Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.cer
File: p_ZlIvQD2MmUpIRoKHB5lBfOHoE.cer (raw, json)
Hash identifier: dkjGjlSRFQPOD6UwtWWUT542GLSnKU7ELh3FaJWyQ6U=
Subject key identifier: A7:F6:65:22:F4:03:D8:C9:94:A4:84:68:28:70:79:94:17:CE:1E:81
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FC39E444433C945D4DF12899423DC5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:49:02 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.89.88.0/22
IP: 2a05:d640::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:39:e4:44:43:3c:94:5d:4d:f1:28:99:42:3d:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a7f66522f403d8c994a484682870799417ce1e81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f8:1c:80:f8:80:cf:44:e8:9a:58:50:80:e3:
61:55:c8:29:06:04:98:15:f5:13:10:45:17:5a:58:
08:e7:d4:23:ab:1c:31:63:2f:01:a2:9b:5c:e0:b5:
fb:1b:3f:1a:c7:b3:f5:78:ab:d6:0f:fb:80:87:2d:
9f:cf:fe:4e:b9:15:9a:47:da:85:cf:95:44:97:5c:
ab:9a:8d:26:30:d1:c3:84:57:24:34:80:f5:bd:b8:
08:89:ab:89:9e:fb:f3:f5:c3:a8:07:d0:ad:1e:7a:
0c:1b:d7:bf:11:c0:b6:9b:0a:68:39:d4:48:1e:e3:
40:e2:a8:d9:86:a0:c6:14:57:d6:73:68:ec:c5:cb:
80:aa:61:cf:24:eb:7b:bb:39:db:94:3e:32:4d:05:
0d:5d:0a:1e:9a:85:a1:98:00:a6:47:5e:f2:01:75:
a2:c8:e9:5a:e3:d8:35:b4:16:47:78:4f:9a:e7:73:
d7:19:1c:9d:d0:20:3d:6a:86:c2:b3:b5:42:50:58:
2f:b9:17:33:08:77:ee:cc:8c:43:bb:56:74:3a:b2:
89:d9:b1:e4:60:6d:9f:65:d5:61:97:be:60:35:28:
15:8b:34:5f:85:21:28:c5:d8:e2:25:c3:68:02:33:
7c:a4:1e:c9:ee:38:70:9b:49:41:16:4a:11:fd:be:
a6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F6:65:22:F4:03:D8:C9:94:A4:84:68:28:70:79:94:17:CE:1E:81
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.89.88.0/22
IPv6:
2a05:d640::/29
Signature Algorithm: sha256WithRSAEncryption
69:fa:2c:90:4f:94:8d:13:35:c0:d3:b2:29:85:cb:22:b5:15:
5a:27:fb:33:74:b7:77:ce:ce:6c:d2:51:64:e0:53:e3:d2:53:
7d:e0:9a:63:9f:7b:60:ca:f2:84:2c:07:a3:28:e9:2f:79:d0:
e2:f7:18:d2:e8:59:4a:28:9b:12:a8:5c:7b:fe:b3:21:8d:a3:
ac:a7:6d:88:70:5a:0e:d9:54:46:8e:86:06:7b:17:b6:86:75:
83:e8:f9:99:2c:9c:e2:64:cc:35:33:28:2c:aa:bd:82:a9:d4:
dd:d1:74:c2:8b:02:53:8f:6a:ae:32:aa:75:0e:86:38:50:24:
90:73:8b:3d:c8:99:6b:83:af:97:79:ff:d4:cb:de:f7:7e:39:
e0:f4:c8:fd:f6:e8:69:b4:81:10:a3:28:8c:aa:54:16:b7:b4:
40:a1:c9:31:2c:47:25:23:4b:5b:b1:3b:c1:34:89:35:ec:42:
18:32:d8:c4:43:30:f7:e3:a8:e0:84:4b:56:88:46:be:d7:e2:
72:c3:6a:d5:8c:8d:94:16:c1:2e:58:4c:1e:23:dd:ce:01:36:
11:7c:fd:7d:66:21:f0:10:7a:23:61:b8:21:d5:cb:ed:09:0f:
73:72:82:ea:c7:d4:00:17:f8:f6:a2:4a:89:0b:de:cb:fb:92:
ff:08:ac:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:33:00 2025 by rpki-client