Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-BogUgUmddRTm4f1-5xpTb9DJh4.cer
File: 1-BogUgUmddRTm4f1-5xpTb9DJh4.cer (raw, json)
Hash identifier: KF+70ED+Q5juFI2HJkdv6t1lOlCK9uWhkVAgRuL8OKQ=
Subject key identifier: F8:1A:20:52:05:26:75:D4:53:9B:87:F5:FB:9C:69:4D:BF:43:26:1E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FD08545F284E5C8AEE927014D822BF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:48:47 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 43656
IP: 91.198.83.0/24
IP: 194.28.4.0/22
IP: 2001:678:db8::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:08:54:5f:28:4e:5c:8a:ee:92:70:14:d8:22:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f81a2052052675d4539b87f5fb9c694dbf43261e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:16:9e:9a:20:2e:5d:97:ed:e9:2c:5c:c0:51:
34:1e:64:92:0f:41:6d:04:67:92:14:b7:2d:27:a2:
b4:99:32:15:55:e2:64:bf:8f:b3:f7:72:4f:95:42:
ee:6c:46:1c:ee:1f:96:e2:fa:ea:e4:d5:d1:1e:cc:
94:4d:05:65:73:d2:2e:af:42:ec:71:15:58:b7:58:
e6:84:c3:97:58:be:37:ba:d6:d5:a4:e8:d1:fb:6c:
90:08:4c:a1:c2:51:8d:15:a1:2f:28:1f:f9:6e:07:
47:7b:2f:7a:e6:aa:bc:49:a6:6b:70:4d:55:e3:86:
65:a2:7a:ca:78:9a:fa:ab:40:80:17:b2:a0:82:34:
b7:b3:ab:8a:c8:a7:65:5f:66:95:59:4b:11:84:ec:
ab:89:2e:5c:b7:04:04:ac:1d:0f:0f:cf:59:cd:29:
ba:70:6b:2e:a2:39:aa:04:9a:62:6c:0c:e4:db:08:
68:bf:a0:3a:09:49:b5:8c:a5:47:c8:0d:6a:0c:23:
cd:22:03:8d:8d:96:49:45:53:04:61:dd:e4:43:53:
81:56:68:3f:77:3f:fe:b9:6e:66:f5:af:c2:38:ed:
38:b0:2f:17:c2:47:d5:6b:a9:d9:d8:ef:af:98:bd:
2c:3b:c4:22:c4:d5:72:df:0c:e0:c6:cb:c1:f8:98:
e3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:1A:20:52:05:26:75:D4:53:9B:87:F5:FB:9C:69:4D:BF:43:26:1E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/0df2ef-ffc9-4457-9f4a-7712fbf161c1/1/1-BogUgUmddRTm4f1-5xpTb9DJh4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.83.0/24
194.28.4.0/22
IPv6:
2001:678:db8::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43656
Signature Algorithm: sha256WithRSAEncryption
53:fe:25:56:60:b7:e0:55:b9:d6:20:a6:74:d6:54:4e:57:11:
71:da:48:c1:1c:d0:35:34:90:4d:e7:7f:ed:6b:bb:5c:97:22:
b8:f7:41:14:00:af:7b:f1:a4:35:8b:d5:d9:17:56:29:64:22:
63:dc:0b:07:b1:ab:9a:68:7d:e9:7a:b9:73:1d:40:91:27:ce:
9e:e0:99:93:b6:2d:ea:3d:20:8d:f2:23:25:a7:bb:87:d2:6e:
d9:86:8a:11:79:a3:95:4e:06:71:00:b7:b9:4b:98:30:7c:b0:
40:af:d3:17:d5:86:fb:8b:f2:13:38:05:cb:cb:19:77:6a:ed:
90:0d:ba:0a:32:9f:18:78:38:a5:3c:1b:53:04:3b:56:d1:37:
22:f3:dd:79:5c:22:37:9c:b6:1f:f8:6d:7f:c1:31:29:3d:bf:
9f:9e:70:9c:fe:28:db:64:30:ea:af:32:85:d9:cc:08:1a:c9:
d0:84:2e:e2:2a:79:08:2e:07:ed:3c:70:e4:b1:3e:8b:97:48:
88:42:52:3f:93:65:f8:19:3d:0b:ab:74:f6:a3:aa:cd:c6:bf:
db:2e:91:bc:dd:b9:e9:44:de:4e:57:31:a8:4f:11:7e:8a:00:
19:47:c2:92:47:e8:6d:ad:83:a6:59:05:86:37:22:32:5e:3f:
f6:19:bd:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:57:10 2025 by rpki-client