Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.cer
File: 2Rh8msEPIFFSsSjs3CFXyQJJFqQ.cer (raw, json)
Hash identifier: DMWnJu/h4bnrOSpMz7GoIr5fHaJEIo3z+9FhZyqVBog=
Subject key identifier: D9:18:7C:9A:C1:0F:20:51:52:B1:28:EC:DC:21:57:C9:02:49:16:A4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D5FA172BD92CAE8011E95A074DB7D4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:48:01 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 47668
IP: 91.208.39.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:fa:17:2b:d9:2c:ae:80:11:e9:5a:07:4d:b7:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d9187c9ac10f205152b128ecdc2157c9024916a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:55:5c:eb:af:bf:35:6e:13:f9:c1:ad:5e:a7:
24:be:66:ee:3d:7a:b5:e7:62:12:9e:be:f7:6c:38:
c5:75:0e:4b:03:5e:3f:6a:93:d9:c0:be:27:20:26:
ff:fc:8b:20:58:c0:75:c6:52:eb:ff:cf:a3:fa:d3:
d0:77:74:c9:13:bd:b0:60:7c:02:63:26:8b:93:e9:
54:98:c9:49:10:63:85:24:36:0c:9b:bd:eb:89:d0:
22:94:9f:1f:b7:fe:e4:83:0b:17:be:fd:ca:12:7e:
08:5c:19:c1:e6:a0:9e:b7:8c:de:63:7b:be:53:cb:
f7:10:5e:2d:34:1d:1c:b9:00:cb:1f:a6:f2:05:81:
fc:ce:68:72:ed:db:83:5c:32:2a:22:1f:c8:6e:c6:
6e:00:e4:94:f3:72:3e:22:f3:f8:71:81:80:27:e4:
59:cb:b6:c8:04:bc:95:22:7f:26:01:af:1a:c8:8a:
f4:9a:7d:a8:68:dd:04:44:f8:eb:e0:ee:13:13:1b:
76:a1:fa:43:40:33:c9:7e:11:a7:52:8c:eb:31:e2:
74:da:0a:b2:aa:c3:38:fb:33:c5:81:0f:51:e0:f6:
3a:97:43:4f:4e:e3:f8:a5:9d:61:76:e4:87:e9:3a:
a2:8a:d2:ff:fc:8d:68:79:a2:d2:b9:9c:a7:f4:81:
82:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:18:7C:9A:C1:0F:20:51:52:B1:28:EC:DC:21:57:C9:02:49:16:A4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/4ad454-0048-411a-b1ea-24b30606e219/1/2Rh8msEPIFFSsSjs3CFXyQJJFqQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.39.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47668
Signature Algorithm: sha256WithRSAEncryption
56:51:23:f4:56:4f:f8:41:7d:ff:17:c7:64:65:d1:5d:46:c5:
38:12:87:4e:8f:98:71:3d:66:3f:a6:3d:7c:fa:8b:fc:2b:26:
c2:01:a1:55:36:dd:9e:98:10:88:f2:7b:41:f1:74:53:cc:af:
d4:c2:83:01:22:28:98:42:fb:d1:ca:f5:af:a9:eb:47:ce:e8:
6c:5f:d0:e8:d2:ea:33:f8:bb:ef:b1:12:98:ff:49:ac:31:e9:
b5:0a:ec:8d:aa:f1:3b:27:48:af:0a:b6:72:4d:41:e2:a1:6c:
46:87:b1:3d:f0:7b:2f:a6:65:75:93:5d:cc:6c:b6:92:15:e8:
89:ce:77:c2:dc:b5:c6:cd:5d:92:93:aa:e5:a9:71:2e:a1:c0:
16:1f:d4:80:15:24:55:ef:05:88:f1:92:1e:72:03:e3:27:96:
2f:ae:8f:f5:d0:64:34:54:86:2e:56:71:5e:c8:3a:5b:78:68:
78:8e:5b:c0:26:3a:1c:72:34:38:6b:f6:e5:d3:28:39:cc:84:
7a:94:df:3f:74:9e:be:f5:aa:e8:0d:45:75:9e:e5:b0:b4:ff:
49:54:a2:c8:9d:4f:55:ae:73:14:fb:91:f9:4c:2f:12:f0:16:
63:ba:e7:00:85:d5:65:92:44:8a:5b:9b:5e:6c:18:f9:4f:17:
7c:04:ce:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:53:14 2025 by rpki-client