Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/s7pHYFzzZ2JiY-V_FtDYeRbO3cg.cer
File: s7pHYFzzZ2JiY-V_FtDYeRbO3cg.cer (raw, json)
Hash identifier: O6GC5yVYs9GClsTASwmyfu3FwXVF03vVkIQiAWU+pdU=
Subject key identifier: B3:BA:47:60:5C:F3:67:62:62:63:E5:7F:16:D0:D8:79:16:CE:DD:C8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942827350FB7C342D6DB13744797772EE2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b5/3dfc14-e6ab-48ca-9613-495a501c6998/1/s7pHYFzzZ2JiY-V_FtDYeRbO3cg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b5/3dfc14-e6ab-48ca-9613-495a501c6998/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 17:54:05 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.220.141.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:35:0f:b7:c3:42:d6:db:13:74:47:97:77:2e:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 17:54:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b3ba47605cf367626263e57f16d0d87916ceddc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:33:f8:90:6c:04:5a:ea:07:7d:c2:65:93:ca:
f7:b1:9f:10:4e:f8:a5:8a:b7:9b:35:ac:86:37:21:
84:40:76:a5:22:6f:f1:4a:33:ef:e6:39:20:83:c6:
a4:f0:28:72:3a:af:9d:80:f9:7a:ef:2c:c2:fa:ac:
c9:72:d1:e7:32:ab:da:90:28:16:e2:94:29:bf:18:
9f:b8:7a:46:67:30:2c:ae:13:a2:60:87:a5:99:29:
b4:54:d5:6a:e1:fb:bb:be:c0:fc:b0:c4:32:d3:6e:
ae:7d:f7:cc:d6:87:28:9d:6b:1d:e5:2a:1f:67:16:
1f:ed:3d:25:72:7e:ac:c7:f2:9d:0a:de:71:f8:97:
a0:31:5e:3a:10:a2:9d:75:50:2e:29:ae:35:f1:a0:
24:84:2f:47:21:f7:d9:10:b7:bc:51:06:c5:5e:0e:
8b:98:22:86:ee:8d:cc:d7:02:03:01:00:b7:a1:99:
5c:44:fd:6a:1b:bd:d4:60:08:03:95:28:5f:1f:4e:
79:4d:57:ac:67:6a:d3:48:8e:f4:47:28:9f:01:db:
cd:14:c6:a7:5d:13:3d:e8:01:4e:dc:4f:d4:90:6d:
20:d7:f4:fe:38:0f:41:3d:30:e3:bf:6d:ed:b6:3f:
71:00:e5:fb:f3:76:2d:7c:6c:62:57:01:c7:b2:eb:
64:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:BA:47:60:5C:F3:67:62:62:63:E5:7F:16:D0:D8:79:16:CE:DD:C8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3dfc14-e6ab-48ca-9613-495a501c6998/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3dfc14-e6ab-48ca-9613-495a501c6998/1/s7pHYFzzZ2JiY-V_FtDYeRbO3cg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.141.0/24
Signature Algorithm: sha256WithRSAEncryption
83:b7:e8:3c:90:e9:a7:09:86:c9:0d:17:8d:f4:93:f4:53:ad:
49:12:d3:58:1d:14:a3:de:e5:26:d0:8b:cc:45:f9:bf:cc:b0:
85:03:a4:84:95:1d:4b:b0:4c:60:db:a5:e2:c6:66:dd:4d:b8:
1d:13:bb:ac:3a:4e:4f:dd:cf:a1:70:1a:4c:9b:54:5d:a8:a1:
79:e4:b7:ca:0a:c9:46:bc:cc:1e:ff:35:30:97:06:e5:30:8f:
8e:7b:e8:f6:b6:47:63:df:25:83:49:7a:f8:a0:b2:8c:b6:5d:
d9:68:81:17:cf:c9:67:9f:b9:4b:67:43:52:84:97:66:f2:73:
c3:18:a1:b7:d1:de:28:b1:d3:bd:69:57:54:da:5c:15:1e:63:
6a:ca:85:b4:d2:06:16:07:af:f2:3f:aa:a7:ab:ac:5d:ff:bd:
9f:ca:9a:63:0c:a8:98:f1:ee:b1:48:61:44:28:d5:9e:92:b4:
53:d9:ab:b6:3f:c6:66:59:ec:a4:51:06:7d:9c:57:c0:77:a0:
b1:4d:ee:33:be:05:0e:05:93:ad:85:f6:40:8a:ae:20:5d:27:
dc:6c:54:03:53:f7:d8:25:b6:df:32:af:37:e3:b6:54:e4:93:
c6:c2:32:8d:8b:11:04:53:0d:e9:49:89:07:98:37:7e:3c:a2:
4c:60:95:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:07:32 2025 by rpki-client