Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-vZH3yGOLG8_0c9UnSffTlDNbbA.cer
File: 1-vZH3yGOLG8_0c9UnSffTlDNbbA.cer (raw, json)
Hash identifier: McJUQm0YqYXNMbYAJm+4NjEhJbU8Pib24sebWc+Mkno=
Subject key identifier: FA:F6:47:DF:21:8E:2C:6F:3F:D1:CF:54:9D:27:DF:4E:50:CD:6D:B0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194222023D5A430AC66DB05BF50CDEF90B5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:39 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 29655
AS: 44990
IP: 93.188.72.0/21
IP: 185.227.164.0/22
IP: 193.16.211.0/24
IP: 194.9.34.0/23
IP: 195.5.171.0/24
IP: 213.173.42.0/23
IP: 2001:67c:94::/48
IP: 2a02:2a8::/29
IP: 2a09:2200::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:23:d5:a4:30:ac:66:db:05:bf:50:cd:ef:90:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=faf647df218e2c6f3fd1cf549d27df4e50cd6db0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:9c:2e:b8:92:2b:33:f1:89:97:ec:a2:fe:37:
0d:f7:a5:96:7e:76:49:e9:c1:b3:e3:3f:2b:c7:38:
bc:f6:17:1b:96:f8:3f:fc:bd:b5:d6:74:37:0a:02:
2f:b6:a6:1c:83:30:eb:cc:a6:0d:4d:20:de:ba:0a:
01:df:03:48:69:de:8c:e5:db:b6:4e:d2:0a:d2:41:
9b:ec:71:c2:b7:8c:c5:72:09:87:31:a9:90:58:10:
c5:00:e8:56:4a:6b:6b:54:cf:15:f7:13:4a:18:e0:
76:28:04:eb:5d:60:e1:aa:7e:d2:e8:1b:61:0d:d8:
24:fb:35:cd:3a:e5:56:c6:bf:5c:f6:eb:d8:00:9a:
69:7c:fc:54:b5:bc:25:54:8d:fa:b3:98:6d:2a:d0:
66:32:a3:d8:60:33:97:16:b0:d8:c1:20:56:88:6c:
2f:4c:58:9a:19:b0:5f:d3:57:ec:1f:41:b6:a3:98:
6a:e9:26:ba:35:3d:cc:9b:45:dc:fe:8f:f9:aa:da:
63:6b:c9:b0:dd:f1:98:ce:7a:07:d7:80:70:79:c7:
9f:5b:4c:2a:4b:93:c6:2c:4e:e9:f8:56:d5:05:5d:
0f:1d:c8:dc:7e:c3:f3:e6:bc:41:f9:91:3a:32:bf:
d6:37:06:ad:bd:2a:4d:ce:6f:f5:91:c9:99:3f:a9:
f4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F6:47:DF:21:8E:2C:6F:3F:D1:CF:54:9D:27:DF:4E:50:CD:6D:B0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.188.72.0/21
185.227.164.0/22
193.16.211.0/24
194.9.34.0/23
195.5.171.0/24
213.173.42.0/23
IPv6:
2001:67c:94::/48
2a02:2a8::/29
2a09:2200::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29655
44990
Signature Algorithm: sha256WithRSAEncryption
45:d7:e0:c0:6a:e2:3d:d2:57:19:f1:62:cb:03:e7:c6:a8:fd:
98:38:56:f8:f4:d3:ce:1c:f2:bc:cd:f8:d3:e2:e2:81:f5:c2:
82:4c:b8:7b:8c:6a:a9:eb:4d:02:0d:74:cd:e1:16:86:b7:16:
f0:0d:b4:3e:f2:da:d2:27:57:21:ad:0c:97:29:46:25:5f:6c:
1e:f9:5a:c6:3c:19:04:35:35:fd:51:fe:56:51:af:9a:fd:bb:
79:d2:e2:c7:0f:98:88:1b:1e:a8:b5:7f:23:7c:37:ab:60:ab:
47:e1:9c:11:b7:da:42:96:7b:04:bd:0b:c1:93:7d:8e:44:a1:
0f:91:d9:1d:76:68:87:12:e3:92:13:ac:2d:e3:40:f9:f6:b1:
df:d0:74:8b:73:9b:fa:7b:ea:a0:30:2d:98:41:23:93:33:40:
59:98:01:aa:d5:2a:f8:a6:6f:44:fb:3b:2f:0a:53:ca:13:0a:
63:a3:40:30:ff:11:f7:ef:6c:e9:78:3c:45:3e:d8:ea:2c:5e:
69:fd:5a:fa:b4:84:c3:11:56:67:23:3c:d8:08:a8:06:f4:c8:
47:7c:1d:07:dd:cb:71:22:ac:7e:23:2a:b4:b7:6f:cd:95:3e:
87:17:7c:41:0d:b9:17:80:5a:c0:6e:ca:ab:10:45:9a:de:c8:
e6:09:4f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:57:34 2025 by rpki-client