Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yQ7dEObZBiIVv9ZORbO_imuZY3k.cer
File: yQ7dEObZBiIVv9ZORbO_imuZY3k.cer (raw, json)
Hash identifier: mDKFR3NPKvVhMF2zs5k7L52YsVEANV6JwIFSFeJEeQ8=
Subject key identifier: C9:0E:DD:10:E6:D9:06:22:15:BF:D6:4E:45:B3:BF:8A:6B:99:63:79
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228E2CE78D473B83D68780541C352B24
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:50 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 23.239.128.0/19
IP: 185.129.224.0/22
IP: 2a01:6040::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:2c:e7:8d:47:3b:83:d6:87:80:54:1c:35:2b:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c90edd10e6d9062215bfd64e45b3bf8a6b996379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:36:ca:03:42:a0:0f:52:0b:e3:63:48:14:50:
f6:64:fe:ab:ef:82:84:e2:af:61:37:6c:4d:4c:67:
e9:ec:76:c9:b4:b7:74:63:c0:db:83:82:46:d7:72:
26:d3:59:b3:e6:ae:5e:0c:52:6e:57:90:32:21:b9:
44:e0:b0:ad:b1:cd:17:e0:c5:ea:bb:04:c4:b7:7e:
f2:f9:84:43:1e:47:0b:b4:bd:10:f4:6f:d1:ae:15:
20:c2:20:2d:f2:18:bb:32:2b:95:c1:89:cf:33:12:
62:58:e5:58:ba:5c:76:fc:42:25:1f:f1:38:3d:3a:
bf:ad:bb:d7:aa:4a:28:a8:84:ce:77:ad:10:fc:42:
7e:4e:85:db:86:82:72:2d:17:16:0f:fa:50:d1:58:
97:e4:f0:aa:df:6c:6a:14:29:07:67:81:32:4f:4b:
b4:8d:af:39:7e:33:56:98:c0:4f:94:21:15:ad:a0:
d3:31:19:ed:61:e6:ef:7a:9b:6e:fb:e8:5a:4c:52:
90:11:95:7c:9b:e1:dd:75:06:f5:16:e4:b4:23:85:
a8:9e:24:50:49:df:fc:a2:9f:30:08:68:3b:1a:a7:
b9:e8:8d:ec:73:58:6d:12:a3:19:d7:17:5d:84:e4:
5f:d7:a4:22:46:c0:34:f1:39:08:70:f3:cd:61:41:
9c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:0E:DD:10:E6:D9:06:22:15:BF:D6:4E:45:B3:BF:8A:6B:99:63:79
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6483c2-3921-4c6e-9373-31a4da61d576/1/yQ7dEObZBiIVv9ZORbO_imuZY3k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.239.128.0/19
185.129.224.0/22
IPv6:
2a01:6040::/32
Signature Algorithm: sha256WithRSAEncryption
14:9b:0f:e0:6f:f1:4d:a6:3e:70:97:1b:a2:86:e3:b6:ec:09:
b7:7b:f4:b6:9c:49:d1:81:57:69:10:e3:12:e1:65:e1:0f:d9:
13:af:be:8e:ee:99:a4:ab:d3:2a:ef:99:34:50:1d:cb:79:cf:
53:26:bb:34:42:40:d4:61:78:ae:66:8b:1d:84:5d:ef:48:f7:
b2:d5:a9:42:77:a7:2a:8e:ac:37:67:4f:a9:54:26:c0:d8:0a:
3a:d5:18:b2:7b:02:e5:1b:c2:ab:e1:f9:db:b1:fb:dc:83:23:
5e:76:2b:2b:0c:85:ca:9c:63:aa:31:7b:61:bc:9c:f5:2e:96:
f0:79:14:52:5e:97:0c:ee:fc:42:27:20:23:29:00:2f:c7:62:
5b:f7:c6:95:3f:2a:4f:ab:8d:9a:3b:f8:ff:42:29:0c:f4:22:
1f:79:e0:72:31:1f:d9:6e:fa:60:25:44:2b:e9:50:4e:c0:3e:
53:72:be:5a:ee:6e:25:94:01:88:52:64:93:ea:df:55:f6:55:
f4:6a:b4:9d:2a:aa:3d:18:e1:b0:5a:6f:d8:44:93:cb:61:91:
03:82:32:3a:ab:cc:28:e2:a3:61:74:96:6d:db:2b:d3:c6:2e:
1e:07:16:f0:51:72:c6:a5:64:a2:90:97:4c:d3:34:2e:d0:2d:
bc:0a:1e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:18:13 2025 by rpki-client