Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/793Ia4IAX_jHwmSi4GcDemCLSB8.cer
File: 793Ia4IAX_jHwmSi4GcDemCLSB8.cer (raw, json)
Hash identifier: 5s5Qu93LyPay6dK35aKCoFbzLJ/fN8dHRjqbsHjS96E=
Subject key identifier: EF:DD:C8:6B:82:00:5F:F8:C7:C2:64:A2:E0:67:03:7A:60:8B:48:1F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194282524F7F15ACC5E2D14242E4A6B2B8A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 17:51:50 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 49546
IP: 91.219.40.0/22
IP: 185.49.112.0/22
IP: 2a04:b6c0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:24:f7:f1:5a:cc:5e:2d:14:24:2e:4a:6b:2b:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 17:51:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=efddc86b82005ff8c7c264a2e067037a608b481f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8b:90:78:f7:08:24:4b:46:a8:83:80:02:6a:
73:45:24:af:72:02:55:47:e5:13:cf:19:ce:00:c0:
e1:3a:4c:e3:1f:d7:2c:a6:59:50:78:67:e5:12:f7:
5d:fa:88:c3:1f:54:ff:09:62:e5:01:93:a9:ce:77:
9b:bc:5d:c0:1b:a3:69:d5:0b:b0:7f:a9:f0:fc:b6:
5f:e8:0b:c4:3c:f4:09:cf:0a:b3:c3:c9:93:10:db:
12:fb:e2:80:98:38:18:09:7b:68:5d:20:f3:16:49:
32:a8:93:de:51:d1:1a:96:5a:a6:27:41:d3:13:1d:
cd:b1:a0:65:ae:da:da:ab:77:bc:9a:4f:ad:d4:b9:
02:c7:ad:21:e1:11:fa:90:ff:14:b4:07:51:1a:85:
82:b1:f5:56:3e:1c:3b:55:7d:61:27:d2:35:da:af:
d8:35:c3:5b:93:03:e3:be:79:90:ad:fa:37:e2:03:
2a:57:53:34:ee:a1:6e:62:7c:fe:9b:aa:ec:e0:a8:
70:58:44:84:51:87:3e:f1:f3:1a:1f:d9:e4:94:78:
dc:91:af:d8:e4:36:af:c6:68:7f:1f:4c:da:7f:bf:
38:a5:c7:fe:4a:4d:ee:72:aa:cf:c1:85:13:e2:11:
9f:d2:37:05:74:71:55:d3:e8:3a:2a:6f:26:97:f7:
7c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:DD:C8:6B:82:00:5F:F8:C7:C2:64:A2:E0:67:03:7A:60:8B:48:1F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.219.40.0/22
185.49.112.0/22
IPv6:
2a04:b6c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49546
Signature Algorithm: sha256WithRSAEncryption
73:a8:c8:f6:b0:18:87:17:a6:99:2c:5a:19:34:df:07:51:8f:
e2:ed:56:1c:7d:63:bc:60:ea:0e:9a:d9:09:d0:d3:cc:68:3a:
ee:a8:eb:ce:76:d1:c7:a4:e9:82:9e:81:cd:cf:6b:aa:53:10:
9b:87:e1:21:77:bb:0e:15:bf:0d:1f:74:a2:18:ce:9d:b0:45:
3b:0f:b7:ae:89:fc:97:5a:c8:59:5e:61:52:b5:b0:58:16:e4:
81:1c:ad:70:d7:0f:db:28:c0:9f:42:2f:d4:42:af:cd:9f:09:
95:c9:4d:02:d9:c1:67:59:57:e1:78:e2:f3:36:08:2c:30:51:
1d:cf:5c:79:65:c9:27:dd:c6:e0:19:fb:c9:2a:41:9e:45:d2:
22:53:5f:65:a7:8b:f6:ba:1e:5e:8d:fc:b2:e7:ae:c2:ef:d1:
a7:db:76:5b:3f:2a:e0:20:05:fa:80:be:c0:80:51:78:9e:0a:
00:97:52:34:70:f8:4d:33:da:16:ee:9e:19:4c:50:93:24:46:
bb:1e:24:ca:41:0f:a0:3a:04:f5:51:ba:d2:32:0d:94:64:2b:
0f:dd:c0:b6:2f:83:7a:9c:f4:8d:2f:8b:43:7d:ab:1c:db:9f:
e6:0f:ec:56:ca:e0:e1:d5:12:c2:3f:42:af:ec:a0:3c:a8:04:
fb:a6:82:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:54:06 2025 by rpki-client