Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4kB6dpbweYQUMFTUEePKXxg27NQ.cer
File: 4kB6dpbweYQUMFTUEePKXxg27NQ.cer (raw, json)
Hash identifier: mvKkZkddxPPpt5HZwDYyKXoVuo/nsSdG6owwqneHu6I=
Subject key identifier: E2:40:7A:76:96:F0:79:84:14:30:54:D4:11:E3:CA:5F:18:36:EC:D4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D62F460DF1D69D676204FB79FC2DA8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:48:15 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 201377
IP: 2001:67c:ae4::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:2f:46:0d:f1:d6:9d:67:62:04:fb:79:fc:2d:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e2407a7696f07984143054d411e3ca5f1836ecd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7c:15:2c:27:cd:0d:51:6f:64:a6:36:70:85:
e6:7b:4e:87:e3:00:f5:b4:f3:a1:51:b1:ff:72:85:
c8:82:e9:fd:9b:f1:61:3d:f3:49:1a:d9:ca:a7:44:
7e:a9:91:c7:80:1f:f7:b1:17:5a:3c:01:3b:2c:c0:
e0:4e:83:ec:57:a2:01:cb:4c:9b:b0:b9:04:36:55:
88:4b:52:05:ea:13:75:72:59:db:76:08:0f:51:3a:
c8:da:02:78:c2:21:29:06:69:3e:48:42:65:7d:93:
ee:2b:3c:b6:e5:13:4a:b5:32:f5:b1:fe:5a:63:1b:
70:59:d7:7b:b0:01:1e:98:92:a2:7d:23:af:f3:be:
0f:fa:c3:a1:15:38:a6:e2:d1:e0:c8:81:cc:cc:f9:
84:95:36:89:5a:0a:98:cc:9b:20:46:9d:ad:6d:ed:
7c:6f:ad:e2:e3:05:f8:cd:54:a1:44:71:5e:e9:c8:
ba:4d:ad:3d:e3:a4:45:3b:f9:00:2a:a0:8d:08:03:
a0:f9:74:e3:49:c4:12:df:08:b2:ce:02:b1:0c:56:
8d:ca:44:91:2e:23:19:31:03:1f:e1:a8:cf:7d:ee:
70:48:a8:69:c9:58:17:e1:e1:32:ed:db:c0:92:df:
dc:d0:1f:d5:36:78:1a:b6:b1:51:a1:fa:b2:fe:4d:
70:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:40:7A:76:96:F0:79:84:14:30:54:D4:11:E3:CA:5F:18:36:EC:D4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:ae4::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201377
Signature Algorithm: sha256WithRSAEncryption
25:88:29:00:bc:f7:74:5c:1f:ea:bb:02:be:b7:56:49:40:0e:
c5:45:3e:e8:fa:95:57:b8:ec:f6:8f:85:50:36:26:c2:80:27:
fb:89:cb:fc:fb:1d:0f:13:b1:4f:1e:f9:74:ec:94:84:a7:e2:
78:69:e7:ee:4a:84:db:25:18:ec:0b:82:7b:e2:8e:84:23:c9:
74:b2:0d:e5:ee:b2:d1:d8:e7:8e:47:e0:2d:fe:ed:cf:83:a7:
6e:06:a2:eb:30:20:1e:3e:e7:ff:10:6c:83:d1:25:8c:3b:28:
97:13:63:ee:80:58:f9:ea:ad:82:a1:2c:f1:c1:4a:90:86:e5:
c3:08:6f:21:29:f1:8f:94:b7:46:ad:61:e9:99:1d:e3:ff:23:
8c:72:05:1d:b0:40:92:eb:c7:64:41:ce:8b:9b:56:60:87:9c:
5b:fd:25:83:f7:71:21:87:e8:11:e3:87:3a:7e:36:df:3f:39:
0e:4c:4e:eb:ae:d5:a8:2d:e3:65:d0:6f:c8:e9:85:c5:17:a0:
3f:37:84:5a:c3:31:4a:a4:d2:18:e2:f9:91:f3:c7:11:69:7e:
d1:95:4e:9e:e1:2b:b2:0d:90:09:b3:77:4c:95:26:af:66:db:
26:c5:de:2a:32:ff:6e:96:36:a0:26:4f:2a:a3:0f:03:fb:7d:
13:10:a9:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:26:10 2025 by rpki-client