Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
File: zNdhWb_Z4zdSPukw898RHWuucwY.cer (raw, json)
Hash identifier: OfCO985QlORLzz3pUPhEhvM4iOSPHaRKstxPHPI58tk=
Subject key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FB71349D920A5525B1EDB05A1767F4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:48:11 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 45.129.79.0/24
IP: 46.150.240.0/20
IP: 91.188.244.0/23
IP: 91.195.21.0/24
IP: 91.214.117.0 -- 91.214.119.255
IP: 91.226.30.0/23
IP: 91.227.155.0/24
IP: 91.241.180.0/23
IP: 91.243.188.0/23
IP: 94.158.20.0/23
IP: 176.103.80.0/20
IP: 176.119.140.0/24
IP: 176.119.142.0/23
IP: 194.187.100.0/22
IP: 195.3.180.0/23
IP: 195.95.216.0/23
IP: 2a01:48a0::/32
IP: 2a05:1e40::/29
IP: 2a06:d640::/29
IP: 2a09:2980::/29
IP: 2a09:a800::/29
IP: 2a09:af80::/29
IP: 2a09:bc00::/29
IP: 2a09:c700::/29
IP: 2a09:cf00::/29
IP: 2a09:d700::/29
IP: 2a09:dd00::/29
IP: 2a09:e300::/29
IP: 2a09:e700::/29
IP: 2a09:ef00::/29
IP: 2a0a:b380::/29
IP: 2a0b:9000::/29
IP: 2a0d:3c40::/29
IP: 2a0d:95c0::/29
IP: 2a0d:afc0::/29
IP: 2a0d:c100::/29
IP: 2a0d:fcc0::/29
IP: 2a0e:3f40::/29
IP: 2a0e:5880::/29
IP: 2a0f:3100::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:71:34:9d:92:0a:55:25:b1:ed:b0:5a:17:67:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:96:df:50:3c:c8:32:a0:34:00:3a:b4:1f:ba:
2a:72:25:e0:94:ba:de:47:dc:3a:4b:e7:b2:02:8a:
c1:a2:ee:9e:c7:4c:66:94:cf:d0:92:ca:6b:c4:bc:
4e:50:4d:72:8d:b9:a9:5b:83:2a:17:14:14:c2:25:
db:81:2b:ac:52:90:3f:1f:ca:64:f9:b0:d0:e9:f8:
1f:d2:42:05:3e:88:05:a2:7e:72:30:e2:c3:90:4e:
ed:bd:f6:b7:73:05:93:87:a1:01:42:25:4a:9d:2c:
93:66:1b:3f:6c:62:bd:10:d9:49:99:7c:46:fe:5a:
29:8a:00:47:e3:ee:43:3c:bd:04:11:bc:50:41:85:
cf:b7:02:bf:21:17:f7:cd:d7:b8:bd:71:53:66:2c:
0f:bb:8a:0f:87:87:fd:d6:48:b9:f8:6a:c9:09:de:
dc:a6:6c:17:50:a8:94:8c:5a:06:6e:a7:16:f1:2d:
ff:15:f6:95:0f:74:cf:d8:e0:1c:06:b5:99:b2:f9:
e1:37:11:92:e7:8b:b6:ab:f6:62:e0:05:d7:48:ca:
9c:9f:c1:7a:22:ab:04:89:c3:61:2a:fe:ae:62:66:
c1:ea:4f:30:f2:fb:c5:de:0a:e1:20:92:58:68:80:
2b:b6:a5:d8:8c:a8:ec:c5:c5:49:38:a3:49:82:06:
e8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.79.0/24
46.150.240.0/20
91.188.244.0/23
91.195.21.0/24
91.214.117.0-91.214.119.255
91.226.30.0/23
91.227.155.0/24
91.241.180.0/23
91.243.188.0/23
94.158.20.0/23
176.103.80.0/20
176.119.140.0/24
176.119.142.0/23
194.187.100.0/22
195.3.180.0/23
195.95.216.0/23
IPv6:
2a01:48a0::/32
2a05:1e40::/29
2a06:d640::/29
2a09:2980::/29
2a09:a800::/29
2a09:af80::/29
2a09:bc00::/29
2a09:c700::/29
2a09:cf00::/29
2a09:d700::/29
2a09:dd00::/29
2a09:e300::/29
2a09:e700::/29
2a09:ef00::/29
2a0a:b380::/29
2a0b:9000::/29
2a0d:3c40::/29
2a0d:95c0::/29
2a0d:afc0::/29
2a0d:c100::/29
2a0d:fcc0::/29
2a0e:3f40::/29
2a0e:5880::/29
2a0f:3100::/29
Signature Algorithm: sha256WithRSAEncryption
5f:88:e0:ec:af:29:f9:1d:94:e2:02:0a:9c:57:94:69:08:a2:
64:83:be:6f:a2:e4:b1:fa:56:3f:d8:98:61:ba:25:84:9b:52:
32:66:cb:f8:82:2e:08:e7:8e:b1:01:ed:e6:5e:81:b9:a1:ae:
a3:b2:05:db:40:ac:a9:88:63:f3:0c:36:5e:95:08:00:7e:62:
f7:c4:8c:55:27:1e:bd:5c:f6:ad:41:63:46:f7:80:27:ca:db:
2d:81:00:8a:d2:8c:3a:c1:c8:43:62:9d:89:05:d0:51:ba:53:
a5:f2:41:8f:0b:60:46:b5:e4:1b:2b:b9:5a:d5:a0:8b:3b:5c:
0c:5b:e0:25:6f:dc:c7:33:9a:35:e7:85:44:19:77:cc:c9:d3:
5e:1b:db:01:3f:27:e6:b6:0c:0f:ac:0a:8c:d1:65:cd:31:b3:
90:5e:82:8d:f1:4e:e3:0d:b5:2e:73:e2:6d:0e:c9:5e:a8:69:
4c:a3:b4:c7:c3:20:81:d7:1b:9e:7f:69:84:94:21:57:d4:45:
0c:a1:3d:ff:15:84:57:21:cc:55:84:ef:66:81:74:82:19:de:
b4:59:9c:0e:f9:f4:cf:0c:82:2e:bb:fb:28:eb:3f:75:0c:b2:
d8:74:65:58:9b:9c:59:25:a0:65:54:cb:b2:b0:f3:d3:d0:b1:
67:41:8c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:39:08 2025 by rpki-client