Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1FRz0ejN9J49mPjXcKrBSNLyiyM.cer
File: 1FRz0ejN9J49mPjXcKrBSNLyiyM.cer (raw, json)
Hash identifier: vhUAHeiHv2qvePddGcdZrh3u54LOZYfiuka7dxxMN68=
Subject key identifier: D4:54:73:D1:E8:CD:F4:9E:3D:98:F8:D7:70:AA:C1:48:D2:F2:8B:23
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266B2B8BD55266C8371B4FAECBEBB5CC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/84/91d6ce-1a6a-4d13-a2e2-a7eb46b37d72/1/1FRz0ejN9J49mPjXcKrBSNLyiyM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/84/91d6ce-1a6a-4d13-a2e2-a7eb46b37d72/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:49:05 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 48189
IP: 91.209.27.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:2b:8b:d5:52:66:c8:37:1b:4f:ae:cb:eb:b5:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d45473d1e8cdf49e3d98f8d770aac148d2f28b23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:35:ec:91:ca:fe:0f:6a:7d:6b:26:37:38:94:
96:a5:91:42:6e:5d:bd:44:c3:c9:29:40:81:20:b2:
20:a8:fd:5a:92:b2:f0:b1:38:a0:39:e2:ae:27:38:
37:1e:14:bb:f6:1b:19:df:16:73:1a:8b:56:29:f5:
14:6b:91:f0:11:77:2e:d9:53:b7:da:e1:98:7b:a8:
2d:ae:2b:e5:fc:97:41:62:fd:48:2c:e2:24:a1:72:
6b:a0:f9:27:45:fb:31:85:6f:2e:db:11:83:0e:da:
b4:7b:83:6c:d3:88:3c:0f:6b:b3:50:1b:9b:ec:cc:
d3:b1:29:cf:ca:cc:1b:11:55:97:d2:1d:fd:e8:04:
2b:7e:dc:df:72:64:27:51:ce:9a:ec:66:63:b1:d8:
5a:78:fe:dc:39:d6:57:c5:b3:de:97:fe:59:17:d7:
3e:5f:9f:e2:2d:56:af:03:8c:8a:2a:d5:06:b2:64:
97:82:6c:a3:34:5a:2b:30:90:74:25:de:33:69:68:
ca:8c:02:75:45:1c:25:ad:9d:51:66:d8:1e:81:c3:
90:05:63:f9:51:67:34:83:45:fb:9e:8f:fd:f8:39:
fc:30:2e:06:26:31:ec:7f:a1:38:19:ae:fa:8a:84:
93:fa:d3:f7:af:7b:da:7a:54:05:a2:c8:46:b4:86:
43:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:54:73:D1:E8:CD:F4:9E:3D:98:F8:D7:70:AA:C1:48:D2:F2:8B:23
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/91d6ce-1a6a-4d13-a2e2-a7eb46b37d72/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/91d6ce-1a6a-4d13-a2e2-a7eb46b37d72/1/1FRz0ejN9J49mPjXcKrBSNLyiyM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.27.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48189
Signature Algorithm: sha256WithRSAEncryption
98:fd:3b:17:6c:5c:b5:4f:5d:2a:5f:9f:72:21:a3:77:64:95:
48:36:2f:4a:80:2b:6f:b9:49:94:72:e4:31:3d:2e:03:06:1c:
34:cb:f5:50:73:ab:c6:ce:5b:09:1b:7a:03:ad:41:bf:37:7f:
dd:dd:00:85:3f:5c:3f:45:08:fe:a5:b9:a4:85:40:83:e8:4f:
6c:a1:a0:c6:a4:35:fc:02:19:1a:0b:c4:e3:04:3b:4f:4d:36:
c5:a9:bb:d8:d9:79:07:e9:f9:29:fb:57:07:67:5e:9a:b0:30:
d3:7b:46:f4:ce:72:04:d8:19:48:68:de:11:f3:da:5d:6a:ab:
c4:12:b7:43:99:6c:b5:70:16:2b:56:2e:61:e8:09:52:d9:c3:
15:d5:5e:df:0a:4c:31:d4:a4:db:58:2b:6f:e9:e1:85:db:8a:
42:91:e6:d7:60:3c:bc:89:c3:86:db:5f:c4:c4:2d:cc:bc:a8:
9b:94:54:2b:6c:47:a2:ec:60:d2:56:4c:5c:45:2c:dd:5f:9a:
54:36:fe:cf:2a:c0:b3:a6:df:64:a7:33:d5:f3:c9:40:9c:6b:
df:36:81:7a:b1:78:5d:d3:30:4d:f5:06:7c:e5:94:71:63:bd:
52:ef:40:38:8e:13:eb:50:dd:fc:57:49:f0:91:91:0a:1a:c8:
47:37:52:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:30:03 2025 by rpki-client