Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uo1nmL3QsriAXUOzRV92c5uUbx0.cer
File: uo1nmL3QsriAXUOzRV92c5uUbx0.cer (raw, json)
Hash identifier: Phfy58CRLFAZJcfE5fsu+TLuCIWzVABlcXMm/m4cXz0=
Subject key identifier: BA:8D:67:98:BD:D0:B2:B8:80:5D:43:B3:45:5F:76:73:9B:94:6F:1D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B46DE40373BEF361C0F686925AF6CF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ec/68b57b-d18d-4785-97b0-ec56c0b081ae/1/uo1nmL3QsriAXUOzRV92c5uUbx0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ec/68b57b-d18d-4785-97b0-ec56c0b081ae/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:48:43 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 192.42.114.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:6d:e4:03:73:be:f3:61:c0:f6:86:92:5a:f6:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba8d6798bdd0b2b8805d43b3455f76739b946f1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6d:7a:53:b9:de:62:38:53:ab:f6:b5:0f:21:
ce:79:2e:cd:9b:ce:1b:cc:34:46:ae:46:cd:4e:e2:
97:d0:da:e7:60:c4:c1:c0:7a:bd:ba:0c:4a:b3:18:
df:3b:ed:98:b9:4d:85:4f:7e:5f:1a:44:36:87:83:
b6:78:66:9c:66:72:e5:8c:e5:e7:24:7e:59:8c:ab:
24:5b:6d:1a:3c:4b:a8:e2:ab:d8:93:fa:36:1f:ac:
25:10:04:e4:59:f0:be:7c:19:22:f3:63:26:79:21:
c4:de:7a:67:6c:f9:b3:a0:51:7e:77:8e:9a:8f:5e:
63:2f:aa:9f:02:97:88:91:1b:fb:40:48:e6:c3:44:
33:c1:f4:33:28:22:ac:e2:ba:10:8f:89:9c:5d:c7:
11:07:6a:19:64:77:d1:ba:64:94:e4:39:46:35:9d:
9f:3c:8a:6a:b2:d8:a4:3f:ec:91:75:7e:f7:27:ef:
3c:29:25:eb:49:6e:92:5d:b8:94:c5:25:21:95:a0:
fb:d7:70:d7:29:9e:a1:f7:84:64:98:29:7b:c9:89:
5e:26:b3:01:ba:5e:3e:e6:a1:52:88:8d:8c:d0:8b:
20:9e:b5:a4:b7:da:94:c0:d5:08:18:38:19:77:8c:
3d:58:5a:1c:ed:d2:1c:e2:79:09:44:0d:0e:c9:ff:
6c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:8D:67:98:BD:D0:B2:B8:80:5D:43:B3:45:5F:76:73:9B:94:6F:1D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/68b57b-d18d-4785-97b0-ec56c0b081ae/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/68b57b-d18d-4785-97b0-ec56c0b081ae/1/uo1nmL3QsriAXUOzRV92c5uUbx0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.42.114.0/24
Signature Algorithm: sha256WithRSAEncryption
60:6b:62:5d:17:1e:95:5c:1c:78:92:2c:d1:6a:87:b9:22:d0:
d0:16:13:ba:da:5c:1d:30:0f:44:31:48:f4:cb:19:8a:45:e9:
88:c3:c4:a4:06:b7:c0:07:9f:53:2c:2d:f3:7e:fb:06:f0:9c:
b1:ca:7f:e8:1c:b6:55:c8:5d:69:c2:14:ce:ea:83:88:b8:ff:
ea:85:67:1c:cc:11:94:16:92:63:39:17:d1:7d:a9:f1:d1:75:
d7:52:44:7e:08:bc:b8:80:49:96:7b:c0:85:f1:60:4e:5b:a3:
84:6b:46:2a:e4:7c:1b:5e:2e:53:e0:25:5d:67:5c:07:88:85:
77:85:cc:2e:49:ce:fc:4d:b4:7d:8f:44:65:2e:69:5f:02:6a:
fc:1a:7b:e8:f5:d6:38:aa:42:5d:85:43:01:a9:ae:07:31:ba:
f7:34:b0:d0:dd:b3:73:c8:71:eb:d7:29:34:1f:c9:ab:b7:85:
98:f6:d0:1c:88:6b:39:af:f7:8f:fa:11:df:1c:3a:c2:d4:e3:
32:67:2c:2e:d7:7b:16:b7:56:09:a7:d9:53:f0:56:79:01:6b:
05:0f:75:78:32:01:73:c2:b5:64:cf:5f:95:96:1b:46:59:9d:
db:15:9f:f3:df:44:6e:bd:1f:72:56:2f:01:d5:a9:a7:c5:d9:
aa:23:76:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:50:02 2025 by rpki-client