Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/u1dWHKLb91Do9eC3OJ7wnOm1vOo.cer
File: u1dWHKLb91Do9eC3OJ7wnOm1vOo.cer (raw, json)
Hash identifier: BXR/jphytX6V9Np4WxIvNnXsuRJY96cJUNXCSaucbPw=
Subject key identifier: BB:57:56:1C:A2:DB:F7:50:E8:F5:E0:B7:38:9E:F0:9C:E9:B5:BC:EA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C616F667004CFBDF376804C013AE8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:48:01 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.84.32.0/20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:61:6f:66:70:04:cf:bd:f3:76:80:4c:01:3a:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb57561ca2dbf750e8f5e0b7389ef09ce9b5bcea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1d:3f:f0:47:a6:a6:97:a4:da:27:be:a4:90:
7d:22:d1:97:ee:d8:1f:05:e8:2c:d4:71:70:f7:9e:
dc:a6:c0:dc:77:30:f1:10:b3:d2:2b:64:88:a5:f7:
a7:63:5f:0c:fa:e4:08:f9:67:65:2d:75:5a:0d:52:
68:ec:67:56:1d:60:3d:41:81:bf:b1:d3:c7:55:d1:
30:47:41:a3:92:d8:de:63:ed:a8:a4:73:07:04:02:
92:5f:1f:61:87:68:ee:c4:eb:87:ac:34:67:2d:62:
9e:45:50:35:43:80:f1:c4:d8:41:61:57:b8:be:27:
bc:e4:49:0f:33:20:83:d1:1b:2d:af:17:88:98:c6:
97:83:30:07:13:cd:e7:ea:e5:72:53:f6:9b:60:07:
75:fe:70:e0:c3:66:6f:de:80:02:48:df:1d:12:39:
13:19:bd:d4:c4:c8:78:56:3c:62:20:d6:fd:09:58:
8e:3b:f4:8b:ee:54:a1:37:ff:1b:f4:84:85:b1:73:
25:09:c3:da:0d:1c:1b:e2:8d:db:4a:78:80:47:59:
a1:3f:7e:1a:e7:41:be:18:9a:fa:71:35:34:7b:2b:
86:4d:f2:1e:61:52:61:06:c2:9e:e3:ae:5d:f9:f2:
69:57:66:a4:89:07:49:4f:f8:86:1f:92:ac:14:90:
3f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:57:56:1C:A2:DB:F7:50:E8:F5:E0:B7:38:9E:F0:9C:E9:B5:BC:EA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.84.32.0/20
Signature Algorithm: sha256WithRSAEncryption
b1:ca:92:66:01:fa:55:29:3c:e4:75:38:47:9a:a5:08:0b:19:
7e:d4:02:45:2a:e8:4f:e7:cf:17:fc:c5:61:aa:a2:46:25:a0:
f3:8c:8a:18:7e:a9:34:2b:a1:a2:c0:77:24:56:f8:72:59:4e:
44:a1:d0:bc:77:64:9b:a6:24:86:ec:bd:27:24:a8:a4:d1:fc:
43:a0:ef:be:7e:1f:fa:03:b9:b1:5e:e5:55:f4:ef:20:8f:d5:
fd:4f:7c:86:64:ea:e6:59:8d:18:1a:9d:33:db:36:de:42:46:
70:55:83:85:31:40:7c:c7:bd:53:61:56:c7:ab:3d:37:8c:ed:
43:29:41:81:5a:3b:b2:b4:1d:81:8d:c3:dc:4b:ae:d7:75:46:
de:7c:df:2a:b0:ea:76:8b:60:44:51:82:88:df:94:33:82:9f:
ba:c7:c5:28:3b:43:ad:0b:90:20:36:6d:2a:11:84:a6:fb:16:
d2:28:6e:6e:5e:6b:39:f2:c7:30:c2:cf:12:2f:b2:46:f4:6f:
69:85:ca:ba:f3:65:ed:19:43:72:b3:7e:c8:73:ea:82:be:f9:
c5:55:ef:5b:a6:28:2b:76:e9:fd:6d:88:73:d2:f7:a8:64:af:
ea:15:e9:73:5b:8d:7d:c9:f6:94:e4:04:72:3f:18:83:c2:e1:
98:61:b6:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:34:30 2025 by rpki-client