Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9692mJ7UZP2aVIn_9_uYzC0vk-Q.cer
File: 9692mJ7UZP2aVIn_9_uYzC0vk-Q.cer (raw, json)
Hash identifier: 9EHgT7xDtPKiquIn14jDCtepEvTx2e8aAua6ihrHbh8=
Subject key identifier: F7:AF:76:98:9E:D4:64:FD:9A:54:89:FF:F7:FB:98:CC:2D:2F:93:E4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D594E6AEED73D4251D94503F7C9292
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7e/d663ca-adf6-41c2-93c1-60b1de6c38d1/1/9692mJ7UZP2aVIn_9_uYzC0vk-Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7e/d663ca-adf6-41c2-93c1-60b1de6c38d1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:47:35 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 29130
IP: 195.47.248.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:94:e6:ae:ed:73:d4:25:1d:94:50:3f:7c:92:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:47:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f7af76989ed464fd9a5489fff7fb98cc2d2f93e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:40:24:5c:e6:23:e9:9c:93:0e:07:42:71:76:
c9:ec:02:d7:c5:e0:46:88:99:1a:f9:8f:c5:4a:0c:
54:30:d1:33:ce:65:17:52:1c:53:a2:63:41:a7:df:
f4:b9:85:09:74:c2:08:71:cc:62:94:c3:a1:d6:ca:
cb:97:fa:eb:55:e5:e8:62:97:8b:cb:c9:ec:8d:27:
26:a4:1f:cf:4e:c8:54:c6:f6:29:da:b5:dd:92:67:
1c:af:3c:c7:28:04:c7:5c:63:da:3a:54:86:45:04:
88:d2:4b:a8:c8:b0:00:d6:88:26:c9:8f:4b:0c:bf:
ef:c1:a4:47:e3:e8:dc:2c:4f:32:98:aa:21:ba:a5:
ce:7d:94:48:33:74:05:a2:36:fd:e7:d0:af:c3:8c:
f3:32:c9:f3:5b:96:c7:d0:26:b0:67:fc:ea:93:dd:
87:69:9b:6c:96:c0:19:3f:a4:ce:3d:5a:8d:f1:55:
b0:65:3e:6e:24:11:3f:a8:62:86:e9:d9:4c:60:ac:
5b:90:e5:31:00:e8:bf:be:c0:89:3a:42:72:88:1a:
9e:c1:26:46:07:13:8e:8e:f4:93:71:25:70:af:3f:
97:04:5a:bf:f5:28:35:cd:9e:30:e7:c8:96:b9:3a:
24:a4:e2:18:55:35:c4:f5:8d:36:04:f5:b9:49:eb:
7f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:AF:76:98:9E:D4:64:FD:9A:54:89:FF:F7:FB:98:CC:2D:2F:93:E4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d663ca-adf6-41c2-93c1-60b1de6c38d1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d663ca-adf6-41c2-93c1-60b1de6c38d1/1/9692mJ7UZP2aVIn_9_uYzC0vk-Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.47.248.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29130
Signature Algorithm: sha256WithRSAEncryption
78:70:da:7e:93:83:86:bb:76:9b:d0:2d:10:00:bf:07:5e:7f:
f3:53:9d:5c:47:ba:5d:f3:ba:a0:cc:aa:93:8c:ff:b2:cc:68:
54:e9:a3:d4:ad:90:e4:60:77:c2:83:2f:99:9f:a7:34:f8:40:
1d:a3:7b:ce:67:be:fd:4c:bb:c1:63:ff:5a:ee:4f:27:90:73:
75:ee:83:51:41:b3:cc:85:c6:34:68:bd:04:0f:28:33:0e:cf:
e3:8d:2a:72:20:e1:a6:45:05:6f:ff:5b:6c:48:7b:c9:0d:7b:
03:03:6b:00:c2:cf:0d:82:24:b4:ac:85:76:64:2b:18:4c:b5:
41:3a:8c:61:4f:cc:ef:2f:4f:05:35:b8:38:d6:7f:56:1a:6b:
4b:f0:28:c3:19:fb:7e:f0:2a:ba:74:35:b1:30:b4:01:bb:f2:
6f:b6:c7:8a:e8:13:25:fc:9e:0b:e4:29:5c:1b:61:32:ac:e6:
cb:a9:9e:c5:0f:30:15:30:bc:65:6a:c2:f9:87:b4:8a:eb:08:
e2:f9:c7:31:e2:6b:55:3b:d3:2d:6c:e6:6a:0c:a6:b8:4a:16:
d8:4b:71:ac:5c:85:f4:a9:b4:84:f8:4b:a9:5a:89:5f:7c:fd:
36:23:16:fd:00:4b:a8:68:e4:c7:53:ce:31:6c:b7:c4:42:d4:
ee:ec:7d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:07:30 2025 by rpki-client