Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.cer
File: jYC0VFXYlzH4e7U_Tb5kEYmDfU4.cer (raw, json)
Hash identifier: GTBrqOCO3U5N1r+4f1bLNMj5ps6QJ9iXXldFNSQGDJQ=
Subject key identifier: 8D:80:B4:54:55:D8:97:31:F8:7B:B5:3F:4D:BE:64:11:89:83:7D:4E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221F42BA8E7037C37D3A030728A28C4A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:47:41 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.213.196.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:42:ba:8e:70:37:c3:7d:3a:03:07:28:a2:8c:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d80b45455d89731f87bb53f4dbe641189837d4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:36:bf:ef:46:85:be:f9:da:5a:d4:0b:a0:31:
4e:e4:c8:dc:02:a2:cd:81:5e:4e:ed:fb:de:eb:72:
92:d2:e7:09:a6:c9:43:83:f0:87:f0:06:40:73:f5:
54:c0:26:3f:78:24:1b:07:28:86:82:dc:2e:cb:a7:
d6:b7:32:09:4a:6c:9d:59:2a:ac:b2:b4:30:ae:19:
cb:5e:db:17:99:68:16:df:48:21:ae:40:aa:7e:46:
c9:dc:d5:05:f5:05:d4:d2:8e:f8:1c:31:ea:1e:10:
b9:90:36:5f:eb:92:e1:3c:a2:73:31:43:ae:6a:bd:
15:b5:01:4b:39:0c:8e:b2:20:b4:00:b2:2c:06:70:
f2:75:4e:06:7e:2e:8f:e4:ad:c2:9d:8c:08:8c:7b:
10:bc:06:20:0d:b7:4d:b1:93:4a:47:9e:57:a4:09:
22:df:fe:f6:9b:25:eb:8d:ef:ea:79:cc:ce:1e:84:
10:4f:f9:e0:ea:69:db:93:a9:19:45:a7:47:fb:82:
bb:b5:45:1a:16:85:52:36:4d:d8:5e:e4:ee:a5:8e:
c5:2c:60:8c:cd:a9:6b:21:03:9d:00:ed:c3:c8:4c:
43:a7:11:0a:0e:69:b5:06:f6:ba:e9:4d:8b:2c:79:
e2:71:ca:12:43:ee:40:dd:94:02:21:b6:0b:d7:96:
84:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:80:B4:54:55:D8:97:31:F8:7B:B5:3F:4D:BE:64:11:89:83:7D:4E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.196.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:e2:f4:71:ce:23:65:99:be:06:1c:04:09:e6:bd:54:79:8d:
5b:f4:d7:35:23:49:f8:61:2d:4d:11:98:20:aa:fb:74:91:7b:
e7:6a:e5:6e:9e:a8:39:17:db:28:4d:68:f3:4f:82:71:1b:f5:
95:0c:61:85:48:e5:fe:e3:a1:cb:1f:ab:e5:69:fe:8d:aa:f5:
1d:88:36:84:27:01:25:6b:40:7f:67:78:31:17:f7:3f:47:48:
76:32:0a:e8:59:f9:72:9c:cf:d0:d3:b3:46:88:8e:1a:aa:ba:
7b:e6:72:24:40:f4:a4:da:16:18:60:02:73:f3:90:a6:84:26:
08:5e:17:6a:b9:64:fb:55:24:70:98:e4:1f:bd:a0:63:1d:be:
5a:a9:0f:e7:56:1c:20:1c:b1:eb:ff:60:bf:ae:81:d9:70:dd:
14:f6:f7:b3:55:aa:69:2d:76:e8:e8:e5:33:a5:52:35:ea:ef:
e3:2f:44:1f:86:ed:48:17:2e:c2:0f:14:df:40:d2:91:92:69:
fc:45:3f:42:bc:d5:11:da:e7:39:e4:fe:62:0e:dc:6b:34:19:
ab:d9:ae:79:f7:f3:61:74:bd:e0:f4:41:53:3e:df:cd:c4:63:
6d:eb:0a:e5:bb:97:a0:66:96:6c:f2:f3:ac:af:f2:be:09:7b:
6a:52:31:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 23:08:08 2025 by rpki-client