Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ntj8_zGTrFO7SwfEjT3SnvWI640.cer
File: ntj8_zGTrFO7SwfEjT3SnvWI640.cer (raw, json)
Hash identifier: K5DxRELdhX6n7aPg4YacM4C8rs2BCHKMFzzzAMxb/p0=
Subject key identifier: 9E:D8:FC:FF:31:93:AC:53:BB:4B:07:C4:8D:3D:D2:9E:F5:88:EB:8D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942748581660D6DEE5B6BA755FDA23A4FA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/87/8ea34c-af87-4721-9e69-2af3b76c18c9/1/ntj8_zGTrFO7SwfEjT3SnvWI640.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/87/8ea34c-af87-4721-9e69-2af3b76c18c9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:50:40 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 45.144.92.0/22
IP: 2a0e:ebc0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:58:16:60:d6:de:e5:b6:ba:75:5f:da:23:a4:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:50:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ed8fcff3193ac53bb4b07c48d3dd29ef588eb8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7d:b4:82:c3:a4:d6:07:fb:f7:d5:8a:20:c0:
91:1c:ea:47:22:dd:f2:1b:bd:c1:ff:88:78:56:47:
db:e6:d1:15:c5:f9:68:65:55:e6:03:7b:89:92:aa:
23:93:5c:a1:ab:83:f7:a4:44:4e:95:23:48:fc:94:
f0:5a:64:bb:82:c2:25:84:38:06:ea:9c:01:7c:70:
d0:28:7f:b7:ee:53:d4:b5:da:3f:a1:8b:d1:f2:2e:
73:64:c5:48:70:ad:4f:ac:4f:f8:99:5d:0f:77:1e:
6a:f2:9d:65:41:62:f4:16:e0:2d:24:78:8f:47:3d:
0e:9a:c9:31:6f:16:ef:00:9e:54:cf:89:15:fa:30:
a7:da:d8:0a:fc:08:05:a6:24:d1:e7:5c:64:4f:a9:
d8:dd:99:bf:14:29:21:80:2d:c4:48:d9:b7:d1:6e:
f3:90:33:52:af:7e:ea:a5:79:dc:b3:66:f3:0e:cf:
b6:7f:05:26:97:0f:d5:81:22:50:fc:09:6c:a5:25:
59:89:8b:61:b7:a0:d5:a1:c8:17:9e:a0:32:ef:62:
d9:7e:1a:6b:94:84:c1:72:1c:fa:af:c5:9e:44:aa:
31:52:00:85:a6:19:a7:ab:7e:c6:cd:cd:0c:d4:5d:
bb:1a:b0:39:be:ad:99:b1:0f:70:55:c0:38:99:e8:
c0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:D8:FC:FF:31:93:AC:53:BB:4B:07:C4:8D:3D:D2:9E:F5:88:EB:8D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/8ea34c-af87-4721-9e69-2af3b76c18c9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/8ea34c-af87-4721-9e69-2af3b76c18c9/1/ntj8_zGTrFO7SwfEjT3SnvWI640.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.92.0/22
IPv6:
2a0e:ebc0::/29
Signature Algorithm: sha256WithRSAEncryption
83:75:6f:ee:fa:d8:7c:6d:60:00:73:4e:ce:d0:eb:f0:96:ae:
af:c0:dd:36:6b:82:2d:7b:bd:07:de:e9:3c:61:92:fd:15:a9:
d9:cd:66:53:71:d5:78:e9:54:b9:36:b3:43:96:b5:e0:c4:be:
10:b7:f2:13:96:50:83:03:33:a1:b8:76:95:ec:66:5f:ea:48:
56:6f:46:ae:cc:b0:ca:7a:a1:1e:c1:ee:f1:c9:78:98:2d:5f:
09:78:a8:ec:7e:98:63:10:b6:aa:65:23:21:2d:6a:75:3f:76:
81:bf:50:81:bc:b3:c1:28:23:ff:8d:db:ab:7c:ac:92:5f:95:
12:80:23:1b:b4:f8:92:12:dc:09:d9:04:69:95:f3:43:b8:8a:
9c:f4:5e:a4:9b:a6:ca:7d:7c:9d:5d:b3:3f:46:9c:f0:fb:9d:
d7:a8:b7:61:28:c9:ac:e5:3a:eb:d6:b3:a0:fe:17:aa:6a:62:
9c:93:28:d0:54:6c:8d:50:f2:56:de:6c:5b:36:d4:f2:a7:fb:
6f:ed:5d:65:af:d8:77:50:fb:15:15:1c:37:c8:2d:87:c9:9c:
7d:10:41:33:ab:7c:f6:50:cf:6b:9d:b1:23:d5:17:4b:1a:97:
63:31:3c:b5:3f:de:1e:c8:cb:32:c0:1f:5d:23:ed:7d:a1:4c:
d4:e8:c6:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:13:10 2025 by rpki-client