Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-giWzxgjx0v8t9Yj4sQ4eHufFns.cer
File: 1-giWzxgjx0v8t9Yj4sQ4eHufFns.cer (raw, json)
Hash identifier: s4b0Jr5WosTjk0kc6QV+HpCGQEF2FuVGRrBf/OAIjdM=
Subject key identifier: FA:08:96:CF:18:23:C7:4B:FC:B7:D6:23:E2:C4:38:78:7B:9F:16:7B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194236A1368097754157CB81C78B244D945
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/79/a27620-d32d-4e98-aec4-bf6a97a56f10/1/1-giWzxgjx0v8t9Yj4sQ4eHufFns.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/79/a27620-d32d-4e98-aec4-bf6a97a56f10/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:49:01 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 31350
IP: 193.151.56.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:13:68:09:77:54:15:7c:b8:1c:78:b2:44:d9:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa0896cf1823c74bfcb7d623e2c438787b9f167b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:86:18:cf:87:f2:93:7e:a6:29:de:e5:a6:6a:
24:76:fc:21:3d:e5:08:4c:23:aa:66:12:96:a9:56:
83:36:13:23:2e:aa:a4:f6:64:dc:a2:ea:2f:3c:14:
3f:ee:84:67:8c:cd:c0:7d:45:e3:c7:20:ef:5d:2a:
de:a5:64:bf:20:6e:39:8e:31:5f:67:2b:8a:fd:55:
f9:e2:56:79:64:a9:db:e8:c9:11:10:3d:24:f3:8b:
09:73:54:e2:24:25:58:49:86:b1:d3:30:0c:06:e4:
40:c6:3b:82:ae:64:e7:d9:01:30:cf:d9:52:66:b3:
48:c1:47:e4:78:0f:d4:95:26:8d:82:54:98:64:30:
0e:36:29:61:52:1a:6a:77:94:12:5e:89:ac:20:5b:
81:1b:41:54:5c:d4:70:67:8e:4e:74:9b:36:9d:7e:
96:50:0d:fe:7c:aa:92:84:f8:2e:b3:bc:c5:23:93:
67:1c:a8:7a:ca:3e:ef:85:fe:86:b0:80:a6:fe:ab:
98:82:5a:27:5c:d0:23:6e:8b:c2:43:b1:65:e7:61:
d0:e1:c5:ea:85:4f:37:79:f7:bf:63:1d:83:ca:87:
cb:66:3d:a5:7a:95:d2:30:77:39:fd:94:69:36:57:
76:1a:66:5b:90:0d:f3:c7:6d:1c:70:9f:d5:2c:9c:
39:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:08:96:CF:18:23:C7:4B:FC:B7:D6:23:E2:C4:38:78:7B:9F:16:7B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a27620-d32d-4e98-aec4-bf6a97a56f10/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a27620-d32d-4e98-aec4-bf6a97a56f10/1/1-giWzxgjx0v8t9Yj4sQ4eHufFns.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.151.56.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
31350
Signature Algorithm: sha256WithRSAEncryption
39:bb:11:12:c8:37:37:91:17:c6:b2:18:ac:6a:9f:9c:3f:fb:
8e:ac:4a:4a:43:e2:62:13:8f:58:20:17:6f:cd:e5:a4:ed:14:
dd:f0:7d:48:85:f5:37:d0:88:84:04:c1:05:8f:e4:a4:19:2a:
65:4d:8c:b1:b8:23:37:3d:49:be:65:fc:ff:99:f5:91:75:bc:
b6:53:74:12:c5:93:c8:c6:5a:02:e0:11:93:5d:3c:fc:7c:a9:
ba:f3:fa:55:6f:ea:19:61:e8:b8:27:7b:9a:d3:42:c2:9e:80:
c8:69:44:34:18:92:e6:92:ac:1e:66:94:c3:d6:46:32:3c:70:
c6:d1:16:ea:55:f7:4b:70:76:27:91:0d:7a:73:38:44:e4:48:
41:49:e3:c3:95:bd:46:3d:cd:68:2b:6d:68:0c:3f:14:b7:ce:
39:bc:a9:e5:8a:66:27:8e:e7:30:9b:e5:08:d0:ff:62:97:f7:
92:f1:5f:22:21:5a:84:4f:d1:18:de:bb:4b:e5:8c:ec:f7:59:
37:2b:12:be:97:86:d7:d8:af:35:4b:d6:f5:e5:a4:61:9b:f6:
2f:1f:11:3a:73:90:0b:4d:35:4e:ae:a4:c1:f9:09:1e:d8:aa:
b6:1c:12:8f:3d:ca:f7:bc:0f:30:2c:33:b7:df:a8:0f:a8:09:
2f:d8:52:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:57:30 2025 by rpki-client