Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lvgJYTh33quHSpQB0VbbFP9NKBQ.cer
File: lvgJYTh33quHSpQB0VbbFP9NKBQ.cer (raw, json)
Hash identifier: uQtCdTAFGzoSF4X4LRSjttSFIjBF18fRckadMm5aSeM=
Subject key identifier: 96:F8:09:61:38:77:DE:AB:87:4A:94:01:D1:56:DB:14:FF:4D:28:14
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258F6E7631FF015B39113353C7F0B75F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:49:04 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.169.6.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:6e:76:31:ff:01:5b:39:11:33:53:c7:f0:b7:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=96f809613877deab874a9401d156db14ff4d2814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:80:b9:51:2a:88:6e:fb:66:14:bd:e5:53:dc:
fb:1a:87:8f:9b:0a:20:b2:cf:a5:9f:11:f9:60:61:
60:62:b9:18:ea:90:86:55:fc:dc:b8:19:2f:76:c1:
d3:49:a5:c7:f8:dc:a6:dd:e8:4a:8f:cf:d1:66:a5:
ff:43:a5:f8:65:55:3c:32:74:15:97:d3:29:0d:73:
dc:e1:76:a2:35:c7:00:c2:32:88:43:25:fe:fe:cf:
bb:36:79:b1:d8:2b:69:d1:ba:c5:2a:2e:ff:f9:47:
31:66:e0:a9:f2:9d:75:f6:e5:e7:18:5e:11:66:82:
ad:05:26:4e:ef:39:ad:2c:15:53:90:80:09:a5:a6:
76:a3:51:ed:0e:93:6a:72:09:c4:16:2b:26:35:86:
1e:9a:2c:8d:da:bd:b4:a3:8a:0e:6f:ff:aa:e8:2d:
6e:f1:4b:89:81:9a:bd:55:eb:8e:48:d3:38:a4:70:
d9:33:ab:a7:ca:c3:64:ef:8b:25:d4:91:35:b1:d3:
1a:ec:99:da:91:d9:a9:c8:1e:e0:a0:83:f8:f5:19:
b2:58:28:c8:a5:4f:1f:2e:c9:2d:5c:43:77:7a:02:
b5:ae:30:12:b5:13:34:e1:e0:85:0f:55:47:f9:2f:
f0:a7:48:e4:ea:84:29:78:48:d9:5f:b5:12:40:3a:
56:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F8:09:61:38:77:DE:AB:87:4A:94:01:D1:56:DB:14:FF:4D:28:14
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/ad2782-f53a-4bb4-b8d7-6466d483459c/1/lvgJYTh33quHSpQB0VbbFP9NKBQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.169.6.0/23
Signature Algorithm: sha256WithRSAEncryption
53:cb:97:47:0e:b3:bd:f9:08:4f:a4:33:dd:4a:f3:e1:05:1a:
3a:bb:b3:6d:77:dd:d0:c1:3f:36:29:64:6f:df:87:23:2a:c5:
3d:8a:bf:97:fc:09:16:78:7b:86:6a:a1:57:87:e1:22:1e:4c:
ba:da:d4:6c:43:0f:f4:6e:59:14:31:ee:ba:88:47:28:e2:fc:
33:af:38:b1:a2:4f:b9:6e:47:96:ca:b8:4e:b7:a5:0b:a8:b7:
c3:8e:c4:51:d3:09:ff:42:16:22:66:b0:e2:09:b3:c1:11:b0:
27:e8:40:0f:2e:1c:82:8c:f3:9a:8f:3e:73:f4:bc:bf:27:52:
59:8c:4f:e4:2b:e1:17:b8:bd:0f:1c:64:39:e0:e8:5e:df:49:
7e:7b:ef:b3:d0:46:67:f2:29:4c:ac:8f:95:af:0c:aa:66:91:
e9:bd:a5:c5:a8:38:f3:2c:5f:b5:db:a3:c1:c7:19:ac:fe:51:
97:88:bb:5f:51:d7:37:1e:cf:d8:aa:dc:79:3b:9c:6d:bd:3d:
17:e2:04:f7:ae:86:80:81:40:f3:a1:db:b3:1d:c4:36:25:b7:
4a:60:b9:80:f8:27:7d:94:c0:58:75:03:fc:bb:54:7c:13:60:
d1:3a:bd:99:57:7f:fb:f8:d4:43:1d:e2:53:f5:8e:3d:8b:20:
68:1c:ca:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:42:44 2025 by rpki-client