Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-Q5xm6pMgxBINnn7ajy0zprADAk.cer
File: 1-Q5xm6pMgxBINnn7ajy0zprADAk.cer (raw, json)
Hash identifier: 9raTtQ6DD6KD/Ah4Cau3z6KKTjDB4uJbGpGFGPkymF4=
Subject key identifier: F9:0E:71:9B:AA:4C:83:10:48:36:79:FB:6A:3C:B4:CE:9A:C0:0C:09
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258F91CCE3B6FD4F7F8CE7B2478CE96E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/34/3b27b0-a1a7-4bf5-8cdd-595bfa1e1a9b/1/1-Q5xm6pMgxBINnn7ajy0zprADAk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/34/3b27b0-a1a7-4bf5-8cdd-595bfa1e1a9b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:49:13 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 205244
IP: 185.224.100.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:91:cc:e3:b6:fd:4f:7f:8c:e7:b2:47:8c:e9:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f90e719baa4c8310483679fb6a3cb4ce9ac00c09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:26:b8:8c:bc:dc:0a:6e:ad:29:a9:1a:cf:86:
0b:81:87:b7:6d:e7:86:38:67:e7:f7:fe:27:cf:e8:
0d:37:67:c3:83:d9:73:05:db:70:2b:03:77:c1:73:
68:24:6c:70:77:5c:d8:2b:5f:9a:a6:af:b0:48:10:
4b:25:1b:fc:95:08:c2:b4:f2:5c:44:17:ad:44:de:
50:ed:72:1a:36:15:e5:2d:c1:e7:83:27:8f:0c:92:
72:a7:01:5b:fc:54:ae:bf:5d:8d:4a:e4:40:a3:cb:
e1:f9:24:01:0e:47:e6:47:e8:6c:81:d8:61:85:e6:
de:10:97:4a:b8:8e:11:13:56:bd:a3:4a:07:0f:39:
de:c4:3c:c4:61:bc:8f:a8:9d:9e:5b:24:80:46:1b:
04:8d:ba:11:5c:9f:79:0a:53:c8:b7:57:67:f9:21:
f2:cb:1f:92:54:e5:3f:bd:8f:58:c4:ef:46:75:eb:
76:ac:11:2c:ef:f7:53:74:8b:01:ff:61:e5:23:bf:
e6:c5:0e:0b:46:95:91:2e:08:c5:33:5c:5a:4f:87:
eb:de:82:b2:eb:47:35:80:70:5d:6e:60:02:a8:4c:
18:c8:ef:53:02:f5:f3:21:73:f8:2e:1a:2f:41:03:
83:32:88:c9:52:45:24:b3:d0:ed:28:b5:c9:57:f0:
d0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:0E:71:9B:AA:4C:83:10:48:36:79:FB:6A:3C:B4:CE:9A:C0:0C:09
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/3b27b0-a1a7-4bf5-8cdd-595bfa1e1a9b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/3b27b0-a1a7-4bf5-8cdd-595bfa1e1a9b/1/1-Q5xm6pMgxBINnn7ajy0zprADAk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.224.100.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205244
Signature Algorithm: sha256WithRSAEncryption
6f:e8:19:bc:c9:f5:90:14:0d:82:ba:90:92:0a:95:f8:6b:a5:
22:d2:8b:ac:96:b7:8c:cf:c6:7f:ed:d9:c3:b2:d6:ff:2e:65:
d0:78:c1:54:9f:5f:8e:5a:87:d4:45:41:d8:59:71:ef:32:6b:
44:9f:72:82:c9:b6:67:dd:ae:9b:ae:a3:44:9e:fa:9e:33:e5:
c8:fd:7e:fc:8a:68:4d:6e:5c:27:d7:a4:c5:af:e2:a4:c8:12:
28:cf:c6:ea:49:55:31:57:46:8a:69:1d:29:0e:db:20:32:9d:
67:15:d7:c6:fd:0d:47:88:c5:44:b7:1e:05:7c:ff:57:f8:50:
1e:15:af:7c:56:39:36:0e:a0:04:d7:82:cf:0b:7a:6b:09:a8:
6d:cf:b8:9f:d2:7f:a6:79:b8:8d:f9:76:50:40:2d:dc:19:6f:
1a:26:08:8d:12:eb:43:cd:d9:f9:fd:02:bf:b6:06:36:ab:27:
1f:18:29:24:74:61:cf:b6:4d:d7:16:87:38:30:5e:8c:55:dd:
6b:b0:05:50:79:c1:ca:6a:8d:90:8e:40:29:c4:6a:77:cf:18:
3a:f1:7e:ef:b3:6a:69:bd:90:42:05:2b:0c:90:16:e2:91:52:
43:dd:52:ab:7d:ba:bb:9d:58:16:bf:62:9a:d7:a0:e9:74:25:
e8:2e:0d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:57:27 2025 by rpki-client