Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.cer
File: 1-s8VPyT6jTIUzXxuJQ1LGfUGcis.cer (raw, json)
Hash identifier: oQ3GBAe6oq55/bNep8AWJyvZ0/v+ldrrBOZqtKvVcSE=
Subject key identifier: FA:CF:15:3F:24:FA:8D:32:14:CD:7C:6E:25:0D:4B:19:F5:06:72:2B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D5A49194CCA08B9639325A82E92F98
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/81/8621e4-e9a9-4b64-9648-9aa7372b616d/1/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/81/8621e4-e9a9-4b64-9648-9aa7372b616d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:47:39 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 198970
IP: 185.159.116.0/22
IP: 194.49.126.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:a4:91:94:cc:a0:8b:96:39:32:5a:82:e9:2f:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=facf153f24fa8d3214cd7c6e250d4b19f506722b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:95:88:d5:84:11:e0:4c:3c:3d:b3:ef:24:b0:
3b:8b:37:96:4a:f9:26:1f:2b:5e:cf:e6:c5:2d:31:
8b:d0:ac:c0:be:b4:4a:d2:12:59:cb:b9:f1:10:9b:
3c:70:d5:0c:56:7f:d9:3d:c6:11:32:cd:8f:2a:1a:
bf:b8:81:3e:34:90:c9:3c:58:63:22:2e:36:5c:bf:
49:39:d0:16:05:a4:c2:6f:9b:ae:d3:4e:99:24:f6:
f6:c9:71:b5:c4:de:8e:1f:6e:1c:13:8b:a3:c6:37:
47:4b:05:dc:7e:97:2e:d6:63:ee:c4:ad:0d:ed:46:
95:ea:58:f1:b2:d7:90:aa:9c:cf:8b:67:44:65:0d:
45:7f:aa:e8:5a:fd:e4:a8:01:98:30:a3:51:f9:76:
41:88:7d:a0:56:99:36:d6:e9:a0:21:bd:ea:2b:f4:
e7:43:9a:a3:75:7c:46:e9:78:d9:61:e9:32:47:e2:
ba:cb:bd:8d:2c:88:86:0a:27:0d:a1:88:9e:d2:36:
30:a9:33:07:ef:a8:ac:e9:44:70:38:f1:aa:36:db:
58:bd:89:9f:fc:7b:87:4b:14:be:3d:13:ae:f8:ea:
85:7c:3f:77:72:cf:6c:c5:41:b4:c5:63:db:00:32:
f8:7c:c5:b6:20:60:bb:cd:df:9c:30:cb:20:3b:ab:
b2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:CF:15:3F:24:FA:8D:32:14:CD:7C:6E:25:0D:4B:19:F5:06:72:2B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8621e4-e9a9-4b64-9648-9aa7372b616d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8621e4-e9a9-4b64-9648-9aa7372b616d/1/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.159.116.0/22
194.49.126.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198970
Signature Algorithm: sha256WithRSAEncryption
af:80:72:bd:f9:ef:67:1c:31:db:4e:ed:0a:37:a1:25:43:10:
98:ad:14:0c:0a:a1:7f:01:4c:b4:95:e2:d5:7f:e2:00:8e:db:
6a:34:17:77:0d:3f:e1:ae:ca:d0:89:a2:e1:a2:03:49:04:e8:
82:77:8a:be:58:b0:06:2b:00:e9:ae:6b:3a:ba:5f:f2:d8:99:
65:fe:b7:b9:b4:38:36:14:b9:c4:36:4b:60:dd:77:be:72:06:
5f:78:1d:e9:f8:cb:55:d0:e2:a1:89:b8:04:71:e9:9a:34:00:
8c:0f:43:ac:b6:c1:86:58:ab:a6:e3:8b:07:48:fa:d2:73:87:
d2:e8:90:af:6a:74:e4:c5:5a:73:e4:33:53:90:bc:8a:37:78:
d9:64:c4:82:de:9d:25:ca:21:29:45:4e:d3:2e:c7:35:84:01:
c6:80:64:29:f7:2e:5d:a8:17:0b:38:2b:ed:19:f8:f0:68:41:
2e:7c:37:d8:5b:4b:9a:62:da:c7:b0:e2:73:5a:2e:74:45:dd:
12:c6:b0:6f:93:3c:29:cc:71:a0:65:23:20:12:02:e6:4f:dd:
76:5e:17:bc:e6:16:ad:25:e8:e9:5a:f9:c5:20:03:3e:54:4a:
5f:01:e8:ca:df:72:f7:69:91:4b:70:c9:80:f9:a0:36:35:e3:
11:90:47:e8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:57:32 2025 by rpki-client