
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-cJWdFvSc8kYauKWNoohF9PSytk.cer
File: 1-cJWdFvSc8kYauKWNoohF9PSytk.cer (raw, json)
Hash identifier: JEZliz8LpvKe0geIZnzStx5d0wwVDz7yennLxiU+yI0=
Subject key identifier: F9:C2:56:74:5B:D2:73:C9:18:6A:E2:96:36:8A:21:17:D3:D2:CA:D9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D977DA7060BC8B6873EB3DCE19EC41
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1d/44cbb0-1aee-4490-ac52-c941e6a9139f/1/1-cJWdFvSc8kYauKWNoohF9PSytk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1d/44cbb0-1aee-4490-ac52-c941e6a9139f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:33 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 212393
IP: 185.210.160.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:77:da:70:60:bc:8b:68:73:eb:3d:ce:19:ec:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f9c256745bd273c9186ae296368a2117d3d2cad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:44:74:66:55:f9:af:1a:b3:55:88:f8:60:cb:
f5:56:86:ab:10:af:36:57:cb:bd:27:74:ab:31:ce:
02:36:a2:29:8b:ce:5d:fd:b3:45:d7:d0:3c:72:86:
32:f6:89:8f:2b:ac:0c:46:ab:95:13:61:fc:48:e9:
cb:fe:96:76:6e:e4:93:37:dc:60:93:90:50:b4:22:
12:f1:fc:20:8e:a2:9d:87:72:b0:28:7a:a4:b0:3c:
01:74:a9:81:34:7d:8a:a8:71:0d:c8:29:6c:ce:93:
72:30:f6:36:f9:0f:02:96:a0:52:b2:12:d1:1e:f7:
4d:ed:6e:fc:03:33:8c:93:f0:c4:17:02:03:0d:92:
5d:58:e6:4f:e8:ef:f1:e9:86:6a:58:16:4e:a2:27:
ae:9e:e5:9e:1b:5e:e5:b8:07:b5:6d:ec:ce:e6:40:
40:2c:0d:68:1a:7e:a8:12:52:c8:b1:d0:b4:8b:30:
dc:c6:49:8c:fe:34:8c:4c:37:57:63:ef:4f:35:d1:
42:68:68:10:02:68:60:ee:4b:98:b1:98:62:f9:b6:
94:d3:89:eb:e1:75:62:99:5c:81:fe:31:b3:b5:05:
f8:df:b7:3f:f1:8e:81:61:01:d9:2f:f8:a7:d5:20:
be:33:14:72:15:f2:80:e0:82:a1:54:eb:cd:e9:fe:
01:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:C2:56:74:5B:D2:73:C9:18:6A:E2:96:36:8A:21:17:D3:D2:CA:D9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/44cbb0-1aee-4490-ac52-c941e6a9139f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/44cbb0-1aee-4490-ac52-c941e6a9139f/1/1-cJWdFvSc8kYauKWNoohF9PSytk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.160.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212393
Signature Algorithm: sha256WithRSAEncryption
8e:cb:59:5d:c6:2b:84:f9:d6:4b:57:92:cd:09:a6:fb:d0:26:
f6:59:78:8e:8b:30:53:d4:1a:f3:30:db:0e:66:30:18:85:1f:
c1:e6:50:00:c6:cd:36:8b:7f:46:0b:30:5f:31:b3:aa:da:d8:
81:83:80:ea:2a:bd:99:9e:d0:dc:22:f3:cc:7c:ec:31:84:e7:
6f:1e:e8:11:bc:27:11:14:6a:fa:c4:5c:db:41:17:e9:89:fb:
ff:fd:a0:78:ce:25:9e:48:86:4c:27:bf:8d:8c:ca:5b:59:01:
3a:bb:b3:b3:f2:66:2e:ac:0d:fc:df:b2:f9:2d:d0:11:bf:cc:
83:d5:ef:1c:da:fc:6a:76:53:34:44:2a:36:0a:fd:33:16:94:
64:94:d8:74:31:40:ae:04:05:a8:a3:2f:25:15:d3:93:18:d6:
ce:cb:42:c2:82:0a:93:5c:b6:7d:3a:ef:55:7c:48:b1:07:77:
14:b4:87:11:1a:05:4b:bc:8a:dc:c4:81:4d:a4:f6:ef:6d:4b:
ff:09:a4:eb:6d:cc:22:2a:24:54:fc:e3:d6:86:b0:44:c4:e9:
e8:c5:7a:f6:13:60:a3:4f:9f:e3:7a:93:05:f6:6d:49:5c:2d:
b4:eb:a8:95:29:c1:3d:fe:9a:60:70:66:93:82:c1:83:63:24:
e3:3b:e2:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:00:52 2025 by rpki-client