Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/l5FbqA0-1wRSRoFIinK-mR-mcNw.cer
File: l5FbqA0-1wRSRoFIinK-mR-mcNw.cer (raw, json)
Hash identifier: E+6+iWcKiJypEPs9eJ8taLpGJtjHeofjh18/zp2EXs4=
Subject key identifier: 97:91:5B:A8:0D:3E:D7:04:52:46:81:48:8A:72:BE:99:1F:A6:70:DC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221FE9AFABEBF82BFD1BC0A6DF017E7C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/01/870bf0-9166-4f60-a603-707b0a38b1e0/1/l5FbqA0-1wRSRoFIinK-mR-mcNw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/01/870bf0-9166-4f60-a603-707b0a38b1e0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:24 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.193.24.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:e9:af:ab:eb:f8:2b:fd:1b:c0:a6:df:01:7e:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=97915ba80d3ed704524681488a72be991fa670dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:93:0c:ae:88:a8:9f:3e:a7:75:0a:76:f4:7c:
bc:6a:6e:d4:3f:92:6e:69:41:de:0d:de:e7:c7:5c:
74:fa:61:52:1a:5f:6a:dd:97:07:e0:3f:56:a0:a4:
81:5e:5f:00:b3:a7:ed:c1:69:49:0a:32:ba:c3:d0:
71:b9:72:ea:2f:74:11:bc:88:67:89:f1:cd:17:dc:
e5:e2:bc:5d:db:25:7e:72:86:54:27:9e:9f:5a:a3:
7a:83:1d:20:ec:dc:b6:b7:f8:b1:2c:d2:10:56:01:
0e:61:35:b9:20:14:4b:e2:35:3e:e2:8a:a8:54:a0:
d0:4c:2e:05:af:b0:fc:f7:fc:d1:d2:c3:43:79:82:
95:db:00:07:09:71:0a:1d:ef:1b:51:2f:9a:08:70:
14:70:f0:a0:41:e4:23:6a:f6:de:23:b4:34:aa:69:
72:9b:5f:d7:40:39:29:e7:c8:03:f0:ff:60:a1:be:
31:ed:34:52:ca:20:33:9e:5e:ce:ba:aa:25:b4:2c:
20:b6:7b:52:c5:1b:aa:0a:64:e5:73:5b:bb:a9:af:
39:d2:33:d2:29:3a:fd:c4:a3:a9:c9:43:43:b1:67:
76:25:4f:3c:34:91:66:dd:ef:d2:bc:5e:ff:ba:3e:
f3:b6:b2:54:d0:53:d8:d6:0f:41:81:5e:0d:8e:00:
58:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:91:5B:A8:0D:3E:D7:04:52:46:81:48:8A:72:BE:99:1F:A6:70:DC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/870bf0-9166-4f60-a603-707b0a38b1e0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/870bf0-9166-4f60-a603-707b0a38b1e0/1/l5FbqA0-1wRSRoFIinK-mR-mcNw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.24.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:79:55:52:5e:dd:31:e1:1d:34:bc:f5:24:41:bf:d6:e1:a3:
99:d4:df:17:1b:89:7b:33:1f:61:a2:0a:38:2a:10:63:9a:9b:
c8:24:7d:42:45:04:21:3f:4c:d7:67:4b:4b:a8:a1:89:fc:fc:
cc:90:bb:41:1d:8a:c5:10:71:31:f9:ef:d2:64:ba:8d:ec:b5:
72:58:d3:1b:da:f7:0b:ff:2e:6f:5b:b2:d4:68:69:13:a4:e3:
a9:c9:49:8f:ea:02:96:2e:94:3a:00:66:d1:78:b0:88:72:d5:
c1:29:ea:aa:e8:b4:3b:d7:7a:7e:c8:00:99:b2:0e:75:2a:d9:
b1:4a:62:87:2a:32:51:ce:4a:b9:3f:f2:96:03:bd:11:d7:f8:
4c:1d:98:f9:7c:5a:ed:f2:b8:b6:34:50:24:79:69:66:14:31:
25:50:57:96:c4:e0:b4:44:8f:fb:c5:41:c7:07:f9:a3:4e:54:
05:84:01:d9:60:3f:2e:52:05:09:00:e7:19:f0:99:79:fd:b9:
1c:0f:96:01:6b:00:05:91:07:12:43:02:ea:09:56:d7:fc:c0:
9e:c8:0a:22:67:85:d4:3b:23:7b:d1:09:79:c4:4e:40:07:6f:
59:75:ef:ab:2d:97:fe:f5:ea:7d:c9:d5:52:74:09:5b:5a:c2:
17:76:20:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:34:04 2025 by rpki-client