Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wN68iFC2kPEjJ5aRG_48TJqoZ9w.cer
File: wN68iFC2kPEjJ5aRG_48TJqoZ9w.cer (raw, json)
Hash identifier: wOm0C2GqTBrnKSKZEH1kS6CBkX5DDUCm2Qz6xLWpesI=
Subject key identifier: C0:DE:BC:88:50:B6:90:F1:23:27:96:91:1B:FE:3C:4C:9A:A8:67:DC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266B54404D6B021721424DD80C9FB5A3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/wN68iFC2kPEjJ5aRG_48TJqoZ9w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:49:15 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2a14:6ec0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:54:40:4d:6b:02:17:21:42:4d:d8:0c:9f:b5:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c0debc8850b690f1232796911bfe3c4c9aa867dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:07:15:5d:94:1c:6b:ca:f9:3d:6b:88:63:81:
27:a7:b4:6d:ea:09:7f:f3:6d:19:f3:f5:13:6f:3b:
9a:a9:fc:57:e0:5d:12:08:95:d6:a0:38:df:a9:c9:
f1:a6:44:69:9c:20:f9:a7:0d:80:8d:db:5f:ae:71:
a0:dd:19:5a:5e:09:66:15:c6:e3:71:96:7b:ba:26:
e6:3d:d7:81:b1:ef:9b:19:f1:5f:32:0e:c4:22:f4:
83:72:15:12:7b:55:cd:93:96:6a:23:bb:40:e3:33:
81:8b:ec:08:59:82:88:55:ef:66:0e:19:34:db:10:
d6:1a:ee:18:ee:28:1f:ef:96:0d:e3:66:ba:1d:10:
69:22:b8:93:59:cd:88:3f:47:1d:da:58:e9:87:88:
e1:0d:4c:4f:62:21:ec:15:ce:31:41:e0:54:2a:01:
34:87:5a:05:34:27:70:55:b8:bd:2b:01:64:8c:30:
58:f6:94:25:a2:d1:26:a3:12:83:2b:1d:da:ef:33:
b2:79:fa:8b:1d:05:8b:c3:a8:cc:c9:f5:f7:36:05:
3d:0f:05:2f:2f:2e:5a:23:32:7b:c0:22:ad:ad:8f:
fe:c2:f8:cf:6d:f9:a9:5d:66:07:5a:81:f4:b0:df:
73:27:3e:20:30:b3:32:c8:18:f1:c9:19:6a:ac:6c:
ea:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:DE:BC:88:50:B6:90:F1:23:27:96:91:1B:FE:3C:4C:9A:A8:67:DC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/wN68iFC2kPEjJ5aRG_48TJqoZ9w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:6ec0::/32
Signature Algorithm: sha256WithRSAEncryption
34:80:42:d5:48:8c:3a:e6:ef:f3:c0:46:6a:c1:e0:57:4d:cf:
c0:8c:3a:77:78:ef:2a:d3:cd:14:ba:a2:01:ab:6e:6a:7d:2c:
39:5c:ee:de:d0:5e:dd:8d:b7:f7:24:d2:1a:b7:63:a3:e5:ac:
03:c4:a1:22:96:77:ae:74:60:d4:9c:12:2d:23:da:e0:9b:41:
85:d8:a3:8d:a0:27:80:c9:3e:8b:e9:4c:a5:03:5a:66:46:a6:
5e:dd:76:ad:2f:44:59:a1:49:d6:77:42:28:76:30:87:58:d1:
d0:f5:db:ce:65:28:25:4d:b9:d4:09:0d:2e:e0:02:c1:26:66:
6e:96:68:48:79:09:02:f9:3f:65:ae:b3:0e:18:6c:98:9b:6e:
db:f7:be:e9:ae:01:ba:65:64:06:ac:0b:bb:06:5c:ff:ba:c6:
a2:17:65:ca:e7:12:65:95:82:6c:a6:8a:aa:05:dd:0f:32:a2:
6b:a7:b8:37:0b:0c:32:6a:28:80:46:0a:3c:71:91:22:9e:9a:
f8:8a:48:2b:b6:2d:b4:52:e9:94:dc:9c:54:d7:2c:55:ea:60:
e1:97:7f:b1:0d:ef:96:3f:0f:86:b2:5e:5a:75:21:40:30:24:
b8:6a:7f:24:b5:dd:75:4f:69:f9:5f:33:40:36:2d:77:33:a9:
f2:82:d9:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:47:23 2025 by rpki-client