Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/mFTaUYIyMZ9noy_YrUwGU2xB1b8.cer
File: mFTaUYIyMZ9noy_YrUwGU2xB1b8.cer (raw, json)
Hash identifier: yVVIQGlxih5ZmynQpvDvDndduie8zvhyxfQ8G0BJvoc=
Subject key identifier: 98:54:DA:51:82:32:31:9F:67:A3:2F:D8:AD:4C:06:53:6C:41:D5:BF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D7350DE6B95621DEA952E7D4272C7D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/61/382597-0d50-400d-a71b-676e80dc1de6/1/mFTaUYIyMZ9noy_YrUwGU2xB1b8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/61/382597-0d50-400d-a71b-676e80dc1de6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:48:13 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 141.75.0.0/16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:35:0d:e6:b9:56:21:de:a9:52:e7:d4:27:2c:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9854da518232319f67a32fd8ad4c06536c41d5bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:dc:16:8e:b1:3f:58:40:59:94:68:f7:85:45:
6e:d1:12:be:a1:dd:1b:19:47:c0:7c:f9:7a:2a:49:
66:5b:1c:01:83:f2:8b:89:2e:d4:e8:6d:90:72:3d:
ad:c8:03:a7:22:d5:e9:ce:04:36:e2:13:47:8f:39:
f9:d7:49:aa:72:b2:83:93:bf:35:0b:31:1f:e5:91:
fe:9d:3a:be:b1:cb:e2:fc:d3:70:44:a2:4e:e9:f3:
ef:a8:44:99:da:ae:ef:44:db:17:2b:07:0d:5e:10:
e6:4d:6c:b6:38:96:87:aa:8b:57:03:ed:e7:05:5d:
4e:ea:f4:62:21:69:2a:af:55:89:a8:bb:86:33:4e:
d0:23:26:97:15:50:15:49:ff:75:44:07:2f:f8:52:
28:ca:28:51:e1:a7:86:e1:f7:cb:fd:16:e8:72:3d:
98:c1:e4:e1:08:36:aa:b6:a6:ee:e0:a3:a5:03:c9:
76:eb:b0:af:e9:39:4b:0d:30:d1:ff:a2:51:22:c3:
13:49:33:33:bf:ac:80:fc:3b:cc:96:a7:90:b1:67:
71:03:b6:8f:28:01:5c:f1:e6:fe:f5:cd:5f:c7:42:
cb:4b:d2:c7:c4:42:4a:62:3f:b1:a2:bb:fd:7b:42:
78:ca:7d:ef:77:84:c4:45:f3:2c:c6:b0:8d:83:e8:
6a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:54:DA:51:82:32:31:9F:67:A3:2F:D8:AD:4C:06:53:6C:41:D5:BF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/382597-0d50-400d-a71b-676e80dc1de6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/382597-0d50-400d-a71b-676e80dc1de6/1/mFTaUYIyMZ9noy_YrUwGU2xB1b8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.75.0.0/16
Signature Algorithm: sha256WithRSAEncryption
69:f5:56:2e:b1:e3:d7:bc:ac:1b:0e:a0:dd:27:13:e5:76:2d:
e0:a5:dc:65:9f:df:be:81:be:03:0e:cf:cf:82:6f:0f:07:18:
72:95:77:e3:a6:3f:79:b6:37:fe:28:3d:c1:eb:05:e5:b3:c4:
ea:09:bd:de:e1:f9:51:fc:1e:26:6c:19:76:51:df:41:73:f6:
d4:3c:92:91:f0:e3:90:e5:52:e5:d2:34:d1:12:31:95:d4:00:
06:82:a4:f7:68:ec:4d:92:48:07:0b:1b:5e:ec:46:78:a1:5f:
84:33:b1:06:b9:ae:b4:bf:66:eb:5b:d1:8a:80:3e:5d:8a:ec:
06:03:0d:9e:b1:d5:d9:d5:ed:85:87:1e:43:51:a5:f3:dc:40:
16:cc:f9:42:94:ac:43:a2:10:27:3e:78:a4:d1:1a:d4:a3:42:
b1:98:59:47:18:7c:61:04:a5:bb:fb:e9:f9:bd:b2:18:87:b3:
11:eb:a6:7a:9a:4f:f1:1b:f8:d7:d5:86:a1:5d:7e:f7:31:e0:
59:97:0d:27:3d:d1:6b:bb:b0:1a:27:56:18:bb:4a:18:c7:41:
ce:2c:8b:63:26:47:36:6c:35:e6:3f:d3:45:be:e8:82:a1:52:
a9:fb:f4:63:dc:15:57:ef:95:ba:53:15:81:bd:8d:34:f7:a4:
f6:89:ef:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:35:27 2025 by rpki-client