Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.cer
File: shXNjm2zVEGYTZx9_Jr7ZT5V3_E.cer (raw, json)
Hash identifier: H+ZFbF/dYgNpmz1GZ1SYe2RTibb3kLMclCoWsho0d9U=
Subject key identifier: B2:15:CD:8E:6D:B3:54:41:98:4D:9C:7D:FC:9A:FB:65:3E:55:DF:F1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C2F2783DCA41D938D8C3F64F45BB9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/25/38b792-18fb-4bed-990c-e950d87f8e25/1/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/25/38b792-18fb-4bed-990c-e950d87f8e25/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:47:48 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 192.162.204.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:2f:27:83:dc:a4:1d:93:8d:8c:3f:64:f4:5b:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b215cd8e6db35441984d9c7dfc9afb653e55dff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f5:f2:38:27:e7:71:89:a2:04:a1:d1:b7:32:
98:dc:4f:ff:79:64:72:7f:18:75:06:83:73:a2:02:
27:d2:67:97:9d:28:e9:4f:7a:b4:89:20:2e:34:94:
75:52:c2:49:44:ef:66:34:91:d4:eb:85:53:d7:a2:
07:df:b7:c1:ef:a8:ff:f9:a0:07:7b:61:a3:5d:f4:
8a:92:74:9c:96:c8:a3:51:64:28:f1:60:78:6b:b6:
18:62:d9:08:92:6d:af:ad:b7:39:d3:48:91:7a:69:
e1:9f:5c:b1:83:49:85:76:62:e1:28:35:0d:b7:47:
d8:3b:c5:4a:c4:e5:08:e5:40:b6:9d:8f:a7:ab:0d:
44:95:52:89:1f:40:3c:e6:58:fb:ad:f8:e1:e6:be:
da:6f:65:fc:9a:54:9d:bb:7e:e6:50:34:6d:31:5a:
43:36:2d:a7:af:f1:b1:8e:d3:ab:0d:76:bd:af:8b:
3e:7d:03:0e:16:3f:53:4a:1e:f4:5e:bb:59:e2:8b:
2f:41:bb:9d:e6:eb:41:4f:49:dc:1a:2e:09:2f:53:
8b:b4:9b:fd:67:ba:2f:91:49:67:19:d4:b7:33:a4:
8f:13:a7:b8:ab:8c:ae:e4:4e:5c:3c:cc:1a:5e:90:
b4:14:cd:50:43:7a:c7:c9:19:5a:1a:8f:0a:b1:a0:
cf:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:15:CD:8E:6D:B3:54:41:98:4D:9C:7D:FC:9A:FB:65:3E:55:DF:F1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/38b792-18fb-4bed-990c-e950d87f8e25/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/38b792-18fb-4bed-990c-e950d87f8e25/1/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.162.204.0/22
Signature Algorithm: sha256WithRSAEncryption
02:f4:c6:bf:6c:f6:04:db:5a:04:a6:a2:e6:72:22:64:2c:01:
b8:96:bc:e3:ff:02:5d:e6:f2:19:de:98:c9:c2:b0:a8:44:dd:
14:2c:87:b3:09:c4:cb:2e:16:39:bc:df:ee:d2:87:ce:fa:87:
f9:36:a2:c2:8e:cf:ca:e0:29:bb:cd:c8:28:5c:81:fc:63:65:
f6:bd:04:aa:16:42:67:73:41:a3:27:b9:20:ae:a9:f6:8b:b9:
cc:67:13:2b:27:22:05:b4:c3:9a:fb:4e:e5:71:8d:91:cf:9f:
f6:99:c2:a7:2e:ea:50:eb:78:a5:d9:71:89:82:03:3f:9f:b3:
d5:cf:3d:8c:df:9c:01:70:10:68:e7:14:ce:08:5a:62:f1:97:
35:d4:b6:1a:e7:fc:d4:fa:e3:f2:4e:36:80:22:f1:09:f9:82:
19:c8:b6:70:49:7b:fc:3c:aa:37:88:0c:6b:ca:e6:57:bc:73:
b4:dd:76:5a:8a:e9:f8:ec:dd:c9:c0:48:5c:40:c8:2f:57:2c:
73:ec:70:3a:36:1c:fc:fc:8c:99:14:2e:dd:3c:3b:17:da:aa:
86:b7:fa:b0:b4:1a:34:ea:bc:d1:45:0f:93:e5:05:c0:9f:d1:
bf:09:22:c6:88:82:c9:c7:79:0d:c7:a8:72:0c:d6:48:c9:67:
34:2d:ca:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:20:38 2025 by rpki-client