Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/n6eFncOdRzYULPHiKcisS-YjuQM.cer
File: n6eFncOdRzYULPHiKcisS-YjuQM.cer (raw, json)
Hash identifier: VfFl/1hoEfy50h8tfQw56CVESCDhUGDwcENOIz72ONo=
Subject key identifier: 9F:A7:85:9D:C3:9D:47:36:14:2C:F1:E2:29:C8:AC:4B:E6:23:B9:03
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942748686C15355CF14893AC75D2A63BA0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:50:44 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.1.107.0/24
IP: 2001:7f8:c1::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:68:6c:15:35:5c:f1:48:93:ac:75:d2:a6:3b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:50:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9fa7859dc39d4736142cf1e229c8ac4be623b903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:67:c3:69:ad:9b:4b:fa:6f:5a:f2:1f:b3:ca:
cc:f9:5b:46:ac:b9:15:d0:28:f9:92:34:52:1f:c5:
a9:c0:80:e2:e1:67:e4:5b:b1:84:c0:49:95:b3:2f:
2d:e8:34:7c:f8:a2:c8:e9:a2:f6:28:2a:92:eb:e4:
21:4c:8f:ff:39:c3:9f:9d:bb:6b:8a:d7:24:d5:0c:
a6:10:8d:53:b6:3d:57:f7:68:d5:86:48:cc:cd:b6:
5a:44:42:0d:57:cc:da:94:6e:4c:f2:5c:f3:cc:29:
14:81:ac:86:d7:e5:de:fe:42:b6:00:b8:28:81:9a:
61:17:c6:bc:8b:37:e0:4e:18:1e:16:0e:b7:b0:9c:
a2:29:4e:9d:19:28:d4:a9:0a:01:d6:24:f1:ba:c6:
e5:eb:14:bf:60:3e:74:d3:07:35:9d:23:f5:ef:85:
0d:d0:2a:43:83:fe:80:3e:90:40:cb:b1:56:c1:e4:
c4:7f:81:fb:47:8e:9a:8c:25:22:ad:7f:2b:de:3e:
ab:a1:b9:ea:17:cf:22:d2:95:3a:24:1b:cb:5e:54:
2d:18:98:bb:22:19:16:fd:7e:45:d9:52:91:21:e1:
0c:05:f6:db:39:63:9b:d4:6f:2d:c8:b8:2c:6b:01:
9c:bc:73:3c:0b:47:bc:1e:9a:04:d3:33:e3:2a:78:
38:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:A7:85:9D:C3:9D:47:36:14:2C:F1:E2:29:C8:AC:4B:E6:23:B9:03
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.107.0/24
IPv6:
2001:7f8:c1::/48
Signature Algorithm: sha256WithRSAEncryption
7e:90:41:31:12:66:53:fc:94:4f:df:7d:1a:33:d8:95:d4:c3:
c4:c3:72:b2:e8:d2:f3:23:d2:dc:b0:b9:99:2f:0a:89:d6:98:
2a:bd:7e:10:20:30:21:50:a1:50:b7:c4:12:b3:7a:3e:27:f7:
a4:1e:64:9a:f9:a3:dd:bc:86:e5:a3:45:99:66:52:56:ed:3b:
30:c7:12:9d:0a:0e:70:af:a7:c0:38:3f:9e:3d:b1:0d:e8:e2:
80:97:ed:84:db:f4:37:da:a4:21:18:5b:a1:b1:7e:8d:a6:0b:
26:4b:a0:38:9a:18:cb:1d:3b:69:1c:48:bd:c3:4e:9b:9c:29:
31:b9:79:bf:70:4b:3b:f0:1b:17:e3:4d:b8:f6:6a:f2:ec:f4:
86:5f:fb:e4:1a:dd:21:9f:2f:e9:4b:3e:d7:41:7b:1f:f9:aa:
5a:40:66:a1:b6:b8:d8:82:8e:af:66:a3:fa:b3:0a:64:cd:6d:
b7:26:ac:60:4e:d3:26:5b:17:75:56:36:42:32:50:91:0b:36:
08:fc:5f:a7:58:f0:2f:d1:b0:ca:8d:4c:90:ff:d2:e6:d2:77:
b9:08:3d:82:89:f4:19:0d:5c:4a:dc:27:e3:8a:6a:25:3b:23:
7c:97:5f:3e:95:e7:ab:44:74:95:64:08:aa:8d:d4:a9:e1:a3:
d1:b9:0b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:39:24 2025 by rpki-client