Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2yXQP8GPL0LNpQOGneGU_YzCGqk.cer
File: 2yXQP8GPL0LNpQOGneGU_YzCGqk.cer (raw, json)
Hash identifier: /HCpFxcx62jQjnStNw6V6RYAuSTSIP6sM7QMSwEektc=
Subject key identifier: DB:25:D0:3F:C1:8F:2F:42:CD:A5:03:86:9D:E1:94:FD:8C:C2:1A:A9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420684AB4663DEDFD75D08B0B57317453
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:48:13 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 197192
IP: 195.226.213.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:4a:b4:66:3d:ed:fd:75:d0:8b:0b:57:31:74:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=db25d03fc18f2f42cda503869de194fd8cc21aa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:34:5f:cc:2e:03:cf:5f:93:70:8d:f4:4b:5e:
c5:cc:3e:e5:3d:e1:e4:90:28:e2:b1:bd:a4:22:c3:
af:2f:8e:b7:80:28:2b:79:e5:bc:b5:5d:44:ce:c4:
06:80:42:e6:42:e0:d4:f2:71:db:55:a6:6d:76:4b:
03:f1:0e:b3:cf:c3:ed:a9:4c:35:8a:85:82:fc:65:
3a:61:be:a3:a4:b4:be:77:36:7c:0c:7c:44:80:1a:
4a:58:10:41:7c:81:00:a7:b9:55:d6:fc:f0:97:70:
35:29:68:83:89:c8:30:71:fa:2d:e8:4e:52:a6:ef:
ff:15:8c:e5:78:98:d2:27:65:85:1d:e2:78:12:84:
90:74:1e:d4:1d:20:3b:2c:f7:45:be:ad:59:a0:4c:
44:5b:6b:7f:44:97:1a:c2:62:43:bc:e4:74:e5:99:
5d:79:dc:e3:2b:93:d6:20:3a:83:29:d2:16:64:45:
b6:46:64:b9:e8:c6:d8:f3:5c:02:be:34:8d:62:f0:
69:0c:50:16:e9:25:7c:4d:bb:68:9b:2d:e3:ba:40:
d1:dd:68:f3:34:15:f9:18:98:9a:13:a2:9c:89:e6:
6c:a3:48:fe:c3:b1:fe:4e:26:2c:b4:d3:22:de:85:
28:08:dd:df:29:e5:62:22:61:8c:7a:36:a2:59:45:
ab:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:25:D0:3F:C1:8F:2F:42:CD:A5:03:86:9D:E1:94:FD:8C:C2:1A:A9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/5c22c6-7dc3-4c8c-82ac-936175ad2eb0/1/2yXQP8GPL0LNpQOGneGU_YzCGqk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.226.213.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197192
Signature Algorithm: sha256WithRSAEncryption
75:58:84:38:76:85:95:f5:c3:08:2e:ba:23:0c:54:7a:16:d7:
a2:16:c7:28:79:e1:5e:09:2e:04:ac:20:26:d6:c6:a6:42:7b:
9f:a4:48:20:d8:c5:d5:92:82:dd:90:c0:cc:d7:b1:5a:b8:3d:
80:4e:bf:93:47:79:89:12:61:98:a1:8c:02:70:86:69:e4:6d:
a4:da:c4:46:14:ce:65:e1:59:85:5b:77:05:7e:e0:03:7c:c2:
2a:0d:2e:2e:fa:a0:bc:ce:ae:e6:8e:5b:d7:6c:2e:f8:90:9a:
6f:e6:98:06:3c:5b:7c:c0:fe:f5:a1:41:c6:84:48:a4:54:af:
27:1c:27:eb:c7:1d:ba:f3:01:2a:2c:5c:99:9c:22:1b:6f:19:
63:1b:d0:c2:1f:c6:9b:38:ff:7e:73:25:52:fd:49:8a:31:03:
1f:48:c3:ca:fb:9b:24:9a:77:19:47:fb:19:3d:b2:f4:b8:ec:
88:a8:99:23:42:f9:8f:39:17:da:d3:87:49:8d:c7:63:6c:69:
f4:d4:95:80:f8:49:c0:96:8c:d8:c9:4f:4e:97:63:a1:c2:c0:
06:60:80:4d:68:34:a7:bf:26:1e:a8:4f:92:12:8d:26:2f:17:
fb:70:b1:1e:16:a8:d9:0f:c3:d5:59:89:87:47:c8:02:e8:5c:
b8:ff:5e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:54:55 2025 by rpki-client