Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/s8hW6VbErdthWY88JInyvfbtHRg.cer
File: s8hW6VbErdthWY88JInyvfbtHRg.cer (raw, json)
Hash identifier: ZWoQvaZrD1++hRXuxiD3tUWaokO5HR6rFU36YlirfME=
Subject key identifier: B3:C8:56:E9:56:C4:AD:DB:61:59:8F:3C:24:89:F2:BD:F6:ED:1D:18
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D5EAE21827E83C77CC951F81BC2B45
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:47:57 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 141.17.0.0/16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:ea:e2:18:27:e8:3c:77:cc:95:1f:81:bc:2b:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b3c856e956c4addb61598f3c2489f2bdf6ed1d18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9a:e8:f2:f9:b1:c2:08:7a:1d:bb:5f:6f:b4:
da:94:c3:d8:3e:b6:14:28:2f:c4:44:96:ec:88:19:
38:3c:1f:b9:3e:8e:f8:9d:41:1a:17:43:b3:2a:3d:
ca:6e:f3:9e:be:68:9a:81:58:b1:d4:21:db:21:fd:
21:16:ff:09:a0:bc:58:ac:be:9a:a2:c4:b9:c7:e9:
2d:31:e0:51:f1:34:30:30:b7:82:86:11:f1:ab:1f:
60:b4:e5:8d:73:88:ec:6c:80:32:94:7e:80:f4:d0:
86:29:15:b5:55:28:ae:ee:33:fe:bd:43:bc:89:12:
73:f8:6e:e9:8c:f9:f0:45:04:10:1a:a4:5d:af:8d:
83:43:92:13:0c:80:69:14:fa:b6:3a:84:2a:1b:92:
28:bf:17:32:0e:4f:39:1b:6b:7a:15:83:21:7a:d6:
53:ca:59:a7:05:5b:6a:0d:04:68:28:30:4c:35:e4:
c4:bd:e7:3a:20:e5:9a:c6:84:a6:ba:3e:dd:08:77:
87:db:9a:ca:23:ef:20:aa:63:53:49:ab:05:6e:43:
29:9a:70:e4:84:ea:ac:6a:0d:1f:8c:2c:64:ea:61:
48:c7:2b:75:38:e7:08:2c:86:ff:5d:57:66:36:49:
6d:77:7d:b7:f2:ef:d9:b1:c4:e3:c6:fa:03:ee:68:
cd:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C8:56:E9:56:C4:AD:DB:61:59:8F:3C:24:89:F2:BD:F6:ED:1D:18
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.17.0.0/16
Signature Algorithm: sha256WithRSAEncryption
43:f7:99:23:68:91:65:a9:00:7b:fb:96:cd:12:b2:35:d7:4f:
5c:2c:aa:a8:06:c6:db:2e:6d:85:45:b9:da:97:d8:a0:0e:c6:
fa:48:9e:71:cb:61:04:ce:dc:9b:89:5d:0f:ad:20:1c:27:76:
eb:68:e7:46:3d:07:35:0d:eb:58:09:31:aa:fa:88:c3:85:21:
70:ca:1b:46:d3:5a:e5:0c:5d:1b:27:62:81:72:0f:da:74:aa:
e0:1d:8c:e6:b3:a1:3c:bc:13:b8:3b:87:69:75:ff:4e:4f:60:
f9:78:e0:34:ad:d7:86:75:93:03:95:ad:81:34:48:d3:2c:7d:
03:e6:30:d5:76:8c:34:d5:03:db:83:ad:b1:67:07:b7:8a:10:
a4:72:4c:f9:c7:71:58:11:c0:13:1c:90:a5:d9:6d:14:1a:66:
6d:23:e6:46:0b:ac:62:fe:fb:6b:f7:0e:68:69:d6:87:33:d3:
3e:57:42:29:b9:49:12:c5:ba:27:c4:27:55:75:8e:64:48:db:
e2:46:45:a7:cb:df:92:0b:ba:71:36:b8:f8:bc:ad:36:12:7f:
7d:f8:8a:1f:c2:9c:a6:0e:02:37:c0:d7:f3:d4:dc:44:6d:64:
62:91:19:59:69:bb:c2:7d:f5:81:aa:43:75:38:63:76:87:d0:
ac:00:ff:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:23:07 2025 by rpki-client