Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69siVHHy1uQQYLNBhXJUhUgQFLg.cer
File: 69siVHHy1uQQYLNBhXJUhUgQFLg.cer (raw, json)
Hash identifier: Hx6GYQqIK/E9NSOc7+Ie7WAUT6wzNTi3bk+dVcHWxdY=
Subject key identifier: EB:DB:22:54:71:F2:D6:E4:10:60:B3:41:85:72:54:85:48:10:14:B8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D6BF2B12434D55C5AA94601E6F15DC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:47:43 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 12996
AS: 208045
IP: 151.249.120.0/21
IP: 185.134.244.0/22
IP: 185.201.124.0/22
IP: 193.57.14.0/23
IP: 193.57.22.0/23
IP: 194.63.248.0/21
IP: 2a01:5b40::/32
IP: 2a0a:c340::/32
IP: 2a0f:c180::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:bf:2b:12:43:4d:55:c5:aa:94:60:1e:6f:15:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ebdb225471f2d6e41060b34185725485481014b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:47:4a:9c:54:71:c8:c3:9a:c4:de:e9:33:32:
cf:4e:4c:95:5e:25:f9:22:40:c0:1f:d4:a7:ba:47:
19:84:27:96:17:0c:26:f3:8c:0f:31:89:af:af:50:
92:9c:f4:e7:0d:23:02:bc:3f:9e:b6:45:ca:31:b9:
c5:46:09:89:f0:91:39:ee:1e:fa:c5:0f:f1:8d:03:
22:49:d6:ff:9f:f3:c6:7f:f7:bf:22:f0:02:d0:4e:
d1:f7:bf:34:c5:49:89:ae:a3:a5:e9:73:4d:f1:1c:
bf:75:0f:91:4b:68:74:1c:51:e6:94:9e:fb:0b:70:
fe:78:b8:1b:9c:53:6a:d0:80:51:d9:2f:53:ea:0f:
d4:f6:af:1e:e7:74:51:ee:aa:7c:ea:75:f0:0f:0a:
78:b6:f3:cf:8c:2f:67:90:d0:0d:63:f9:4f:1d:ee:
9c:57:76:47:99:06:d4:13:e8:8d:1f:a6:d3:f7:b6:
e0:89:c5:ce:c6:85:4c:d9:d4:67:a9:1d:37:3d:f1:
54:77:8d:b6:f5:de:aa:68:62:7d:3f:7f:55:e6:11:
2e:1e:be:12:df:31:b7:7f:fb:c6:0e:2b:12:10:80:
66:d7:f3:58:4d:3c:f4:0e:63:06:04:e0:f6:f4:bb:
fd:60:25:b9:02:7a:44:fd:64:b9:bc:a3:79:cd:78:
74:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:DB:22:54:71:F2:D6:E4:10:60:B3:41:85:72:54:85:48:10:14:B8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.249.120.0/21
185.134.244.0/22
185.201.124.0/22
193.57.14.0/23
193.57.22.0/23
194.63.248.0/21
IPv6:
2a01:5b40::/32
2a0a:c340::/32
2a0f:c180::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12996
208045
Signature Algorithm: sha256WithRSAEncryption
39:e9:f5:d7:79:a9:a3:38:78:45:e2:a6:bc:2f:8c:d8:e2:a4:
4b:cb:15:d8:14:b5:af:dc:c5:12:ac:68:44:bc:00:d4:fc:1c:
a4:8c:d8:e3:53:9c:70:c1:04:52:d7:09:74:2a:8e:2b:cc:0d:
c5:08:fd:35:83:4b:65:7e:e0:5e:f0:9e:f5:f1:6c:67:60:b5:
9c:d3:63:be:1c:e7:b3:db:16:4f:1a:55:3c:86:da:ba:d5:52:
91:d6:9b:8f:84:2f:19:31:92:18:8b:bc:94:9c:b2:c8:31:a8:
8d:3e:97:cf:ae:f1:d3:3e:2c:08:45:67:d9:8b:0e:c1:0a:fe:
8e:c5:43:ba:cf:96:cf:28:75:69:1e:8e:39:c6:bf:1e:64:51:
57:e5:8b:92:94:06:fd:ae:a2:5d:27:01:3c:32:a8:0a:7c:d7:
10:1d:8c:d8:01:4a:ae:a8:cc:8b:14:06:99:1b:b6:51:93:98:
8b:e7:94:62:16:b1:66:3b:59:04:c1:62:54:6e:9f:ed:3c:07:
ae:16:c4:77:18:ef:05:12:02:04:5d:b9:37:b6:68:39:74:6a:
ed:1a:4e:cb:1e:ec:2a:8c:4e:87:b1:41:5e:d9:c9:6b:7e:3d:
d8:35:4b:45:24:97:4d:9e:f8:03:fc:cb:81:11:2e:94:77:27:
8b:bd:60:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:39:38 2025 by rpki-client