Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-cSsxnpLABNVenTs5mQfT5R1_y0.cer
File: 1-cSsxnpLABNVenTs5mQfT5R1_y0.cer (raw, json)
Hash identifier: xYGOp7NPdnH25UF7hPYwsSB0e9lSww0zfp2b0RNmNAc=
Subject key identifier: F9:C4:AC:C6:7A:4B:00:13:55:7A:74:EC:E6:64:1F:4F:94:75:FF:2D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FD67D65FD4812D88D9D0076AC84824
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ca/969c12-5263-4026-bfcd-0890b8051d85/1/1-cSsxnpLABNVenTs5mQfT5R1_y0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ca/969c12-5263-4026-bfcd-0890b8051d85/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:49:11 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 62099
IP: 176.98.248.0/21
IP: 185.47.220.0/22
IP: 185.91.168.0/22
IP: 2a01:9420::/29
IP: 2a05:ec00::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:67:d6:5f:d4:81:2d:88:d9:d0:07:6a:c8:48:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f9c4acc67a4b0013557a74ece6641f4f9475ff2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:e0:6d:9f:26:64:74:75:e7:72:49:88:04:0e:
50:37:eb:1b:2a:ba:c6:c5:d4:4e:6c:2b:07:d7:80:
72:6d:23:cc:70:80:5d:2b:53:00:64:42:f9:9c:93:
48:19:83:8d:97:23:98:34:d5:d7:25:55:aa:be:9f:
32:dc:3d:ed:5a:81:71:6e:48:b1:96:9c:e6:6b:4b:
fc:f9:eb:0d:11:a4:4c:d5:5d:c6:6b:73:15:c5:b4:
47:76:62:fe:c3:3d:0d:e0:1e:13:63:0d:7d:2c:04:
45:36:55:ae:38:1d:fd:8b:0d:39:06:46:7f:7e:f5:
38:ff:9e:66:9a:26:ab:02:e8:5b:12:ec:ae:07:df:
e7:90:45:74:35:52:68:6e:2f:2c:7a:64:b5:3e:89:
92:21:e4:7b:92:13:60:2b:00:1d:5b:7e:4b:17:ef:
40:bb:a7:77:08:27:ff:42:bb:70:46:fb:d8:34:88:
71:ab:9a:17:42:82:e7:cd:e4:0c:87:0d:0a:cb:79:
99:fc:98:5b:da:a9:07:64:e2:79:c1:a4:99:10:97:
e9:49:4f:c5:6f:89:2f:c3:2b:1a:e5:0c:a2:3d:4a:
4b:9b:e3:2e:66:a2:6b:ad:ba:c4:d4:9d:36:e6:e3:
ba:6b:6d:5e:67:b6:ca:ed:9d:1f:96:07:fa:a0:58:
2c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:C4:AC:C6:7A:4B:00:13:55:7A:74:EC:E6:64:1F:4F:94:75:FF:2D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969c12-5263-4026-bfcd-0890b8051d85/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969c12-5263-4026-bfcd-0890b8051d85/1/1-cSsxnpLABNVenTs5mQfT5R1_y0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.98.248.0/21
185.47.220.0/22
185.91.168.0/22
IPv6:
2a01:9420::/29
2a05:ec00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
62099
Signature Algorithm: sha256WithRSAEncryption
ab:05:2f:b7:d5:46:4b:eb:5f:d5:41:6e:c3:97:4d:50:02:1d:
3f:5c:cb:76:d8:84:16:06:be:d4:86:81:92:8a:94:cd:02:aa:
91:c2:c5:e6:43:a5:ab:c8:0b:e6:1d:d8:f4:85:ed:6a:c2:4f:
76:00:58:c4:b3:76:45:db:5d:f1:52:b6:7c:16:48:b1:11:b5:
ec:8a:4a:c8:2e:69:6d:eb:6b:2c:5c:8a:9b:94:eb:ef:0f:2b:
18:00:28:f6:e5:9e:7a:63:90:b6:a8:6b:16:b8:72:a3:10:1d:
7e:ed:03:16:0d:b6:b3:c1:28:97:ee:fe:89:83:1a:c9:bf:05:
9f:9d:88:b6:a2:59:32:27:e1:b3:c7:46:0e:c2:99:b2:62:07:
c7:ee:63:96:d9:c4:d1:50:3a:08:c6:14:11:5a:a9:94:dc:20:
2b:32:16:8c:46:d7:50:47:cf:e7:70:06:e6:1d:0b:b9:aa:8a:
22:a9:ed:51:57:24:6e:7d:dc:d6:05:f7:41:20:73:a5:4d:ff:
ca:69:5f:0a:f5:36:60:6a:fc:f0:04:ec:c5:18:da:56:7e:5e:
f0:47:aa:b4:4c:c2:84:4c:05:fb:1f:ce:01:38:a3:97:4a:67:
af:04:12:e5:27:1b:f2:9d:f6:45:b6:0d:99:5b:d1:71:82:e3:
5f:9b:2b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:57:24 2025 by rpki-client