Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sCqa8vxf6TxDFIqssTxRvpBMjkw.cer
File: sCqa8vxf6TxDFIqssTxRvpBMjkw.cer (raw, json)
Hash identifier: QLsEwQUaY0OHkgw8cQILbrAnUHJaw2iy+ZH8bHmNi+Q=
Subject key identifier: B0:2A:9A:F2:FC:5F:E9:3C:43:14:8A:AC:B1:3C:51:BE:90:4C:8E:4C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B38CF9126F9A15B42C181F78263688
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ff/0a60ce-bb37-4337-bf50-5eca36e19f5d/1/sCqa8vxf6TxDFIqssTxRvpBMjkw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ff/0a60ce-bb37-4337-bf50-5eca36e19f5d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:48:54 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2001:67c:500::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:8c:f9:12:6f:9a:15:b4:2c:18:1f:78:26:36:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b02a9af2fc5fe93c43148aacb13c51be904c8e4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:81:b0:66:e9:a6:99:a3:a4:38:9e:c4:79:d7:
b3:de:87:79:2c:43:2d:7e:01:e6:e4:60:e8:c9:af:
bd:97:dc:ce:ba:85:d4:5e:f9:4b:02:fb:2c:4d:3a:
4c:fe:d1:ec:3b:3f:be:2d:aa:c0:f7:49:62:cb:7b:
41:a4:f6:0b:04:ac:86:0d:f5:c3:35:68:33:48:58:
a5:50:6f:30:f2:5d:9e:fa:a2:ee:5f:90:39:e3:51:
48:3e:07:26:72:19:5f:34:14:fa:3b:a8:a1:2e:47:
cd:d8:30:16:35:66:33:93:d6:be:0c:f8:e4:66:f1:
c4:98:f6:41:14:df:7f:96:45:74:1b:00:2f:a5:da:
50:d6:f5:76:fd:0f:16:28:9f:2e:90:9f:a8:60:5a:
0e:4c:d7:fa:c5:60:d4:88:e4:05:54:b3:6f:3d:68:
65:e7:3b:f1:a2:18:a7:97:4c:c4:2f:6a:d2:d8:32:
70:6e:39:f4:60:c7:ad:65:8b:28:fe:78:8e:11:35:
7e:b8:40:d5:e9:3c:bb:a4:6e:fd:f7:9e:36:eb:e8:
bc:9e:f6:1b:65:13:11:86:92:a4:88:08:3c:eb:8c:
c6:4f:ff:19:b9:f1:98:d3:60:5e:f1:be:40:4f:47:
24:99:89:24:79:68:84:71:f2:5f:cf:f8:81:e0:8e:
26:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:2A:9A:F2:FC:5F:E9:3C:43:14:8A:AC:B1:3C:51:BE:90:4C:8E:4C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/0a60ce-bb37-4337-bf50-5eca36e19f5d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/0a60ce-bb37-4337-bf50-5eca36e19f5d/1/sCqa8vxf6TxDFIqssTxRvpBMjkw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:500::/48
Signature Algorithm: sha256WithRSAEncryption
7a:b6:d4:b5:0c:0f:ec:28:db:9b:aa:43:7e:cd:85:f1:66:5d:
3d:fe:4e:0e:e1:9c:88:bb:52:63:af:18:d5:d5:91:9c:f5:5c:
6d:56:04:a3:0a:83:0f:e6:7a:04:44:ee:a0:ef:c0:bd:4e:96:
56:eb:3a:db:c6:15:c4:80:fd:2c:67:de:94:d6:5c:12:d0:64:
16:50:f1:85:7f:19:b0:36:e7:0d:13:4d:f1:3a:a2:96:54:b1:
08:f3:05:37:7b:59:6a:0a:65:a0:03:b9:01:93:ad:d9:63:2d:
81:ad:46:a0:0d:06:5a:d3:8e:6c:a8:b4:19:46:7a:fe:67:5f:
e3:64:98:c9:80:0c:63:c2:4b:dc:50:38:59:7d:d4:54:ac:50:
dc:c4:56:bd:fa:40:79:b5:0c:64:a8:6f:4c:99:06:0b:5f:f2:
5e:29:be:20:55:ef:64:e9:d9:06:b1:00:e6:65:b2:89:b9:d2:
34:0f:52:3c:84:22:d5:d6:83:46:15:e6:a9:e9:14:ee:90:4f:
ce:4f:88:6c:0a:43:5c:82:c3:3c:a9:b1:3a:d0:a9:0a:ad:43:
65:f7:e2:a7:29:a6:90:11:89:91:2f:54:48:3c:b2:5f:f7:b5:
2e:55:0c:14:fd:54:d7:32:35:d7:19:b1:fc:a4:5d:a6:ea:f1:
7a:49:a7:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:24:44 2025 by rpki-client