Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rMGajH8XQRRJx9SP-TCNJIMulSs.cer
File: rMGajH8XQRRJx9SP-TCNJIMulSs.cer (raw, json)
Hash identifier: puYDekn60dQKhN46KSL0Wbd4unp95dOCgKlvyD2bb8Q=
Subject key identifier: AC:C1:9A:8C:7F:17:41:14:49:C7:D4:8F:F9:30:8D:24:83:2E:95:2B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942143C8A9F5A65FC6D5AF24A6DDD3B840
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:47:57 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2001:67c:7f8::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:c8:a9:f5:a6:5f:c6:d5:af:24:a6:dd:d3:b8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=acc19a8c7f17411449c7d48ff9308d24832e952b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e0:9c:1d:35:f5:69:ec:9e:8b:da:34:d8:35:
2e:cd:e5:4c:4f:cb:35:4e:ae:f2:7c:92:eb:19:a7:
ae:de:6d:a8:b9:ae:00:88:8b:ed:f7:b6:37:84:6a:
6c:4d:88:b2:59:16:a2:7a:93:08:8f:f8:90:5a:89:
db:49:32:12:e3:fe:d0:70:23:23:e5:cc:0b:08:06:
fa:15:18:2b:c5:8a:f9:31:fe:15:76:8e:e8:6d:e2:
61:30:b2:c5:f3:0c:2b:83:b8:97:d8:34:43:da:5a:
ef:76:c5:e5:4d:14:45:a2:65:23:3a:29:0f:40:6e:
35:81:8d:b7:2b:6d:e7:a6:1b:cd:f7:29:ea:de:b8:
fe:c2:d0:0a:e5:40:d2:45:3b:e7:d1:89:48:b2:e6:
39:45:d5:83:5c:23:af:42:76:b6:89:46:fa:99:ba:
1c:15:d3:8d:94:48:86:f9:ae:56:b8:55:51:a6:74:
24:26:e1:9a:98:9a:25:55:41:ae:10:79:c5:0a:72:
20:df:65:8d:c7:b0:8b:08:51:da:28:ff:6b:eb:d3:
2e:83:73:bb:e5:0c:ec:e9:62:ae:1f:7e:dc:7c:b7:
e1:3d:79:30:df:8d:f5:64:c5:8f:7f:b1:98:e1:0c:
ff:96:55:df:8e:d3:73:72:21:2f:66:27:b1:6f:93:
3a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C1:9A:8C:7F:17:41:14:49:C7:D4:8F:F9:30:8D:24:83:2E:95:2B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f405a2-4e3e-4621-971d-bf8f3d43884f/1/rMGajH8XQRRJx9SP-TCNJIMulSs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:7f8::/48
Signature Algorithm: sha256WithRSAEncryption
99:54:2d:cf:1c:43:66:f8:d1:21:b7:d2:bf:f5:85:0a:3d:3e:
9f:12:37:06:90:8c:bc:3c:cf:c0:8e:87:aa:01:56:41:61:bf:
e8:0d:d1:a6:fc:df:00:09:7a:94:81:65:fe:aa:7a:8a:08:d5:
67:7d:0e:0a:ec:55:9f:c6:da:ab:5a:07:1b:08:1f:d0:db:39:
ba:0a:ae:1f:b4:17:60:1c:bb:dd:6e:fa:3b:47:d8:37:e2:04:
23:8e:61:9b:e3:bb:92:79:4d:77:60:99:fd:d4:93:35:c9:69:
fa:b2:15:89:48:44:f5:30:36:6a:71:92:7c:ad:16:36:b3:45:
cd:a0:c9:e8:4b:5e:ca:c7:67:39:49:2d:ae:7a:65:fd:32:17:
93:f1:38:3c:24:3c:b6:16:e7:8b:77:92:84:1d:0e:20:cd:95:
48:32:8e:0e:90:40:a4:ca:6a:c9:e8:32:a4:ad:ee:c3:17:f6:
70:7b:a6:b5:e4:d8:c6:2e:ba:cb:34:ae:0c:ef:3e:09:76:cd:
28:dc:73:80:ea:04:d1:62:16:51:36:d3:39:69:a9:34:b3:84:
3d:c8:6c:38:42:62:a3:5c:b0:34:e7:35:de:db:eb:f3:62:1e:
41:dd:c9:65:1b:f5:cc:5d:5f:11:02:80:6f:5c:3b:c2:89:98:
71:e8:19:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:31:00 2025 by rpki-client