Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3y4c6U6IoT84_n-UO3lBa8B6HfA.cer
File: 3y4c6U6IoT84_n-UO3lBa8B6HfA.cer (raw, json)
Hash identifier: mJVi53Kv6axMk+JyIB/LTPT/oUHy6obMdo0DOVoESxw=
Subject key identifier: DF:2E:1C:E9:4E:88:A1:3F:38:FE:7F:94:3B:79:41:6B:C0:7A:1D:F0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA077AD790D1811BA0428931D5228A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/82/78d8f4-3e0f-4bbe-9214-5374c7e0ffa1/1/3y4c6U6IoT84_n-UO3lBa8B6HfA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/82/78d8f4-3e0f-4bbe-9214-5374c7e0ffa1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:47:47 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 200129
IP: 185.36.180.0/22
IP: 2a00:e860::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:07:7a:d7:90:d1:81:1b:a0:42:89:31:d5:22:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=df2e1ce94e88a13f38fe7f943b79416bc07a1df0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:99:2f:40:03:21:58:d8:98:a2:49:22:60:b5:
a5:23:bc:05:3a:23:28:13:46:76:d4:b6:ad:2d:5c:
97:92:41:c3:52:6b:d4:e0:0e:73:dc:f8:3d:1f:32:
da:df:c0:96:37:d5:c1:f9:75:74:e3:8b:94:47:b5:
14:3c:14:f9:85:11:5b:29:55:f7:b6:79:4e:17:26:
c8:4c:1c:e1:5a:8e:6f:a5:74:97:02:d4:1e:60:05:
a0:59:d8:cb:a2:72:15:15:14:46:5c:c1:06:e7:cb:
68:20:6d:7c:24:cc:4a:e6:9a:82:63:2e:64:64:c5:
78:8b:38:34:ac:61:bf:41:2c:62:81:b2:54:3f:23:
90:bd:9d:1d:08:8c:d7:92:a9:c1:0f:fb:ae:89:f0:
4b:38:46:2c:11:65:fc:51:63:2c:fc:2b:f8:79:f7:
fd:5f:4d:f7:3b:8e:1c:92:ce:e8:51:16:79:9e:b5:
dc:25:d6:8a:11:2c:b2:4b:7a:da:8d:ac:43:f1:c9:
b1:9c:e8:6b:6f:fa:ba:e4:65:90:4c:31:83:d2:81:
83:34:47:d5:a8:6f:d4:da:e2:bb:41:0f:27:b4:80:
e9:44:40:4c:79:e7:6d:2b:81:b1:eb:be:bc:44:74:
e1:78:ed:62:71:93:04:f9:04:a0:67:37:34:bd:73:
fb:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:2E:1C:E9:4E:88:A1:3F:38:FE:7F:94:3B:79:41:6B:C0:7A:1D:F0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/78d8f4-3e0f-4bbe-9214-5374c7e0ffa1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/78d8f4-3e0f-4bbe-9214-5374c7e0ffa1/1/3y4c6U6IoT84_n-UO3lBa8B6HfA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.36.180.0/22
IPv6:
2a00:e860::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200129
Signature Algorithm: sha256WithRSAEncryption
90:be:fd:8f:0a:9f:25:f5:e9:8c:3e:6a:7a:76:db:be:fd:4f:
2a:99:cc:16:15:b8:5c:92:54:be:41:ce:21:53:78:1a:06:08:
9c:d5:57:8b:f2:de:1c:29:08:c7:ef:d9:04:79:f4:a9:85:d7:
78:80:3e:d8:4a:39:0e:f2:cb:73:fd:6f:2e:f7:7d:26:91:69:
48:2f:4a:40:b6:21:fb:00:15:f6:5f:87:b0:71:13:56:f7:a3:
e9:fa:ce:fd:ed:0f:bc:35:71:c0:77:20:72:84:f5:50:83:5c:
af:c9:0e:20:c3:9a:13:e8:30:cf:91:29:b1:ab:51:24:aa:13:
4d:5b:48:15:1a:67:62:1b:62:d9:27:d9:ee:12:21:8e:9a:11:
bc:66:c6:b6:27:9d:93:12:90:69:fe:9e:d8:a5:48:3f:a9:b9:
5e:8e:43:d9:81:0e:0f:03:c4:4b:11:6f:54:26:a6:94:00:99:
15:44:60:72:b7:f2:fd:d3:57:7a:c1:ec:d7:0e:eb:97:bd:f3:
9d:1c:92:cc:82:aa:6f:3d:1a:b0:1d:0a:61:09:d4:67:6b:e0:
2f:95:43:4e:5f:86:21:24:99:4b:ae:5c:8b:3d:2e:04:30:8b:
0c:33:e4:67:06:bf:f4:c9:8a:ba:c8:4d:d2:8d:ac:ab:91:06:
3e:7b:12:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:36:48 2025 by rpki-client