Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/564DMp48D3Pqg_tjfKIK7OFqjrQ.cer
File: 564DMp48D3Pqg_tjfKIK7OFqjrQ.cer (raw, json)
Hash identifier: HpljnwBgKd9GglBIpftKvcK0f54iTcC5FOu7DEXFs2o=
Subject key identifier: E7:AE:03:32:9E:3C:0F:73:EA:83:FB:63:7C:A2:0A:EC:E1:6A:8E:B4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D9601A49CF952FF93B5C268011DFC6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/63/478aeb-d97f-47b7-81b0-a17dab701c41/1/564DMp48D3Pqg_tjfKIK7OFqjrQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/63/478aeb-d97f-47b7-81b0-a17dab701c41/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:27 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 204558
IP: 79.170.72.0/21
IP: 85.118.168.0/21
IP: 185.29.0.0/22
IP: 188.95.200.0/21
IP: 2a00:91c0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:60:1a:49:cf:95:2f:f9:3b:5c:26:80:11:df:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e7ae03329e3c0f73ea83fb637ca20aece16a8eb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:74:e1:f4:e2:b0:d8:c4:d9:47:37:ab:56:2a:
8f:f1:0a:89:71:65:2e:6e:3b:8e:fb:b8:66:e0:46:
e8:74:1e:ec:3f:8a:85:f5:be:55:e7:5b:d4:8f:bd:
c5:d6:bd:76:9f:5c:3b:c4:ed:71:52:c3:b8:26:6f:
d2:53:e4:e5:54:6a:77:a9:df:59:7e:d2:b9:a3:66:
2f:71:73:79:d9:bf:ee:de:ee:4b:b9:26:8b:c5:b6:
78:42:f6:27:06:44:ec:06:9f:9e:44:78:79:5b:83:
79:3b:0c:68:c8:39:b2:34:6e:7e:0b:3a:d8:f8:75:
b1:0c:1e:2c:1b:ac:40:8d:38:37:47:e6:38:69:86:
a0:4b:3d:71:91:c9:88:db:45:ef:62:58:33:98:07:
38:cf:49:b0:6e:0b:55:71:91:a6:63:df:0f:a8:cb:
4d:f0:5f:71:8d:e8:73:11:ab:31:28:18:b7:84:6e:
f2:8c:28:97:24:58:13:0a:d1:ca:62:0a:bd:38:4f:
85:12:64:01:fe:9e:8f:43:25:f6:ab:15:69:66:79:
64:85:cb:7e:0b:8b:76:4b:7a:74:3e:2a:30:7f:21:
62:6f:58:ba:20:0c:5f:fe:12:df:dd:f4:66:39:f4:
cb:1f:ba:8f:6a:cd:e9:45:9e:61:be:85:92:f4:23:
f9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:AE:03:32:9E:3C:0F:73:EA:83:FB:63:7C:A2:0A:EC:E1:6A:8E:B4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/478aeb-d97f-47b7-81b0-a17dab701c41/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/478aeb-d97f-47b7-81b0-a17dab701c41/1/564DMp48D3Pqg_tjfKIK7OFqjrQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.170.72.0/21
85.118.168.0/21
185.29.0.0/22
188.95.200.0/21
IPv6:
2a00:91c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204558
Signature Algorithm: sha256WithRSAEncryption
97:26:c2:ae:52:fa:51:38:9b:4a:0e:a1:03:74:49:94:bb:c8:
2f:00:cf:b3:e8:42:ca:05:20:ee:f3:2d:86:e3:91:33:59:92:
b5:21:25:9e:a5:6f:fe:2d:f9:c1:aa:ab:31:91:81:56:4a:89:
cb:da:c3:df:91:b8:04:fd:18:56:57:0c:7c:f5:61:63:f4:a4:
1b:af:60:8c:62:97:50:1e:1e:be:57:17:cc:af:08:2d:97:0b:
93:72:40:a8:29:bf:aa:2f:82:51:d0:6c:54:4a:4f:40:99:06:
04:84:5c:e1:dd:3a:1b:d3:9d:74:a7:d1:51:45:01:81:17:1a:
f5:4c:c6:8b:cd:8f:7e:d9:e1:3a:e2:98:3a:c1:a1:9c:3f:6c:
9e:4b:93:f7:f0:bc:be:55:a7:5d:66:11:62:d4:f1:dc:7e:32:
89:9c:0c:2a:0e:37:44:3d:0e:79:05:8d:7f:e3:1c:cb:41:2d:
8e:67:31:88:8e:41:88:6e:bb:4c:e9:f9:02:b6:09:1b:54:cf:
24:c0:c1:4d:26:a3:ef:ba:eb:47:1d:32:db:3c:3b:09:43:1c:
15:91:fa:2e:16:da:05:1f:e0:c4:4a:50:26:f3:f3:69:17:65:
b1:b4:be:83:59:60:37:ff:1d:c2:8c:ee:4d:43:f7:48:89:99:
4d:0b:09:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:25:12 2025 by rpki-client