Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer
File: uqp7TAHpKcOJI5gatRyXJ6H58H4.cer (raw, json)
Hash identifier: tuu4Xmk+k7D0z5pkxjZhoXMhEBtdKGiYGyeTjMrWG18=
Subject key identifier: BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421446CE42003E7BEBD80A325298BD5BB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:40 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 45.129.88.0/22
IP: 45.132.224.0/22
IP: 45.135.168.0/22
IP: 45.141.212.0/22
IP: 45.151.252.0/22
IP: 79.143.136.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:6c:e4:20:03:e7:be:bd:80:a3:25:29:8b:d5:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:0c:05:53:06:29:a7:cd:6d:5a:41:93:77:a6:
3b:21:dc:97:9c:3f:08:78:b8:86:94:35:b3:89:41:
f7:06:b2:ae:88:7f:db:6a:1d:4b:6b:85:b3:f6:ee:
c5:9a:e1:b5:fe:68:42:74:f1:e8:72:ee:9d:ce:6e:
a5:b2:3a:e9:90:84:82:9e:6a:b1:e4:34:5b:8f:29:
f9:9e:7e:98:d3:28:e0:da:04:bb:80:fd:98:18:fd:
94:65:9b:c1:2c:6e:44:c4:b8:90:f5:58:31:b8:57:
a3:04:5e:cb:23:d4:e3:93:6d:1f:34:a4:8c:62:43:
43:b9:e7:84:ca:1f:c7:0e:59:c9:99:e0:6e:d4:31:
ad:30:b8:82:c1:61:59:bf:29:27:14:9d:91:33:64:
b4:32:2e:f2:ea:b9:1c:25:72:d7:58:b7:f0:8b:1f:
27:84:5a:62:f2:03:2d:0b:60:25:c4:62:bb:4d:e6:
6c:82:5c:f0:2e:2a:36:fb:a6:ba:12:45:c3:b7:15:
fc:7f:e6:d4:7e:41:5e:6a:75:a4:ba:5e:af:3f:5c:
a9:cf:7f:c4:b0:dc:c4:65:0e:1b:70:47:b3:45:40:
ab:b3:d4:0a:36:94:23:54:e5:84:c0:30:02:c8:0b:
24:58:c5:94:32:79:63:df:bf:af:b2:4b:b4:fa:28:
d4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.88.0/22
45.132.224.0/22
45.135.168.0/22
45.141.212.0/22
45.151.252.0/22
79.143.136.0/22
Signature Algorithm: sha256WithRSAEncryption
74:88:03:05:59:40:5f:90:de:1f:1d:c1:17:d8:e3:55:19:7e:
d7:2e:4c:d2:22:74:8b:91:1e:2b:84:7b:ba:ca:38:99:88:41:
4d:41:22:78:71:a8:ca:bc:69:0e:f1:67:46:a8:1f:0d:f4:09:
91:75:a5:6e:27:cc:af:ec:94:80:fd:7b:9e:e2:11:1d:b2:6d:
d2:49:34:ea:f6:06:ac:31:5a:59:49:26:c5:4c:66:af:02:fe:
a6:0b:b1:ea:57:25:a0:8d:3d:1f:8e:4f:a0:eb:84:7a:81:1f:
2a:3e:cc:6b:10:dc:45:12:0d:9c:40:f3:3b:b6:70:6b:9c:fb:
9a:a6:e4:39:2b:40:ed:1c:a5:f3:9d:0d:51:31:a9:8c:ec:18:
5a:37:1e:26:1d:de:15:80:25:bc:50:f7:ad:e5:cb:4f:bf:c2:
3c:f3:42:03:53:14:42:cd:b5:71:0a:d0:91:35:59:cf:df:47:
eb:42:f9:3f:9b:f1:04:bd:f8:82:7d:c2:76:0e:2b:70:e7:53:
6a:33:e8:51:d4:3a:74:c2:39:12:6f:ab:db:44:6d:28:08:c8:
cc:9c:ab:a5:74:36:21:17:32:aa:e7:4c:54:d4:9b:c2:64:fe:
29:2f:71:f6:e4:eb:04:6f:e5:10:51:91:f1:c1:03:86:fd:15:
02:31:d9:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:21:27 2025 by rpki-client