Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/k-zM3oXECxVPkZuvZO8DLscNdR4.cer
File: k-zM3oXECxVPkZuvZO8DLscNdR4.cer (raw, json)
Hash identifier: sBGD4htFFnoWc3EpT0z1ilqyUJ2LWyAd0ZEL4rYDumg=
Subject key identifier: 93:EC:CC:DE:85:C4:0B:15:4F:91:9B:AF:64:EF:03:2E:C7:0D:75:1E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D6AFC3B47631E525154870F9E89DD0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:47:39 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2001:67c:138::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:af:c3:b4:76:31:e5:25:15:48:70:f9:e8:9d:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=93ecccde85c40b154f919baf64ef032ec70d751e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3d:bd:f8:2b:cf:b6:90:1c:89:ce:84:c6:d8:
0e:4c:65:df:03:71:26:7d:9c:a9:23:9d:85:39:70:
59:b3:15:19:6c:38:02:e2:d4:33:ef:2d:24:eb:c6:
73:af:07:fc:ce:d5:56:f6:e6:bb:db:03:ec:28:54:
c1:e1:20:19:f5:47:43:70:fb:2e:2d:43:52:46:ac:
7b:45:ff:a2:e7:23:bd:85:cc:41:23:e9:c5:49:42:
cb:04:8d:10:d7:0f:f3:f6:e3:c8:b5:65:cd:3f:ed:
02:3b:92:36:41:39:4c:f1:52:59:ed:05:32:da:d2:
17:15:58:90:94:f7:64:34:37:f1:96:91:96:62:d1:
31:48:e3:21:74:87:fa:c8:ec:f7:37:99:52:88:ba:
5a:96:65:30:04:06:ee:08:90:c9:f2:b2:3b:ea:b8:
78:aa:80:39:21:bb:a7:a7:eb:a4:06:1d:32:1a:d8:
9a:97:45:76:22:1c:24:ce:49:d5:e6:fd:dd:d4:f1:
48:e4:f9:fc:8f:3a:35:00:58:f4:e0:22:39:89:32:
00:92:40:c0:3c:14:c4:57:c1:83:70:69:06:bc:c1:
2f:a7:5d:09:ad:f7:55:b0:7d:a1:09:0f:36:55:4a:
79:8f:4a:ae:1c:d9:1c:47:aa:64:3d:6e:5b:72:66:
1b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:EC:CC:DE:85:C4:0B:15:4F:91:9B:AF:64:EF:03:2E:C7:0D:75:1E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/965580-8736-4173-bde3-2c3028fcece9/1/k-zM3oXECxVPkZuvZO8DLscNdR4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:138::/48
Signature Algorithm: sha256WithRSAEncryption
96:44:57:30:c5:6e:91:52:34:d2:fa:b7:16:7e:b7:a4:4c:45:
7f:1e:40:f4:94:a0:5f:02:9b:0e:eb:2e:1c:b7:7a:ef:cf:55:
ec:78:f2:b7:94:c7:89:87:46:0e:78:ec:f1:9e:7d:f8:d8:cd:
11:fb:f5:a6:48:7e:e7:fb:ca:a6:24:0a:05:2a:7e:59:09:ed:
eb:5c:4c:62:9f:38:91:e8:f4:d7:c6:77:db:0b:8a:36:eb:47:
8a:96:c0:f1:68:22:5e:c0:b2:90:58:b3:26:8d:4b:90:a4:50:
ff:5d:14:7c:1c:d9:f6:7e:4f:94:9a:3e:ac:99:e5:95:b2:3a:
94:98:3f:63:a4:fb:4b:d3:15:66:f2:05:8e:89:09:7b:3d:cc:
5f:01:77:1f:0c:54:f4:9f:0c:d6:f2:c2:aa:7c:ab:54:b8:53:
5e:79:f5:ca:ad:5a:4a:6c:a6:4b:eb:8c:04:ec:9c:1b:0a:4a:
0f:65:f3:27:77:c5:07:c6:46:64:5c:59:9b:8f:0e:68:14:a4:
50:cd:98:b3:b6:1e:7e:0a:11:54:21:54:6a:9c:b6:a5:47:96:
21:df:d1:ea:1b:fc:b5:0d:73:25:6a:5c:c5:2b:e5:0a:77:6f:
29:c9:2f:18:3b:d2:f9:42:7d:a0:db:98:28:05:3a:c1:dc:ea:
62:1e:a4:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:02:52 2025 by rpki-client