Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-x_03y78aezBkupa79ezuX9YCQE.cer
File: 1-x_03y78aezBkupa79ezuX9YCQE.cer (raw, json)
Hash identifier: KhRQac2Ye0a6OSrYvH6O9d+uALuRBiYBdoUVB9Bffmc=
Subject key identifier: FB:1F:F4:DF:2E:FC:69:EC:C1:92:EA:5A:EF:D7:B3:B9:7F:58:09:01
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228E07E20D8D152F06FB03B07CD4F128
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:41 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 197437
IP: 46.151.136.0/21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:07:e2:0d:8d:15:2f:06:fb:03:b0:7c:d4:f1:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb1ff4df2efc69ecc192ea5aefd7b3b97f580901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0d:20:0a:6f:ee:eb:8c:f1:2d:c0:12:ae:4d:
ed:75:b3:96:b7:aa:88:09:6e:65:9b:c9:e8:d3:10:
77:6f:cb:0b:2c:cc:a9:f6:9e:41:31:08:08:e0:fb:
7f:7f:35:fd:29:4b:35:0e:9b:29:7c:0b:86:c9:15:
e0:49:b8:fa:b1:9c:01:a8:75:79:66:ce:ed:02:10:
d5:91:af:97:4f:0f:8a:80:b7:87:96:c1:2c:70:ab:
2a:fb:1c:4d:04:68:b7:ad:22:80:8e:57:8e:0c:73:
7e:da:65:4f:49:ea:0c:b3:04:87:7e:9c:bc:31:af:
f7:ed:cc:4d:0b:cb:bc:76:12:b6:7a:26:69:54:c1:
62:a1:a6:65:6f:52:08:25:79:5d:82:06:3f:ac:f5:
18:71:70:e7:b2:50:c0:47:a1:1c:35:5b:34:f3:9a:
29:68:13:b8:fb:6f:1d:6d:ca:0e:30:30:18:f7:d7:
dc:ce:83:43:0b:ee:70:c4:19:4b:4a:e9:fd:64:ca:
85:9a:8a:29:c1:83:68:b5:d0:45:6a:5e:85:23:c4:
81:84:57:1e:4b:5f:3e:5c:16:5f:19:2a:08:5f:cd:
ce:f6:df:f5:e1:68:72:04:63:f1:8a:93:94:de:37:
cf:9d:88:e6:51:c1:38:08:d7:26:7d:7e:29:04:df:
a0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:1F:F4:DF:2E:FC:69:EC:C1:92:EA:5A:EF:D7:B3:B9:7F:58:09:01
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.151.136.0/21
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197437
Signature Algorithm: sha256WithRSAEncryption
5a:82:ea:9e:df:94:0f:81:d0:bb:f9:d0:82:4d:df:45:ce:66:
aa:43:1c:07:7b:d1:a5:79:f7:87:50:01:24:3a:6f:d8:56:7f:
92:81:20:67:35:0d:a8:14:f6:62:b5:f8:4c:1d:99:e8:b2:46:
b2:7a:12:91:4a:50:a4:3b:ea:54:f3:6e:9a:16:cc:4e:59:35:
70:b7:ec:6c:6a:e5:93:c8:b9:89:0e:da:75:f4:4b:3a:00:0a:
47:3f:e6:91:f4:60:44:db:90:15:9d:ce:50:ca:6a:0d:76:e1:
8a:88:24:e5:bf:40:14:92:38:7b:87:04:d8:5c:89:38:fb:5e:
cd:e6:26:f8:3f:1b:47:9c:b9:16:e2:41:b1:2c:d1:fe:f9:99:
af:46:a4:1b:b8:b8:d6:d5:7a:63:dd:f6:39:81:f6:a2:1b:c7:
77:54:c2:f4:16:c1:b0:54:41:e7:d8:48:02:cb:22:9d:9c:af:
0a:5c:15:44:b8:fc:15:72:53:3f:30:05:f8:85:ac:08:3d:b1:
90:be:94:b3:15:40:e0:21:0b:7e:92:cf:bf:ee:49:15:8a:1b:
24:b4:bf:01:ca:5f:f7:b2:66:ba:8e:e0:5d:ad:cf:ec:b7:eb:
da:ce:dc:22:c1:ba:72:a2:01:4b:81:0c:ab:92:b7:e9:32:2a:
4f:40:ac:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:57:15 2025 by rpki-client