Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.cer
File: 4kjVvwGw4pW9CIX8XE34J1Q4Iu0.cer (raw, json)
Hash identifier: vMe+AS6Zn7KTHleKrLDPofwMpAHMi4vi64ZiPXon+Xo=
Subject key identifier: E2:48:D5:BF:01:B0:E2:95:BD:08:85:FC:5C:4D:F8:27:54:38:22:ED
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D9E4960DCF2FECE0C96B8D0BA162A1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/97/ebe8e1-539b-4004-8d4c-a00b5713c6aa/1/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/97/ebe8e1-539b-4004-8d4c-a00b5713c6aa/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:50:01 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 52092
IP: 46.149.112.0/20
IP: 2001:67c:3b4::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:e4:96:0d:cf:2f:ec:e0:c9:6b:8d:0b:a1:62:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:50:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e248d5bf01b0e295bd0885fc5c4df827543822ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:85:80:5c:a6:8c:3d:af:10:fd:03:58:33:f9:
cb:9d:4d:df:bc:0d:10:8b:26:44:46:f0:a8:2c:32:
4c:93:63:26:2d:13:cc:4e:f5:14:32:9a:37:ee:c8:
da:ca:ef:65:cd:7c:01:cf:6f:71:32:cd:d9:24:af:
bc:49:ef:de:a1:b1:57:d4:7d:f1:b3:8d:d3:71:2d:
6e:b9:02:35:b1:ff:b7:94:2c:47:e9:f4:71:7b:ce:
4b:c3:be:9c:4a:62:25:5f:bd:e2:71:f5:ff:35:0b:
23:19:10:4d:a1:8c:6f:b3:dc:d1:35:94:07:0d:21:
9f:55:6c:2d:cd:f0:be:c6:12:a9:34:3a:58:06:47:
f6:d2:a9:fe:cd:50:c9:d7:a0:46:8c:d7:72:44:40:
c3:3f:ee:8a:c2:ab:6c:ac:01:9d:59:13:2b:a0:ae:
8e:61:35:ca:4e:e2:32:48:2c:98:40:56:c6:cf:22:
87:a2:d1:6d:ed:0c:67:ea:72:5b:dd:7d:1f:ae:41:
10:49:49:58:9e:51:18:d5:e6:eb:e9:d8:cd:a2:02:
ad:12:d3:b3:e1:a8:f4:ab:19:c8:b1:b9:a7:10:50:
a1:67:cc:89:80:e3:5a:38:05:2d:b4:4e:6f:f7:67:
18:f7:fa:b2:48:4c:1d:c2:a4:f7:45:af:7f:cd:d5:
5d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:48:D5:BF:01:B0:E2:95:BD:08:85:FC:5C:4D:F8:27:54:38:22:ED
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ebe8e1-539b-4004-8d4c-a00b5713c6aa/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ebe8e1-539b-4004-8d4c-a00b5713c6aa/1/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.149.112.0/20
IPv6:
2001:67c:3b4::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
52092
Signature Algorithm: sha256WithRSAEncryption
a5:5f:76:9c:94:19:97:93:a6:07:92:fd:1d:4f:9a:d3:2a:5c:
3f:0e:33:34:f6:13:a9:16:10:88:27:fa:de:3f:fd:39:54:09:
dc:e0:8c:57:d8:b6:03:3b:0a:c9:8e:54:3f:96:f1:7e:90:5a:
53:cd:94:cc:66:da:cf:0c:d2:01:22:a2:98:3d:67:ac:bf:ba:
9b:69:a3:3f:43:97:ce:34:61:c8:37:0f:8b:fe:49:9a:f2:2c:
a1:a5:fc:be:f7:f8:df:6c:e6:a7:b5:4a:42:94:b6:17:e4:e8:
fa:89:59:a4:46:89:50:c2:8a:0d:82:9d:10:61:99:30:10:02:
de:bf:b1:d6:38:9b:2f:ad:07:e6:47:ee:18:c6:03:d5:d9:16:
92:63:a1:38:98:0e:61:4a:e0:b5:2f:77:2d:78:b9:38:68:f4:
1d:14:06:0b:7b:11:81:98:14:a9:32:ca:da:14:1b:a7:0f:e8:
74:d5:f1:e8:9b:77:5a:a0:47:f5:e3:7c:3a:b2:1b:aa:84:f6:
ea:19:cb:54:f0:fa:a3:a0:af:83:89:d0:3b:83:fe:82:fd:aa:
ff:06:ac:62:8b:9c:82:23:d8:2e:4f:9d:46:32:fe:3b:c6:e1:
dd:72:4f:ed:0b:7c:e8:cf:a3:26:98:dc:46:a6:3f:95:32:9b:
25:14:63:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:35:40 2025 by rpki-client