Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-hKcy7jCQanJsf8gcwomSVa1ApQ.cer
File: 1-hKcy7jCQanJsf8gcwomSVa1ApQ.cer (raw, json)
Hash identifier: cZNVncDDd6xsU5FOE/8jzotcVuEIB8wulWbjJDE1s0s=
Subject key identifier: FA:12:9C:CB:B8:C2:41:A9:C9:B1:FF:20:73:0A:26:49:56:B5:02:94
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FC29BD3B5D5863888F8BB8C94EF00F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:48:58 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 57951
IP: 37.188.88.0/21
IP: 2a00:c340::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:29:bd:3b:5d:58:63:88:8f:8b:b8:c9:4e:f0:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:48:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa129ccbb8c241a9c9b1ff20730a264956b50294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9b:6a:fd:2f:ca:f3:85:fb:14:c9:94:1b:4c:
4e:16:31:54:54:71:07:2e:2e:9a:ba:f5:1a:2f:8a:
1a:bd:03:cb:37:d1:a6:53:07:4f:af:61:33:32:7a:
de:9a:8b:c3:92:5a:81:e2:63:f9:11:e7:79:34:89:
08:b2:5c:5e:e6:09:45:c2:6c:fa:b6:0b:45:58:a0:
13:c7:4d:bd:09:62:dd:5b:53:b1:6e:0a:d4:68:96:
47:de:14:a4:23:df:2a:81:44:6e:54:6c:9b:8c:46:
80:70:5a:af:36:4d:f3:95:da:6a:b4:ba:3d:76:fa:
2d:cb:c6:18:92:90:91:1c:27:e7:94:c0:f8:29:fe:
1a:66:41:10:ef:d5:7e:20:45:cc:a3:a9:04:e0:02:
6f:f8:c7:50:02:1e:77:45:38:74:ef:cb:85:2f:3b:
34:e4:61:ae:3e:7e:a6:9e:85:7a:be:5e:16:ae:ca:
e6:3c:d9:53:f0:72:f2:50:41:be:b4:85:f3:c5:37:
d0:c5:42:7c:ab:a3:86:6d:6d:c8:01:fa:46:ad:4e:
c5:6d:4c:6e:99:a7:d8:01:b7:09:fc:6f:39:1e:ff:
ac:bd:cb:59:62:f5:37:a3:a3:88:d3:f0:2f:3b:9a:
b7:43:14:bb:05:80:25:b7:88:5d:b3:55:69:fa:8b:
8b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:12:9C:CB:B8:C2:41:A9:C9:B1:FF:20:73:0A:26:49:56:B5:02:94
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/300839-192e-4ea9-99f2-18fd856a58b7/1/1-hKcy7jCQanJsf8gcwomSVa1ApQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.188.88.0/21
IPv6:
2a00:c340::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57951
Signature Algorithm: sha256WithRSAEncryption
00:76:1b:6f:d3:96:80:72:d7:a9:16:6b:b3:75:7d:7c:60:ed:
47:1a:d6:1c:76:0d:cd:3e:17:89:6e:95:80:c5:a6:e6:bb:2f:
a1:d3:c2:be:8d:b5:e0:c1:c9:e4:b6:63:54:86:c3:0c:1f:79:
a2:53:7e:83:44:43:2c:84:69:13:ad:8d:82:d7:ba:8a:3e:a6:
b6:ae:30:9a:db:83:5a:93:3a:34:ff:4e:63:6b:bb:65:fc:5e:
d7:1f:70:dd:c8:35:22:c9:66:a9:f7:14:49:45:a6:0e:6a:ed:
50:92:41:72:7d:6c:64:86:2a:78:98:aa:d1:77:70:bb:59:93:
5a:6e:e9:c4:67:91:16:fc:bf:e1:fb:b0:3f:4c:99:41:0e:77:
95:11:01:29:61:a7:1f:e3:e1:e9:57:b4:62:89:c6:3e:54:d5:
41:50:48:de:b5:e1:c1:68:5c:c6:66:ef:90:7a:e7:3b:36:9c:
bc:29:22:af:56:7d:43:aa:bb:f3:c8:b8:84:21:53:0f:24:39:
43:a5:dd:7d:e4:ed:2c:1c:a0:77:23:5e:a5:b1:cc:8a:0e:f6:
5c:63:5e:f8:e5:41:27:17:eb:a1:d5:ef:18:f0:73:29:4f:51:
a1:aa:d9:b3:d2:d9:43:13:31:ec:ec:4c:cb:ab:50:e2:93:87:
43:44:fa:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:57:08 2025 by rpki-client