Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.cer
File: 1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.cer (raw, json)
Hash identifier: yl/xk/61HIUtw92A20NUeGACNzZfCv1bHaHQBfQyaYQ=
Subject key identifier: F9:9F:65:E1:BE:42:A6:5B:49:4C:F2:64:2A:4D:D8:E3:28:D0:F9:CE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194252225888DC74CF08B6B0CFDAB0C1430
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:49:42 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 62088
IP: 45.93.132.0/22
IP: 146.19.244.0/24
IP: 185.48.56.0/22
IP: 185.245.184.0/22
IP: 2a01:9520::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:25:88:8d:c7:4c:f0:8b:6b:0c:fd:ab:0c:14:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f99f65e1be42a65b494cf2642a4dd8e328d0f9ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d9:a5:7f:27:4d:12:1a:3f:99:18:81:60:be:
3f:d0:76:2d:63:6c:f2:c4:c9:7c:bf:50:fb:99:54:
cf:34:91:8d:b3:a6:51:87:91:21:b9:16:a4:81:35:
dd:7b:6a:c5:27:93:2c:29:cb:67:19:8e:c8:53:9b:
a5:ad:eb:67:81:92:8d:9c:b6:51:86:fc:f4:4b:2a:
ff:09:0b:26:89:94:92:c8:04:b2:02:b2:89:af:ab:
56:9f:f1:43:d8:55:31:82:f4:77:5d:80:b0:44:3a:
ff:73:ac:b5:bf:8c:c6:7d:a9:39:31:ae:bb:10:4b:
7f:3f:f6:42:25:66:ae:91:0e:7d:3d:83:4b:f7:b3:
32:29:3e:6a:76:0d:7e:94:12:c3:57:b8:06:b9:64:
3a:9f:5f:3b:94:02:7c:2a:4d:41:4f:1f:6e:2f:f1:
2d:14:9d:be:a8:a9:13:3a:24:56:a3:22:4a:8f:66:
19:25:38:de:8c:e3:0a:f8:7a:fe:99:3d:56:76:2a:
72:d6:b6:58:6e:f0:30:1d:01:e6:04:8a:6b:dd:28:
2a:43:cc:31:c8:80:ae:b1:36:19:fb:f4:ab:9b:da:
3c:bb:04:78:19:bf:ab:5d:68:15:2b:6f:20:44:ec:
48:df:7e:cd:d3:16:76:8a:d2:e8:d6:a9:f8:17:04:
0a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:9F:65:E1:BE:42:A6:5B:49:4C:F2:64:2A:4D:D8:E3:28:D0:F9:CE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/6df8ba-d4cb-4705-bf55-54d162298ffd/1/1-Z9l4b5CpltJTPJkKk3Y4yjQ-c4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.132.0/22
146.19.244.0/24
185.48.56.0/22
185.245.184.0/22
IPv6:
2a01:9520::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
62088
Signature Algorithm: sha256WithRSAEncryption
96:96:f1:ad:fa:26:15:78:47:69:10:d4:8a:2c:62:9b:1f:0b:
b6:a5:58:18:82:61:85:ce:0a:7c:e9:03:18:37:1a:30:af:38:
c9:7b:85:4a:1d:bf:83:cc:7b:04:ef:d1:af:42:c4:1b:7a:0a:
8c:05:f3:c9:47:c2:f9:83:60:fc:57:6a:1d:f6:e1:b2:04:93:
5d:0b:66:23:e2:5a:c1:15:d6:95:f1:87:a6:4d:f6:4f:70:13:
73:a4:8f:7e:d1:6c:03:d2:e1:46:1a:b2:dc:a1:96:62:2d:56:
c6:f8:ef:4d:f8:fe:74:22:db:4e:e6:11:30:3b:cc:e6:68:b8:
cc:ef:f2:1e:59:3b:81:cb:28:63:de:2d:e2:8a:6f:6d:a9:fa:
e1:68:48:1a:12:ea:90:0b:00:8a:0f:4c:fa:d9:80:a6:f1:a7:
2d:c9:64:36:6a:2c:16:4e:e0:f8:64:45:21:2e:c7:54:83:44:
57:8a:d1:c5:89:92:ce:e9:e7:6e:8e:30:af:f1:c3:5e:d8:b1:
35:0b:76:f7:7e:7d:2f:a4:17:aa:df:57:32:70:1e:5d:33:44:
24:b2:36:77:8f:31:6a:82:51:28:ad:c1:d9:dd:41:c0:a5:0d:
7d:49:32:cc:33:b6:76:7d:a2:33:c2:16:2e:70:68:52:5c:7d:
42:e6:89:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:01:00 2025 by rpki-client