Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.cer
File: 3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.cer (raw, json)
Hash identifier: i06JszO0TOJXKXAI5FcYXHlIXmFhyCFMiVlXLkRW4gk=
Subject key identifier: DD:5F:72:F0:FA:CF:52:70:57:27:C0:39:BD:C1:FB:B7:CC:97:D4:28
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194B26E7F1CFF671AFA1D9FFFD899EB7231
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 29 Jan 2025 14:19:33 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 213490
IP: 193.141.183.0/24
IP: 193.141.188.0/24
IP: 2001:67c:d18::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b2:6e:7f:1c:ff:67:1a:fa:1d:9f:ff:d8:99:eb:72:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 29 14:19:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dd5f72f0facf52705727c039bdc1fbb7cc97d428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:9a:57:3c:12:ee:ce:c1:11:35:d9:ac:71:1d:
2e:0e:e8:1d:a5:49:0d:e5:3d:d4:20:7e:76:7d:2b:
2e:88:37:4a:d6:d6:bb:77:e6:94:f4:ab:2f:7b:ec:
b8:85:2a:76:11:bf:7e:fc:9a:50:9a:a2:89:81:8d:
d3:e7:9f:b6:c5:1b:4d:e2:55:45:35:3b:38:56:ef:
84:d4:3e:cc:a7:b8:44:08:71:ad:8d:f5:4f:5a:88:
43:93:45:ef:b6:1d:8b:97:53:49:6b:1d:d0:54:1e:
78:fe:39:7a:cf:a9:81:e8:d4:02:58:32:7d:22:83:
77:3f:3e:fd:56:86:be:3a:43:1b:9e:8a:82:c6:95:
c6:f6:fb:67:4e:79:a8:f6:fa:4e:0b:97:43:6c:84:
2e:2a:26:a3:2b:fc:d9:ca:d9:93:a3:07:90:28:a4:
b7:45:2d:62:86:dc:a6:93:6c:bf:36:85:71:f9:4a:
65:b9:51:1d:e4:16:a8:9d:bb:e4:46:ea:ac:8c:69:
25:e8:bf:f0:8a:d9:ac:64:e5:30:6f:1f:79:47:e1:
d8:bc:12:eb:79:3e:5e:ba:0c:a4:6c:72:a5:de:55:
09:58:69:4e:43:46:92:9e:23:fa:1f:d2:40:e4:79:
cf:84:03:c3:ec:f4:bc:ba:32:87:0b:9d:4c:5b:44:
d5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:5F:72:F0:FA:CF:52:70:57:27:C0:39:BD:C1:FB:B7:CC:97:D4:28
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.141.183.0/24
193.141.188.0/24
IPv6:
2001:67c:d18::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213490
Signature Algorithm: sha256WithRSAEncryption
4e:cb:ee:ec:1e:89:13:a1:86:2e:9a:be:2d:35:1c:fe:cb:cb:
47:f0:b0:b5:13:ff:73:9b:5b:7a:89:1a:5e:e0:d2:12:f6:09:
cd:ac:15:03:1c:ba:85:85:32:7d:5b:45:aa:48:cb:2e:c3:63:
b7:2b:ad:c7:da:12:42:f9:d8:6d:b2:13:f1:3d:8d:96:a9:fc:
7f:42:9f:c8:b5:e8:5d:a4:c8:7f:d2:a7:95:9a:98:fd:6f:70:
c7:5e:d6:bc:9c:d8:ad:0c:24:8d:65:4d:15:07:d5:c9:78:7e:
f0:62:83:21:39:40:34:46:5b:6f:cb:29:e5:2a:45:f9:1c:f5:
b5:d7:0a:56:ad:43:4d:59:73:14:04:d7:f6:a3:8d:97:08:ca:
1b:98:7e:aa:b3:77:4b:82:61:34:56:3c:5b:cb:d0:00:a3:41:
d7:18:7a:b1:af:c3:ce:0b:59:fe:1b:7c:02:27:41:68:fd:50:
aa:3e:49:e3:58:78:67:8d:f1:fa:bd:a5:fe:47:51:4c:52:9c:
41:ee:63:6d:67:1b:d6:c2:aa:6b:ca:84:06:77:02:19:14:97:
0f:01:fe:d8:84:cc:e0:de:7e:e9:8c:c2:6c:06:b2:32:3b:95:
bd:ad:49:af:e3:5d:92:d1:f9:58:d3:f7:57:42:47:b1:df:50:
3c:1b:91:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:52:56 2025 by rpki-client