Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ruxDT4IchrfuYxZpHXHMYcQMNGw.cer
File: ruxDT4IchrfuYxZpHXHMYcQMNGw.cer (raw, json)
Hash identifier: OxV3pqYMn4HqA5JdP0cg8KtswjwWiUFZWCpd93fjKoM=
Subject key identifier: AE:EC:43:4F:82:1C:86:B7:EE:63:16:69:1D:71:CC:61:C4:0C:34:6C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942067FE39FA8166F2228FCB075EC04DDD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:47:53 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 212.6.45.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:fe:39:fa:81:66:f2:22:8f:cb:07:5e:c0:4d:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aeec434f821c86b7ee6316691d71cc61c40c346c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:da:1d:80:89:75:44:02:ef:ce:a0:d2:34:c8:
f1:c1:8b:7d:93:fc:ff:f4:72:25:22:f4:de:42:07:
e4:62:88:48:c1:35:19:7e:8e:22:a1:73:e3:88:2c:
c7:bd:e5:73:03:e6:46:a9:3a:e9:07:75:b2:61:22:
0b:3e:53:d7:84:c4:9c:d4:4f:a4:44:1c:52:b8:16:
3e:b2:8b:24:57:fb:df:1f:e7:b3:45:86:3e:82:42:
b4:9e:6f:53:27:62:7b:46:49:e3:6a:c8:a0:63:fe:
9b:59:08:32:ed:b4:b3:39:cd:a7:77:ed:1f:84:42:
f8:15:a5:fb:4f:56:e7:a7:6a:38:47:72:12:78:bf:
46:9d:96:4f:40:28:db:c1:c4:1a:9c:b6:07:2c:0f:
30:65:46:38:91:87:7b:34:2f:51:68:35:d7:4e:ec:
98:dd:50:14:2a:0c:44:d4:45:d4:4b:6b:b3:74:fd:
fa:3a:d0:be:58:19:46:97:2c:8b:24:a1:13:9d:7d:
84:33:aa:48:02:4b:44:76:c6:df:3c:a5:4a:d3:e9:
92:23:12:d4:bf:06:dc:fc:45:1f:f6:ce:57:4c:d5:
c2:8c:f1:44:38:e2:3d:5b:83:c2:92:25:11:d2:d2:
0e:51:17:06:d8:2f:fe:cc:2f:bd:62:bf:85:0b:98:
e5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:EC:43:4F:82:1C:86:B7:EE:63:16:69:1D:71:CC:61:C4:0C:34:6C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/4b0790-5778-4f61-a0ee-910e0810ca94/1/ruxDT4IchrfuYxZpHXHMYcQMNGw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.6.45.0/24
Signature Algorithm: sha256WithRSAEncryption
66:bd:81:5c:95:e4:a5:8c:89:c3:2b:8d:9d:6e:c4:37:21:d4:
cb:9a:95:e9:fc:08:bf:40:81:5f:74:b3:ef:33:5c:45:74:5d:
7b:e3:b7:e7:d3:28:9b:77:7f:c8:1f:f3:64:0d:91:bb:c6:bf:
3a:4c:be:60:42:1e:52:11:52:7b:3c:f4:b7:76:0b:8f:11:a6:
0b:91:6e:bc:90:37:75:ea:28:9b:b6:4a:fa:2c:46:e9:ff:38:
c9:10:b1:ca:fd:23:46:fa:27:e4:a6:40:be:c1:09:28:13:13:
0c:26:c5:b6:ea:e2:6b:58:40:5e:69:17:01:6a:ab:fc:f5:88:
c1:96:27:f0:c2:54:a3:0d:29:cd:79:e1:3f:e1:78:59:fb:fe:
c5:4c:26:c8:e7:6b:1a:b6:85:55:0f:08:17:ef:b1:ae:3d:3d:
c4:f0:2b:88:19:4f:d8:b3:d7:aa:8f:34:74:90:48:5f:aa:3b:
f3:0b:b8:5d:43:b1:70:a4:80:af:5b:4f:00:de:5f:11:52:fe:
0b:8d:f7:72:80:e5:65:54:aa:c7:c5:c8:61:05:6d:e7:47:83:
a3:d3:09:27:7a:f7:97:d9:97:cc:43:a0:e6:72:5b:61:ee:66:
02:49:39:66:ba:b8:32:0a:0e:2f:f2:da:00:ec:b6:5f:85:1a:
01:17:af:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:38:58 2025 by rpki-client