Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kQKE4qeeXzjM42SuDvHJConF5Xs.cer
File: kQKE4qeeXzjM42SuDvHJConF5Xs.cer (raw, json)
Hash identifier: Z7WZJS8hK4HDOFfN0Y7LvWbm+ZHLe28seN5BlFkmZHU=
Subject key identifier: 91:02:84:E2:A7:9E:5F:38:CC:E3:64:AE:0E:F1:C9:0A:89:C5:E5:7B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A5ACF113AC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/90/18715e-8aae-4fb5-bd5e-280adb789bcc/1/kQKE4qeeXzjM42SuDvHJConF5Xs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/90/18715e-8aae-4fb5-bd5e-280adb789bcc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 11:04:51 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 195.88.218.0/23
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 711571084204 (0xa5acf113ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:04:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=910284e2a79e5f38cce364ae0ef1c90a89c5e57b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:30:3c:50:7e:27:d4:13:d8:8c:7b:d6:c5:87:
d8:76:73:9f:36:16:2a:6b:50:80:a5:4f:31:10:53:
7d:b3:f8:c1:d2:da:ca:1e:7d:b7:c8:e9:f4:6c:cd:
1a:25:6d:b1:39:65:b4:0f:dc:4b:1f:f6:cc:64:ac:
05:d4:c0:b1:b0:a9:3b:80:a6:53:3f:ce:04:eb:87:
24:a4:ae:0b:93:26:3b:d2:bd:c5:e1:90:e4:41:b8:
4d:e0:4f:4b:d2:b7:70:20:19:1a:6e:c0:db:42:d2:
56:42:a7:52:6a:34:68:1f:ab:bc:e3:b4:03:2a:73:
05:00:b3:71:7d:68:c4:22:58:40:bc:82:46:f6:10:
2a:13:9d:32:df:46:7a:7f:77:d5:97:4c:58:4a:36:
d4:db:97:80:6d:0f:35:35:09:32:ac:c6:84:fe:18:
78:45:30:d2:8d:22:01:53:39:22:b2:0c:3e:dd:a9:
ee:d7:c2:2e:af:93:ec:15:3f:20:f9:5c:c9:21:d4:
ab:b3:4f:1e:92:15:c8:5c:a5:43:24:91:bc:c9:9e:
c1:a7:de:63:09:70:a0:e8:f4:41:06:11:a7:38:3e:
e5:b8:5e:07:92:06:f8:d3:67:b2:9a:7d:d4:f6:0f:
81:b4:ae:ae:e0:84:51:1c:58:b2:49:af:4e:ff:a1:
76:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:02:84:E2:A7:9E:5F:38:CC:E3:64:AE:0E:F1:C9:0A:89:C5:E5:7B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/18715e-8aae-4fb5-bd5e-280adb789bcc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/18715e-8aae-4fb5-bd5e-280adb789bcc/1/kQKE4qeeXzjM42SuDvHJConF5Xs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.88.218.0/23
Signature Algorithm: sha256WithRSAEncryption
24:bc:94:57:b3:c0:08:ff:1d:e9:24:49:73:38:f8:d3:75:1c:
e4:67:d4:df:2a:ff:d7:76:ab:e7:11:07:04:ca:9d:b2:2c:03:
e6:53:81:5e:1b:ac:ce:f3:72:d4:08:31:25:2e:6d:94:55:8d:
cd:24:dd:94:aa:8b:83:17:7e:8b:96:15:d0:5f:98:ce:17:82:
1d:d6:1c:48:a7:17:a2:97:d5:2a:34:78:32:b2:d2:65:04:03:
30:fe:66:db:5c:c5:e9:27:21:95:bd:a1:b4:78:a0:16:3a:ce:
77:3e:87:03:25:d3:53:fa:cf:7c:fb:79:fc:37:7f:f5:dc:81:
d7:c2:44:ae:6d:ef:46:ed:39:5e:ce:a8:1c:74:e5:dc:fb:ae:
77:18:b5:b2:60:24:3b:e3:8b:f3:30:a9:9f:2b:04:45:58:92:
1e:10:2b:83:7c:7b:29:34:6d:f8:52:e4:c0:5e:4c:44:32:60:
63:7a:ab:00:e9:c8:e9:16:b3:ec:e6:6f:f6:2a:07:98:11:6e:
a2:0c:83:60:c4:8d:b0:df:b6:e0:f2:93:ba:d6:d8:3f:d9:fe:
87:0a:83:f3:3d:59:b0:92:a9:4e:c5:c6:b7:2a:88:9b:d2:1a:
13:df:1e:a0:b9:52:5f:23:86:0c:df:c1:c8:cd:2d:83:1c:ee:
8b:d0:72:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 09:38:51 2025 by rpki-client