Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nMIzEMkVpP4JXht0oGbRze5HhD8.cer
File: nMIzEMkVpP4JXht0oGbRze5HhD8.cer (raw, json)
Hash identifier: y6bm8QGHr3HSKKHqluOxySpgRVpweCXumo20kmFz7sc=
Subject key identifier: 9C:C2:33:10:C9:15:A4:FE:09:5E:1B:74:A0:66:D1:CD:EE:47:84:3F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194206844E7EE8B07F2F894D721D9519383
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/53/20caee-fd68-4ddc-b22e-4433608aa5d5/1/nMIzEMkVpP4JXht0oGbRze5HhD8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/53/20caee-fd68-4ddc-b22e-4433608aa5d5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:48:11 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 195.49.180.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:44:e7:ee:8b:07:f2:f8:94:d7:21:d9:51:93:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9cc23310c915a4fe095e1b74a066d1cdee47843f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:64:be:54:3b:6a:b9:0d:db:26:d8:4a:fd:35:
f0:c7:63:90:8b:b4:9d:bb:7f:38:e0:03:59:5b:ac:
74:8a:b6:a6:fa:d1:c5:d7:88:8d:09:a8:b3:30:5c:
9e:2b:dc:b4:88:8b:05:51:88:b5:85:10:a6:69:37:
97:52:51:de:e7:97:41:a4:a9:40:53:73:90:5f:95:
67:af:4e:93:fd:1d:ce:e7:b9:2e:1f:e9:65:bd:ec:
89:f4:39:27:88:40:ed:a7:83:50:b2:e5:2c:91:21:
6a:9a:cc:c0:d3:86:06:ce:26:8c:2d:a4:0c:34:8f:
6d:0c:e1:04:68:98:3a:53:e4:39:e0:95:36:66:2a:
70:48:38:1d:f1:77:26:c7:e5:dc:69:79:4e:b3:30:
1c:6b:06:a3:b6:04:13:b8:d9:e1:da:58:13:6e:32:
a0:82:5f:71:4c:b5:2d:f5:e0:44:49:86:54:b4:7b:
39:db:41:fa:4b:d8:12:12:3c:08:09:c9:69:3e:0a:
8a:15:cb:ab:5b:a6:a4:01:8b:50:a3:88:98:e6:a9:
d5:ae:23:40:c8:6a:2e:73:82:a6:b9:50:a7:76:fb:
87:96:1f:1e:d6:a8:32:60:1f:39:96:d0:b3:99:81:
bf:14:98:6f:14:07:89:04:be:07:4e:05:10:99:86:
38:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:C2:33:10:C9:15:A4:FE:09:5E:1B:74:A0:66:D1:CD:EE:47:84:3F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/20caee-fd68-4ddc-b22e-4433608aa5d5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/20caee-fd68-4ddc-b22e-4433608aa5d5/1/nMIzEMkVpP4JXht0oGbRze5HhD8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.49.180.0/22
Signature Algorithm: sha256WithRSAEncryption
60:8e:98:ff:44:a3:a3:36:4f:10:c1:44:44:11:90:04:e8:9c:
82:88:09:c5:4e:c6:2e:95:95:3b:12:07:86:c5:34:86:68:b1:
72:19:25:a6:95:1c:2e:27:6f:c7:95:7a:55:35:e2:49:07:28:
7a:1b:ff:23:33:a3:cd:22:9c:69:fd:c5:7c:6e:ba:bd:e1:36:
05:f8:81:18:85:78:82:5f:72:91:e9:0b:65:da:c4:f5:e9:25:
6a:bb:3c:d7:d0:20:14:a4:1b:5b:db:9f:d7:4a:5b:3c:fd:31:
63:0c:80:76:7b:88:f6:e2:f2:df:cc:84:c4:f1:05:0e:35:4d:
f3:18:93:f0:89:22:c3:60:29:89:97:27:f1:46:fb:96:c2:04:
e9:b0:0b:d9:d5:04:61:f7:74:94:03:cc:0c:7f:8d:02:a2:88:
75:41:67:bc:f6:47:98:59:82:80:e6:f7:dd:0b:7c:0f:db:17:
24:2c:cf:2e:1f:a7:fa:bd:7d:14:83:ee:86:1d:8a:37:bb:65:
f8:ae:2e:42:46:d8:2e:af:df:b1:5c:bf:e4:5a:12:57:16:9c:
06:62:ea:2e:e7:f1:9b:b3:4e:01:61:7a:d1:40:50:04:d9:3a:
93:d7:94:a8:fd:7a:b9:78:57:04:38:68:fe:90:38:ef:ef:36:
47:8f:5a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:20:01 2025 by rpki-client