Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rwlQP8rAF2lRWhny3CZX2S_TUN8.cer
File: rwlQP8rAF2lRWhny3CZX2S_TUN8.cer (raw, json)
Hash identifier: uJG6rjd6D+ROPm06XvG5BUfY1rGE7Gpn1cf7TaCPDoc=
Subject key identifier: AF:09:50:3F:CA:C0:17:69:51:5A:19:F2:DC:26:57:D9:2F:D3:50:DF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221FD4DD25401CCECCA4B59F9938B6C0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:19 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 141.10.0.0/16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:d4:dd:25:40:1c:ce:cc:a4:b5:9f:99:38:b6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=af09503fcac01769515a19f2dc2657d92fd350df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b4:53:15:d9:b7:96:11:4e:ee:23:fe:15:b2:
c9:2c:70:b1:52:2a:00:a6:74:e6:e6:af:8c:58:77:
06:cf:99:56:5e:de:5d:ed:8c:10:2d:0c:90:30:ab:
9e:f6:e8:9f:ad:ae:4c:66:c9:b4:50:aa:0a:2a:c9:
cd:ae:50:f5:18:e0:1d:e4:f7:46:70:4f:0e:c4:a3:
51:0d:87:c8:a3:a9:34:8b:0b:b2:7b:68:5d:b1:e3:
c7:e7:d0:c1:6f:10:b0:27:5a:b9:13:b5:2f:de:12:
62:d9:15:30:18:68:64:7e:2b:b2:9b:07:74:c4:85:
75:58:86:4f:ee:ad:cc:60:af:a4:ea:f5:a5:86:76:
87:49:7c:71:e1:fd:8c:a6:a3:df:c9:7e:ef:e7:08:
80:7e:23:85:3b:15:94:bb:b1:1d:82:de:65:75:ea:
f8:08:11:f7:52:c9:88:3c:d5:3c:e8:6c:f2:64:c0:
7d:cf:c2:ed:46:20:47:ed:84:1d:64:41:ce:7e:78:
93:33:0a:cc:36:a1:33:6f:dd:96:de:18:3c:5f:fd:
e0:61:23:a6:9b:b7:63:ce:c4:dc:6d:52:fa:91:55:
7a:eb:35:78:56:2d:a2:c9:48:fb:fd:4e:e3:18:5d:
2d:77:81:37:31:25:d1:dc:fd:fd:04:e7:21:f2:ed:
58:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:09:50:3F:CA:C0:17:69:51:5A:19:F2:DC:26:57:D9:2F:D3:50:DF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.10.0.0/16
Signature Algorithm: sha256WithRSAEncryption
14:fd:73:53:c9:bd:86:66:e2:55:a5:75:66:5e:b0:1c:df:10:
a9:4a:73:7e:b3:59:32:40:c7:65:fe:88:8e:68:e1:c5:e2:78:
b9:72:0c:18:d8:11:a0:f6:23:19:80:02:6e:11:7a:cd:f4:b6:
c9:2c:3c:8b:6a:42:b6:5d:e8:b5:c7:c9:c9:75:6a:c2:16:a8:
89:fa:16:2a:23:27:66:01:f2:67:44:df:2b:57:16:bf:91:95:
97:1a:df:83:f5:bf:33:e3:f1:93:9a:6c:a7:31:64:68:e9:f5:
df:2e:90:7b:28:0e:41:ac:ee:c0:d7:88:59:c1:b5:58:a1:9a:
66:7f:b2:5a:66:72:f3:e7:10:30:41:16:15:38:91:47:8d:f5:
74:90:3f:8b:a0:cd:f4:c1:25:1d:aa:96:e2:f5:16:51:68:25:
7b:a4:b4:e4:a6:4d:d7:80:9e:30:8f:59:d2:d9:d7:10:04:3e:
00:42:a7:8a:fc:3c:ee:6d:b4:7b:e3:d7:ae:64:89:c0:dd:8d:
87:24:fe:ed:cc:84:5e:ac:aa:11:00:ff:15:db:b4:a4:c5:d0:
33:70:dd:c4:3a:cf:35:ff:77:4b:d5:97:72:10:6a:d5:6c:8e:
e8:21:af:9a:9a:16:ec:a9:d8:58:bc:99:4f:26:0d:6f:be:98:
d3:21:ae:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:19:49 2025 by rpki-client