Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/suORFp8MnyGqjy6J5zdccuxnT-s.cer
File: suORFp8MnyGqjy6J5zdccuxnT-s.cer (raw, json)
Hash identifier: tM+VTG/A5/Lse3Hm6W0vEy9AWO+Vk98WXEYCH9JDrtQ=
Subject key identifier: B2:E3:91:16:9F:0C:9F:21:AA:8F:2E:89:E7:37:5C:72:EC:67:4F:EB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D707E6C3DC67BD2ABAAC6882F185B2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:48:02 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 134.34.0.0/16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:07:e6:c3:dc:67:bd:2a:ba:ac:68:82:f1:85:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b2e391169f0c9f21aa8f2e89e7375c72ec674feb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:43:5b:b1:20:19:9d:32:67:08:0d:da:49:d6:
8e:a1:c6:c9:28:35:56:ed:b5:8c:03:01:5d:92:d4:
df:99:30:65:6e:37:8d:b3:0a:c5:88:69:10:ee:d0:
8b:f6:be:84:fe:86:7a:3a:f2:a3:a4:15:cb:f5:f7:
30:5f:8d:83:1d:e2:d9:10:c1:45:11:77:ad:12:77:
3e:6b:d6:08:b3:6f:b7:0d:20:15:8a:a3:58:c6:d0:
01:32:37:0c:29:c4:7d:44:95:82:c7:4b:0a:b2:c3:
a3:e8:6f:20:57:97:fa:e7:25:ed:68:75:cc:24:ea:
10:65:a3:ab:18:b7:25:d8:89:4b:96:29:b1:bf:83:
bc:bf:1a:6c:1e:c6:45:8c:06:9d:9b:4b:ac:1c:8f:
df:fc:d2:3b:fb:26:fc:31:c3:c3:d6:d5:5e:8d:80:
47:f8:2d:b5:09:18:4c:26:39:2d:9a:e2:8a:17:02:
de:a2:ef:ec:26:54:c0:a2:bb:fe:85:15:6e:39:18:
ce:13:b7:1f:5f:8f:e2:27:af:1e:d4:1a:7b:98:ef:
e9:d7:d2:f7:15:67:b6:f3:36:d0:97:fb:8a:3d:b8:
40:33:91:82:d9:a1:03:0a:a5:d6:e2:f5:21:1c:4f:
ce:e0:ab:ae:66:84:60:13:ab:ed:05:ca:13:9c:a3:
f4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:E3:91:16:9F:0C:9F:21:AA:8F:2E:89:E7:37:5C:72:EC:67:4F:EB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/88c204-bc30-4b9d-b9ec-5686279ec96e/1/suORFp8MnyGqjy6J5zdccuxnT-s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.34.0.0/16
Signature Algorithm: sha256WithRSAEncryption
89:99:bb:ea:a9:51:25:de:20:65:58:9f:8c:ef:f2:26:7c:79:
c6:2f:89:19:80:e0:83:09:eb:42:63:af:30:9c:2c:5c:fc:f9:
c7:54:5c:ef:95:e0:41:81:dd:53:79:8b:e2:ea:35:6f:25:fc:
90:87:ce:ae:d1:ba:3f:b4:61:e1:5c:fd:8a:38:39:29:3a:6b:
ff:72:f4:87:2c:2d:68:ea:e7:7b:97:05:51:b5:65:26:a5:d3:
2a:21:4e:55:25:e2:b0:48:56:ca:ca:6e:da:7f:04:8e:a5:17:
a6:17:0b:bb:78:fc:a1:dc:0b:cd:a7:e9:41:4c:fd:12:f9:8e:
ef:f7:00:fb:cd:0d:90:b5:c9:79:34:aa:35:48:e7:f8:70:fa:
da:11:24:49:3e:a0:7a:aa:78:b1:8c:02:10:08:5f:97:d6:d2:
a1:a7:26:f2:1d:ee:ef:16:a9:b6:e8:fb:aa:41:7e:0f:42:f8:
29:b7:01:1f:a2:84:ac:ec:d8:75:3d:63:7b:e1:46:3b:18:7a:
2a:5c:af:bd:e5:87:7f:d6:a6:a3:2d:4d:fd:37:1c:49:02:15:
78:2f:7d:36:0f:85:8e:5c:90:25:45:0c:92:33:04:86:81:9e:
ab:a3:34:cc:0c:9c:c0:b5:02:5a:48:12:5e:1f:82:92:f0:d4:
14:d9:27:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:13:18 2025 by rpki-client