Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/p-7aZdzUOH1yJwBcHhOgbUSHe28.cer
File: p-7aZdzUOH1yJwBcHhOgbUSHe28.cer (raw, json)
Hash identifier: k+7md6fq0muLUB6ZPwIQRWPRwscrCYKK1lyuBsexPwM=
Subject key identifier: A7:EE:DA:65:DC:D4:38:7D:72:27:00:5C:1E:13:A0:6D:44:87:7B:6F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942369315E42806CFAADB2FD1DC10FA0D8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:48:04 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.177.148.0/22
IP: 2a0a:3d80::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:31:5e:42:80:6c:fa:ad:b2:fd:1d:c1:0f:a0:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a7eeda65dcd4387d7227005c1e13a06d44877b6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d4:71:8a:b0:98:2f:bb:b4:d9:b7:6b:17:86:
98:86:f4:06:07:06:d4:4f:14:c7:01:c4:6f:0d:04:
00:3d:62:49:2d:de:a6:95:02:6d:b2:ea:bf:52:07:
25:c6:c1:98:7c:d3:2b:f4:7d:ab:7c:fe:67:99:04:
f5:cd:12:ea:ef:6d:0d:04:67:4c:f8:f7:13:ef:03:
f2:69:c5:32:00:9a:f7:ef:35:78:15:73:2b:8a:d7:
d0:7f:d5:b7:ea:b1:63:08:53:e8:9c:ce:7d:ef:1c:
8f:4a:49:c4:30:54:17:37:11:2f:1e:35:3d:9a:91:
5c:f7:89:d6:d1:dd:c7:ea:f7:a0:82:26:16:97:5f:
36:65:87:cb:49:4c:d9:96:bc:54:c3:65:14:40:21:
b2:ce:a1:70:31:1b:f5:01:0a:a2:2d:61:ae:e6:be:
7c:43:4f:42:84:ed:22:1d:6f:20:a7:e1:9b:3d:15:
cd:79:ab:20:63:c6:51:aa:0c:9f:24:d7:58:35:16:
49:21:6c:54:15:ce:d6:f4:d2:b8:27:c1:73:ec:c7:
85:56:3f:ed:b3:00:8d:fb:23:83:ed:69:b8:9c:aa:
d6:d1:52:6a:c3:4e:b7:af:e3:dd:4f:3a:7e:ae:30:
62:7c:90:db:62:4e:28:d6:41:7b:f6:12:1d:4a:fb:
4f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:EE:DA:65:DC:D4:38:7D:72:27:00:5C:1E:13:A0:6D:44:87:7B:6F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.148.0/22
IPv6:
2a0a:3d80::/29
Signature Algorithm: sha256WithRSAEncryption
3d:af:97:c5:5e:67:7d:0e:c8:0d:db:7f:dd:15:a3:e2:69:93:
01:15:bf:4c:6d:94:73:fe:b3:f3:94:d1:99:f3:35:42:18:18:
6e:93:5a:47:b6:ca:67:0b:4b:49:47:1d:67:62:7a:dc:d0:6b:
e9:68:a0:dd:5b:51:b5:8e:46:96:0f:a1:f9:1d:73:f4:b8:ab:
b2:2c:54:f6:88:56:6e:e7:3a:ee:f7:70:e1:4a:9d:df:ce:35:
34:b8:6a:4d:76:5f:8b:37:eb:f6:32:07:6f:39:35:f5:58:95:
ca:2b:31:01:a7:10:86:eb:25:53:ff:21:83:8a:90:d7:a6:dd:
5b:bd:a5:18:cc:c1:4d:ef:00:88:7c:26:d2:c3:fa:94:ae:69:
39:0c:c0:54:62:32:5d:53:c7:3b:55:08:35:3c:4c:c9:f7:75:
12:14:46:1b:0f:89:dc:12:76:b8:6e:b6:10:dd:06:3e:73:5e:
5a:da:dd:78:3b:8a:b5:c6:a6:ae:a7:34:e0:a2:fb:d3:f2:80:
17:35:99:e2:40:c7:62:28:e8:6e:4d:14:29:dc:af:0e:f9:27:
2d:f0:48:bc:88:40:e3:40:17:7c:2d:98:0e:39:ef:c2:dd:72:
91:9e:be:79:b6:eb:05:93:54:16:b8:08:e6:55:ce:3e:ff:0a:
e0:ea:7b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:42:44 2025 by rpki-client