Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-eIPfTosyV2d5vTjNMtLZ5IucPU.cer
File: 1-eIPfTosyV2d5vTjNMtLZ5IucPU.cer (raw, json)
Hash identifier: +UyKHhmFO/hwiMp3valncmYRBO1Ff77TWgwksockUFU=
Subject key identifier: F9:E2:0F:7D:3A:2C:C9:5D:9D:E6:F4:E3:34:CB:4B:67:92:2E:70:F5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421440691701406F38A7C4FD0A65C6E12
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/1-eIPfTosyV2d5vTjNMtLZ5IucPU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:13 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 35775
IP: 194.88.148.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:06:91:70:14:06:f3:8a:7c:4f:d0:a6:5c:6e:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f9e20f7d3a2cc95d9de6f4e334cb4b67922e70f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ff:74:f0:b5:a6:c7:34:01:3a:43:a7:16:42:
3a:c9:bd:69:27:48:6b:83:74:c6:78:a0:75:a1:96:
75:f8:c1:7f:b4:19:2f:f9:2d:8e:e5:c5:f4:ba:23:
42:07:a9:50:3c:a5:e7:26:e0:df:12:8c:5a:ba:19:
2a:db:ce:bc:f9:54:48:3b:23:02:1f:81:6c:b6:62:
cd:53:a9:6a:0a:e1:ad:31:d3:91:23:8a:e0:40:a4:
8e:3c:e2:95:51:e6:ac:12:cc:1b:b4:93:7d:a1:19:
d2:98:77:61:8b:81:80:67:7b:5b:24:14:18:09:7a:
77:8d:47:7d:75:d4:4d:82:1b:5e:cc:0f:3f:d9:e2:
b7:6d:53:73:f8:cf:c7:ab:99:32:79:2f:32:5d:e1:
2d:89:99:eb:79:41:68:d8:3c:2d:3b:eb:ac:00:0b:
38:7c:cd:bb:80:81:f3:88:88:10:f1:89:4e:a5:24:
48:12:6c:5a:81:7d:40:d4:92:c0:0a:1e:0d:b6:32:
11:9b:c4:46:cc:cb:74:b2:89:8e:35:42:a3:31:55:
d9:1e:fd:de:e0:0f:af:f7:77:0d:fb:3e:5c:d1:79:
bd:52:49:d3:9f:36:8c:53:20:3f:25:3f:01:d8:76:
60:90:f8:36:c5:6e:2b:3d:16:b4:a8:b9:f4:17:dc:
38:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E2:0F:7D:3A:2C:C9:5D:9D:E6:F4:E3:34:CB:4B:67:92:2E:70:F5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/1-eIPfTosyV2d5vTjNMtLZ5IucPU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.88.148.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35775
Signature Algorithm: sha256WithRSAEncryption
0d:9f:e6:fe:03:76:05:e1:b1:b1:2c:44:8d:71:84:56:a1:96:
66:83:e9:7a:cd:36:59:66:14:87:e7:25:87:8c:89:cb:c7:65:
b8:3e:c4:a0:b2:7e:c9:a0:91:f0:d6:05:be:77:05:48:3e:66:
b2:75:da:ff:60:a3:1a:de:7e:54:51:3b:3d:cd:f9:da:e4:9c:
90:b5:e9:b3:2c:da:dd:07:d3:06:60:69:a0:0c:f7:cd:3f:8e:
4f:dd:ff:2b:25:08:0b:d3:f5:f6:56:ec:ad:6f:15:37:47:c7:
4c:c0:84:bf:81:90:03:7e:7d:b9:89:10:88:b4:8a:9d:75:91:
35:4f:25:11:27:91:20:52:51:5f:c7:cc:75:73:1f:14:52:1a:
4a:aa:71:b0:49:34:a3:c6:fa:af:73:a4:0c:e8:11:3d:9f:64:
4a:21:a8:35:82:40:14:d5:c9:0a:89:da:d6:d4:5e:61:65:1f:
fc:aa:90:0d:fa:ba:d7:80:23:1b:51:48:7e:09:7c:cb:cd:25:
40:4b:54:57:a5:ba:a3:bb:5b:85:ec:7d:85:0c:12:82:c7:93:
b4:e8:b2:fb:fb:70:56:0a:5f:64:08:e0:63:44:bd:0e:f0:fe:
5b:45:4f:2b:17:48:b6:c2:05:dc:dd:10:fb:86:03:5e:81:6f:
08:df:18:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:57:15 2025 by rpki-client