Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pTi7DCtB76jDsCBk68UvupLCNiY.cer
File: pTi7DCtB76jDsCBk68UvupLCNiY.cer (raw, json)
Hash identifier: IvsOmbVrl/OwbsoaTihjolKTBnLZo6VQO8gcRFNozCc=
Subject key identifier: A5:38:BB:0C:2B:41:EF:A8:C3:B0:20:64:EB:C5:2F:BA:92:C2:36:26
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B1E8587BF009607FB0CFFFCB7F7200
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/pTi7DCtB76jDsCBk68UvupLCNiY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:15 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.251.236.0/22
IP: 2a0c:1ec0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:e8:58:7b:f0:09:60:7f:b0:cf:ff:cb:7f:72:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a538bb0c2b41efa8c3b02064ebc52fba92c23626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ad:a3:09:4e:76:37:43:e5:72:15:21:d2:29:
a1:74:98:18:a2:ca:9a:35:9e:d9:1e:a3:99:09:d2:
ad:15:6c:07:6e:b0:b1:bd:f0:26:36:c4:43:6e:ed:
5b:67:e9:f4:60:e4:1a:19:ba:42:cd:5e:ad:35:fa:
25:ab:77:75:07:a9:37:d5:60:52:4a:29:e0:af:4e:
e3:c7:62:f4:1f:b1:d5:79:05:54:ed:c0:16:12:64:
56:67:ab:65:89:3f:0f:71:e6:7f:c1:b9:20:0f:e9:
e5:54:be:c8:cd:18:90:92:a0:af:c7:2a:84:0c:3e:
9e:e0:42:0e:59:d8:f2:52:4c:9f:3b:51:13:eb:02:
32:cc:09:f9:f4:1a:9a:d0:b2:82:14:68:8b:ae:42:
fa:ce:1a:e1:c8:0d:ca:4e:a8:5f:bf:c2:6c:30:4c:
ea:e6:78:1a:3b:88:c1:06:0e:6b:37:df:c6:55:c1:
aa:a5:94:ba:6c:58:1e:c1:b8:a1:13:6e:7e:73:79:
32:b1:ce:f1:b8:ca:0b:a5:75:42:50:1f:23:18:99:
ea:b8:98:b5:29:f2:1d:06:65:65:6a:b9:72:50:ab:
3e:d9:21:e3:89:40:91:28:c2:c2:84:6e:60:92:40:
12:6c:94:7a:77:c3:d5:5d:cf:bb:66:e0:8d:53:4d:
d7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:38:BB:0C:2B:41:EF:A8:C3:B0:20:64:EB:C5:2F:BA:92:C2:36:26
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ceba5c-e9d9-4e91-babc-67282d7138a0/1/pTi7DCtB76jDsCBk68UvupLCNiY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.236.0/22
IPv6:
2a0c:1ec0::/29
Signature Algorithm: sha256WithRSAEncryption
96:fb:39:e7:c6:44:76:b7:08:e6:07:41:f4:12:2e:9f:9d:b8:
de:53:52:61:5c:ad:7e:66:72:6c:90:b4:02:7c:70:8a:3d:64:
49:c6:2d:5f:96:a8:f7:6d:e4:61:57:ee:01:40:ef:f6:0b:e2:
c0:4d:11:e2:f6:9f:95:9d:f2:4a:c5:ac:87:11:89:00:26:b7:
1b:6d:37:a1:c2:6a:06:48:08:5d:7c:44:8b:3a:f6:fa:bd:62:
62:f8:35:11:83:ca:81:5f:2c:83:f7:f6:a8:96:cd:59:4e:f0:
d3:69:6d:0b:33:a1:14:e1:15:23:4e:c7:c8:43:c9:21:69:fe:
a6:36:d9:fe:86:1e:16:e8:96:77:30:28:7b:68:d1:0f:65:d6:
03:2a:ca:31:3c:32:2d:a7:c2:2a:29:62:7c:99:0f:9b:d8:3b:
98:7e:b7:49:dd:2b:4a:e8:c7:b8:bd:9d:b8:08:de:25:a4:bd:
c1:68:32:1e:d7:94:86:71:52:fd:bc:fb:48:a4:53:ff:c8:99:
0c:98:6d:a7:d4:90:3a:db:9c:ba:78:68:f0:23:3e:29:07:c7:
87:5c:45:ed:e7:64:f0:92:14:2e:67:be:3e:9e:b2:78:c9:06:
40:dc:18:17:2d:4a:4c:df:83:74:f6:7e:03:9a:95:33:a4:ca:
05:87:02:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:40:13 2025 by rpki-client