8f:54:5d:3f:48:fe:0f:ed:
a9:12:4b:ff:34:23:f9:0e:18:bc:26:da:22:37:7a:
93:d7:f2:e7:fb:26:1b:46:c3:6d:8a:e7:12:8b:fa:
83:69:22:90:b9:2c:b3:df:0b:3b:2c:14:51:cb:bf:
4a:52:49:24:9e:69:c9:f6:43:47:1a:74:00:ff:1e:
cf:19:27:c7:f8:bf:1d:3a:4b:da:9f:f1:a7:43:1d:
44:b9:82:33:8d:73:99:89:72:9c:b1:e1:18:38:ba:
94:c8:5a:ec:1c:63:6f:24:b0:2d:de:f5:17:12:7f:
55:b3:01:ca:5a:f9:ba:33:c0:eb:50:d1:b4:15:98:
b0:a8:28:97:b3:0f:cb:63:55:87:28:17:9d:f9:46:
73:67:dd:ed:a2:f7:a4:26:ef:f3:c4:0f:06:1f:13:
cf:87:35:cb:8f:b4:b2:4c:ef:35:48:4c:69:28:a0:
1e:28:0f:f3:12:c4:9d:4a:6b:23:d8:2e:b4:51:a7:
ed:9a:a9:7c:05:89:8d:b6:f0:2c:15:01:59:8d:41:
99:b2:da:b7:37:ab:f2:a9:f7:13:eb:87:24:38:da:
b5:78:ee:05:eb:61:dd:71:99:e6:a6:f0:18:a5:2b:
4f:da:4e:9e:6b:61:73:22:fd:d3:6d:50:e0:6e:b6:
55:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:6B:25:B1:7C:4D:04:E0:B0:49:23:40:E7:AC:24:CC:84:D2:A3:47
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/95300a-7d16-4d0a-868c-38383f82bcf9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/95300a-7d16-4d0a-868c-38383f82bcf9/1/j2slsXxNBOCwSSNA56wkzITSo0c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.33.244.0/23
Signature Algorithm: sha256WithRSAEncryption
07:b2:ac:a0:7c:14:e7:44:bc:09:8d:cd:47:da:35:1a:3e:39:
c8:32:28:aa:a3:40:1f:ee:0c:78:03:09:6b:2f:42:70:b7:54:
d6:30:3c:0c:b9:6b:19:8d:be:9d:cc:2c:fd:4a:a1:b8:9d:67:
1d:68:34:85:3c:f2:08:96:3a:48:4f:8b:ed:42:2e:a5:2b:57:
21:89:12:75:e0:e8:ec:f5:00:ee:7b:03:5c:83:68:6a:4e:e3:
55:77:c9:1a:5b:4e:61:3c:ea:c8:b3:83:4f:5a:28:98:dd:06:
5b:80:ac:68:db:f3:f9:98:9d:0d:27:f2:de:5b:a6:d2:81:3b:
96:70:0c:20:23:cc:1e:52:22:73:26:7d:39:ea:f4:b1:3b:2f:
26:e1:d6:3a:58:71:8c:ea:2a:e5:fb:fc:98:05:f6:d6:5b:a3:
8f:46:94:dd:18:87:12:e1:c8:2f:b6:3b:35:71:33:8b:3e:a6:
08:ea:a6:d5:c0:22:1b:10:2f:37:8f:df:1e:1b:6a:94:d3:16:
e4:da:e3:0c:e8:e3:cb:71:1b:ee:4c:ea:b2:d3:76:36:d9:66:
d6:71:64:bb:9e:84:45:86:da:21:50:ad:55:e8:3f:45:b0:72:
17:e7:a7:5c:db:7c:e4:31:ad:d0:67:70:55:7c:a2:f3:fe:43:
91:5e:24:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:42:50 2025 by rpki-client