Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sA4l9V67rLBp8QOssIZnA4Nc_M0.cer
File: sA4l9V67rLBp8QOssIZnA4Nc_M0.cer (raw, json)
Hash identifier: loqLvUDTfMihQx9aAb1e4BaB/2+4C1Fo0Neyb4RRyK4=
Subject key identifier: B0:0E:25:F5:5E:BB:AC:B0:69:F1:03:AC:B0:86:67:03:83:5C:FC:CD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B20CDE10C7F24CE3D5FFCBC0DAF6AE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:24 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.197.181.0/24
IP: 2a10:8940::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:0c:de:10:c7:f2:4c:e3:d5:ff:cb:c0:da:f6:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b00e25f55ebbacb069f103acb0866703835cfccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ee:92:9d:f6:2e:7f:05:80:6a:d3:68:f7:da:
57:bb:ba:51:0d:79:2e:68:26:db:d2:fb:63:f2:df:
49:32:81:4d:56:06:6b:e4:15:58:a3:7e:13:31:28:
e4:c8:c0:d0:99:a7:3f:53:b4:0b:59:d4:17:58:54:
d7:90:a2:6c:a5:25:d2:55:7d:5c:f4:54:0b:c6:d6:
58:6d:94:79:58:5f:b9:08:90:bd:3b:26:6a:b6:39:
d9:ab:4b:27:64:ba:94:83:15:80:4d:8f:35:0b:ac:
93:f1:ed:13:ce:ce:fe:b7:ff:da:1a:3a:84:fe:43:
aa:26:48:2a:60:a4:08:8b:d8:3d:4d:cb:0f:49:dd:
e0:c4:14:fe:03:08:9b:b6:82:94:25:8e:88:f0:a3:
2b:3c:33:de:04:97:76:d0:bd:c8:15:f0:bf:9b:03:
fa:36:9f:45:6b:44:6c:8d:60:5e:a3:b1:1e:e2:0b:
5f:92:b5:3b:23:f0:48:c8:82:82:d7:15:20:59:52:
72:ee:37:17:89:d9:84:63:82:c1:b4:03:79:f4:c5:
12:aa:b5:87:16:4b:d1:43:fb:da:36:9a:0d:b7:53:
d8:b5:e8:cc:ce:81:a2:ac:fc:26:33:c8:c1:53:83:
cb:e0:b2:ef:a5:2e:74:58:35:78:3e:f0:0b:b4:6d:
36:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:0E:25:F5:5E:BB:AC:B0:69:F1:03:AC:B0:86:67:03:83:5C:FC:CD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.197.181.0/24
IPv6:
2a10:8940::/29
Signature Algorithm: sha256WithRSAEncryption
9b:60:ca:05:a8:20:9f:83:56:79:f5:7d:d9:e7:14:e9:e0:94:
e2:54:43:35:6e:9a:9b:ad:ad:13:0d:54:7c:f9:d8:41:b5:f5:
08:dc:ed:d6:ba:01:5b:90:e4:1a:04:8c:1f:62:31:90:85:87:
ea:0b:03:f9:b3:2d:15:37:92:f0:7e:bf:c1:56:96:57:0b:c3:
cd:e3:be:5e:19:3a:c0:02:bf:bd:ea:59:38:83:f2:73:bf:f8:
87:43:45:fd:39:58:db:c3:f2:12:03:f9:7e:89:65:16:8d:c3:
bc:7c:c3:c6:6a:f3:f4:79:30:66:30:9e:82:61:d1:34:bb:89:
89:7b:ef:b1:3a:bc:3c:65:7d:90:76:8e:16:36:3f:b7:46:79:
11:c2:7d:6c:38:58:c5:24:04:01:02:5e:18:cf:87:b1:a0:82:
cb:d6:6c:5d:30:cc:19:e4:1e:62:0c:d7:99:15:4f:b2:1c:a3:
3a:32:42:4d:7d:a7:c6:c6:91:08:b5:a6:5e:c0:2e:12:8a:13:
21:07:bd:53:f9:82:96:56:60:ed:3a:75:8b:76:1f:31:4e:75:
be:d8:48:0b:9d:03:09:42:86:a2:3b:7f:2f:78:a9:98:f8:58:
78:e8:55:d1:ba:0c:8f:c9:ff:c2:98:a5:4a:e3:4e:ed:fe:41:
5c:84:2b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:09:10 2025 by rpki-client