Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8DHC2mu5pWwo7-7E5N8HWMwk6yY.cer
File: 8DHC2mu5pWwo7-7E5N8HWMwk6yY.cer (raw, json)
Hash identifier: 288FmBGu+JdX11HVCAnmVdg7hqDYvl5hJQnp+oz6Hoc=
Subject key identifier: F0:31:C2:DA:6B:B9:A5:6C:28:EF:EE:C4:E4:DF:07:58:CC:24:EB:26
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B37875A7F6DE21FD2E5EC9A99A3184
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:48:49 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 198320
IP: 130.255.112.0/21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:78:75:a7:f6:de:21:fd:2e:5e:c9:a9:9a:31:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f031c2da6bb9a56c28efeec4e4df0758cc24eb26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e3:5d:1d:b9:06:07:f0:21:17:8b:d1:27:97:
b3:ff:50:be:02:ad:cc:da:b3:bf:6b:53:68:a9:3f:
fd:98:7b:3e:22:62:e6:74:13:a4:6e:2b:6d:0a:8c:
8f:7d:4d:4a:6e:6a:16:c8:80:9b:8c:95:52:6a:3f:
d9:e6:df:02:7e:07:00:f0:4f:11:1b:39:76:87:96:
8f:4d:ff:cb:bd:4c:21:14:e0:17:18:48:9b:72:60:
f0:0e:3c:96:e5:c6:43:e2:67:5e:c0:25:3b:11:eb:
e0:03:52:82:9d:cf:49:80:a5:58:35:3f:7b:a5:ac:
04:c4:bf:ef:80:d0:84:6c:10:3e:f9:b0:50:9f:0e:
82:30:e9:b2:8a:57:67:45:81:e5:4f:5b:6c:52:21:
fc:16:ab:28:24:4c:7f:03:5d:30:6e:c5:91:94:e7:
06:01:df:cb:a8:ea:14:a3:c8:de:f1:a1:9f:e1:be:
5d:0d:52:31:80:0b:f1:cb:0c:39:3f:64:25:21:19:
9b:5e:95:fd:21:2c:55:4c:23:5d:3b:7c:9b:5d:fd:
b0:67:98:c3:85:12:25:ea:e7:e6:45:02:0f:34:98:
be:0c:a9:fc:08:74:27:ba:36:58:f6:4e:d6:87:2c:
35:b0:e9:6c:e6:d6:24:1a:19:e9:22:34:c7:0b:f5:
5d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:31:C2:DA:6B:B9:A5:6C:28:EF:EE:C4:E4:DF:07:58:CC:24:EB:26
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/dd704b-c735-44df-a796-f86243a9c2b3/1/8DHC2mu5pWwo7-7E5N8HWMwk6yY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.255.112.0/21
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198320
Signature Algorithm: sha256WithRSAEncryption
6c:84:83:77:13:12:b1:58:e1:8e:d1:a3:51:b4:80:bc:54:85:
ef:a1:aa:e2:7b:52:23:0d:fe:f5:da:ce:09:21:50:50:b0:9f:
41:89:a4:c4:11:d5:72:13:b0:49:51:74:11:b8:bc:27:86:07:
1f:24:51:e3:c1:0d:cd:0a:19:2b:44:55:59:da:ef:27:25:00:
69:fc:88:9d:e1:81:74:64:13:c5:2a:89:b6:5c:e3:61:1c:ca:
02:27:61:99:dc:9d:d0:cc:11:b4:5f:a6:0c:5c:8c:3e:7c:4b:
cb:56:ae:b3:4e:60:68:a9:66:36:6d:a2:ed:be:1a:8c:e0:95:
e7:84:dc:ea:63:18:ad:e6:23:79:5d:10:2e:a0:69:c8:b7:07:
ac:c6:62:93:36:bd:4c:18:d9:37:75:33:83:02:9e:a2:66:a6:
9c:3a:2f:06:68:5c:21:64:0c:f2:bb:09:17:8f:e8:30:ed:0d:
0e:e0:dc:50:73:14:03:87:b5:24:0c:7a:88:b0:45:56:48:45:
9e:df:a9:e7:85:8c:58:9f:28:9b:06:89:a3:74:18:ca:77:13:
3c:b8:40:b1:19:22:7c:64:c9:de:3d:c7:d7:01:1d:cd:e6:b9:
c8:6b:63:ab:41:c6:43:46:27:bc:2c:0a:fc:c5:6f:a8:9f:16:
e3:60:bc:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:57:57 2025 by rpki-client