Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jOjfOeNiYIeuFvYOvmGsyMbRNXM.cer
File: jOjfOeNiYIeuFvYOvmGsyMbRNXM.cer (raw, json)
Hash identifier: 1BuesrfaspnwE6ahUsAqvjrCxnEad7WswKDps9nGqhE=
Subject key identifier: 8C:E8:DF:39:E3:62:60:87:AE:16:F6:0E:BE:61:AC:C8:C6:D1:35:73
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA0EFB00671C481BEB16D5DDFA3179
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2f/35b020-a225-4dff-b172-d0818ef06659/1/jOjfOeNiYIeuFvYOvmGsyMbRNXM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2f/35b020-a225-4dff-b172-d0818ef06659/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:47:49 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.212.33.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:0e:fb:00:67:1c:48:1b:eb:16:d5:dd:fa:31:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ce8df39e3626087ae16f60ebe61acc8c6d13573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bb:a8:88:25:96:18:79:60:6a:04:74:20:35:
3d:2e:3f:a0:81:f9:74:33:e7:75:f1:37:13:b4:9b:
44:a8:e3:85:e7:b2:9d:93:56:e7:d8:8b:9b:42:49:
32:fe:9e:83:7b:40:e6:e5:cc:77:f7:a7:6f:32:90:
2d:33:a3:20:70:b7:c3:f2:d3:e4:70:ae:90:4f:4a:
2f:55:54:3c:b4:c3:db:49:b3:b7:1c:77:00:b3:0b:
41:88:62:cd:c9:4e:8c:11:21:44:52:d3:89:f7:d4:
86:05:eb:2c:5f:93:ed:6e:42:e8:b3:35:9f:3a:20:
02:c6:2b:06:ef:75:7d:6a:d4:81:fd:1e:3a:0c:02:
27:ff:b3:3c:74:2b:f4:e4:c3:67:15:a6:5d:16:c8:
39:3f:31:d2:ff:e0:99:36:0b:90:e4:2c:9e:0d:61:
ce:02:a4:ad:7e:ef:98:c7:d4:38:64:12:87:09:90:
19:3f:d0:21:01:b9:d9:d4:77:fc:9c:84:05:7d:f6:
69:4a:06:20:2a:da:b9:2b:30:18:5b:e5:bd:5c:bb:
6b:d3:e8:17:fe:23:89:1f:de:6e:02:66:26:e1:53:
21:e7:1a:32:84:11:c0:f1:ed:5f:69:02:a1:47:88:
a3:2c:34:6e:99:15:5a:65:0d:ab:dc:4f:ce:ae:d5:
1a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E8:DF:39:E3:62:60:87:AE:16:F6:0E:BE:61:AC:C8:C6:D1:35:73
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/35b020-a225-4dff-b172-d0818ef06659/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/35b020-a225-4dff-b172-d0818ef06659/1/jOjfOeNiYIeuFvYOvmGsyMbRNXM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.33.0/24
Signature Algorithm: sha256WithRSAEncryption
27:89:68:17:9e:59:e1:c8:70:44:24:da:e9:ac:84:48:bf:c5:
a9:d6:ec:2c:5b:bd:16:1c:a8:33:63:5c:a5:84:69:21:10:ff:
f5:4e:2e:e3:3a:d0:5b:b8:b5:1f:29:d8:69:6e:0b:2a:f6:22:
f3:85:a6:85:df:69:f9:3c:db:8f:53:7a:07:0e:9d:68:b0:d9:
4d:c1:3c:04:42:59:c8:31:39:50:78:22:1d:81:a0:2f:78:22:
ec:4e:6e:37:5a:1d:c9:74:6f:d7:5e:bc:e4:07:51:74:58:6b:
26:2c:32:7b:30:12:fc:24:75:3c:ee:bf:54:a9:67:5a:bd:45:
af:89:22:6a:ad:8f:6b:5b:ac:0f:37:08:64:db:12:9d:32:e9:
52:b1:7b:71:8f:11:73:4f:bf:f8:6b:1a:0d:a7:24:d2:e5:88:
2e:dc:26:4c:ef:a7:29:89:d2:d5:0e:4a:b8:8c:78:c7:9d:f7:
68:81:34:2f:15:ef:12:84:4b:b4:48:8c:6e:a5:49:21:41:54:
c1:dc:60:56:7d:7f:6a:8e:ef:97:c8:6a:2e:3d:fc:14:9b:a1:
f1:56:c5:5b:fb:5b:ee:61:f4:1f:10:d6:28:96:6e:c2:2e:85:
8e:a6:35:ca:43:2f:b0:6b:a6:ae:fc:4c:7b:a0:50:81:c2:66:
28:fd:9b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:25:43 2025 by rpki-client