Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3_xJGVpDnVudcRKzNgFe7iyUTYk.cer
File: 3_xJGVpDnVudcRKzNgFe7iyUTYk.cer (raw, json)
Hash identifier: Y5Tdg9ktki+6dYA8H9rtKfQAmCWXDuz/dWqZDFgGLEE=
Subject key identifier: DF:FC:49:19:5A:43:9D:5B:9D:71:12:B3:36:01:5E:EE:2C:94:4D:89
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258EDC428A44E4733CC7A99D300CA901
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:48:27 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 42398
IP: 185.193.56.0/22
IP: 2a0a:35c0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:dc:42:8a:44:e4:73:3c:c7:a9:9d:30:0c:a9:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dffc49195a439d5b9d7112b336015eee2c944d89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ac:7c:22:a8:e8:35:e7:32:99:11:ba:9d:79:
82:6b:31:3c:0f:d4:24:36:22:13:e4:21:23:d9:b0:
2b:d0:ea:22:6f:1c:3f:fe:66:63:52:52:c2:8f:ad:
a3:62:22:8e:80:f9:b2:c7:60:79:93:32:79:16:af:
b9:8b:d4:91:e1:90:47:cf:82:e4:fa:d9:49:87:b8:
22:ab:6f:7c:62:9a:f5:1c:c4:67:e5:bf:69:3e:81:
3d:ad:41:9f:54:97:48:da:16:aa:63:3a:1d:13:fa:
b4:18:93:f7:da:97:0e:84:04:3e:89:bc:76:ee:0b:
fe:1f:30:15:7c:77:d6:74:1c:88:f7:be:47:5c:96:
7b:78:97:f8:b3:74:e6:49:89:9e:60:51:ce:ac:21:
f1:03:ba:01:40:39:a5:f8:56:32:7f:4b:d5:84:f1:
c6:69:2e:bf:ac:31:51:3b:29:12:46:1c:df:71:fb:
d2:50:32:7e:d6:34:59:89:8c:e4:e0:2c:8b:7a:ae:
9e:06:b2:9c:58:4c:70:b5:75:2c:73:17:31:9c:4f:
ee:e3:9c:08:0e:89:59:70:76:3b:12:90:8c:02:58:
85:b6:0f:79:f8:2b:ff:8c:a7:52:b8:6e:5d:3c:8f:
c4:64:63:60:f3:5f:a0:82:0b:0e:85:6a:ca:ce:7e:
22:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:FC:49:19:5A:43:9D:5B:9D:71:12:B3:36:01:5E:EE:2C:94:4D:89
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b28d89-b89b-4682-b8c7-7ebb6b9e369d/1/3_xJGVpDnVudcRKzNgFe7iyUTYk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.193.56.0/22
IPv6:
2a0a:35c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42398
Signature Algorithm: sha256WithRSAEncryption
4a:cf:b7:86:51:2d:d2:d7:4c:cc:08:ab:fc:b6:af:b7:03:b5:
0c:64:64:ce:e0:ee:70:37:2c:bf:57:09:a9:b4:37:b0:0b:40:
4f:dd:39:44:1a:27:ab:cd:47:cc:ea:f1:6d:6f:43:4c:1b:f5:
40:96:55:73:fa:08:0b:da:bd:11:b0:8d:65:4d:b9:4a:60:27:
85:28:f7:17:4a:6d:e9:64:3b:3b:51:ac:cc:9d:79:c4:30:76:
79:ca:ad:d5:0e:05:cc:40:b4:95:b5:00:d4:d8:43:65:10:36:
02:89:3d:bf:e9:f3:60:02:cd:53:40:c5:b5:0d:f8:72:a4:9a:
94:be:c0:e6:65:8c:b7:3c:88:aa:94:66:2c:70:38:52:c5:16:
d3:87:44:10:45:e9:39:51:11:27:1d:08:19:3f:c7:bc:42:f9:
4a:fd:fd:86:60:dc:32:d6:00:b1:5e:6b:5c:8e:f3:f2:9b:ae:
a3:e0:a0:9a:41:9c:5d:50:13:a5:37:84:70:dd:05:cd:e9:dc:
9a:ac:d0:f8:fa:f8:bf:c1:e7:7d:72:f4:b7:52:c5:60:20:ec:
3a:0c:a1:ec:0f:5d:21:f5:89:06:c2:29:57:71:09:6d:a4:ee:
97:28:f4:d6:fc:ff:bd:af:c5:7d:1d:3b:50:88:8a:fd:8b:2d:
27:5e:83:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:55:59 2025 by rpki-client