Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zyddD-Y5mOobfTnlGPsyn3a-0WY.cer
File: zyddD-Y5mOobfTnlGPsyn3a-0WY.cer (raw, json)
Hash identifier: jb1rVDixKuMwO70wTYDfNmYt3/orFRcwPn3CXhO05jA=
Subject key identifier: CF:27:5D:0F:E6:39:98:EA:1B:7D:39:E5:18:FB:32:9F:76:BE:D1:66
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221F5597A1CFD81449B404A3A2DD0644
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:47:46 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2a0c:8200::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:55:97:a1:cf:d8:14:49:b4:04:a3:a2:dd:06:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cf275d0fe63998ea1b7d39e518fb329f76bed166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:12:ce:eb:b9:59:63:35:9a:f9:b5:78:10:fd:
aa:6e:02:2c:1c:ad:54:1b:a6:93:6c:82:87:05:bf:
09:1d:a2:5a:d3:bc:02:90:f3:55:64:65:84:c4:bc:
0f:4f:de:0e:d6:55:dd:20:99:32:47:33:77:b1:d2:
cf:31:11:a8:ba:6d:12:e9:7e:bf:27:2b:dd:12:ac:
a4:f1:8f:2e:46:66:dd:7b:1c:b5:71:e1:b8:85:69:
61:1d:38:9b:d7:6a:ae:1f:b0:d9:4f:d7:60:d8:f9:
fc:74:01:23:60:e4:82:f9:bb:db:bf:62:4e:ed:2c:
bf:fb:de:fe:1a:f1:37:b7:3a:33:41:4e:69:9f:f7:
07:1b:6b:c1:78:32:6d:34:d3:96:ec:31:bc:ce:4a:
bb:1c:29:e3:0d:62:ad:57:44:64:aa:9c:69:08:91:
08:24:c8:af:e4:11:f4:97:c4:81:b3:e5:53:ca:ac:
ed:79:33:d3:2a:11:71:b8:52:f1:62:10:c0:2c:13:
94:7e:df:7a:8c:4d:dd:31:02:87:54:b3:9c:d1:98:
17:d5:c6:d1:6b:aa:40:73:2c:72:b3:eb:90:18:b5:
6c:56:f0:f7:53:a1:b5:3b:02:e2:c3:ff:ae:a5:85:
74:d7:84:f6:b5:c0:bb:77:34:2e:32:5b:52:9a:56:
a4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:27:5D:0F:E6:39:98:EA:1B:7D:39:E5:18:FB:32:9F:76:BE:D1:66
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a7851c-bb78-4f29-a1d9-7b991824bd83/1/zyddD-Y5mOobfTnlGPsyn3a-0WY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:8200::/29
Signature Algorithm: sha256WithRSAEncryption
2a:e6:de:1c:40:4b:56:8e:4e:a6:ba:fd:79:02:bb:d6:bb:b9:
6d:66:d5:26:e7:c2:cf:55:df:f9:d5:95:35:31:fe:47:6b:3d:
80:2f:9f:17:fd:98:9d:96:b6:00:21:75:6a:cc:eb:57:43:65:
3b:b1:64:d4:b3:3c:6e:7d:19:39:e8:63:8c:39:b3:f5:5a:ee:
87:54:79:70:fa:b2:78:c9:dd:ac:5c:25:65:e4:0e:5f:a6:af:
72:3a:04:a2:f7:5d:9b:33:e6:85:9a:6c:8f:86:5f:fe:16:7b:
90:2e:1c:79:07:2c:ef:c6:8f:09:34:77:ec:80:a4:3a:69:10:
b3:20:98:b5:35:e5:39:1b:6e:d6:f0:97:e1:cc:c6:17:33:32:
cb:78:03:21:1b:4a:e3:80:96:19:75:31:a7:e3:2e:83:9d:c4:
4f:dd:46:25:53:96:17:1c:34:07:f3:f2:9e:16:60:b6:7d:e4:
fc:39:e4:a5:a8:bc:ee:4f:e1:cc:9e:20:f5:ab:69:f8:0b:a1:
47:0f:e6:3d:6d:a1:fd:2c:0b:77:e7:c6:cc:6b:cb:fa:77:f4:
4c:c8:17:1a:8c:74:de:fb:fd:bc:de:21:b8:e3:02:df:62:0d:
3a:e5:c5:e6:9e:fa:ab:7d:f7:0d:4c:09:3b:4d:d2:e8:5e:19:
2d:09:c3:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:39:42 2025 by rpki-client