Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer
File: AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer (raw, json)
Hash identifier: 6obHGuMPzMABIWqkFMJnpaqADjVUIuKs0SGiU+zX93A=
Subject key identifier: 01:95:72:7F:07:B7:58:F9:86:84:76:C1:3C:F9:77:65:4B:F3:80:EE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D6AF9A596A0D547380775EC4ABF85E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:47:39 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 5547
IP: 31.44.240.0/20
IP: 46.254.240.0/21
IP: 77.243.112.0/20
IP: 185.14.68.0/22
IP: 2a02:f560::/30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:af:9a:59:6a:0d:54:73:80:77:5e:c4:ab:f8:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0195727f07b758f9868476c13cf977654bf380ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0f:dd:12:92:c3:42:3b:ea:b5:36:21:99:4e:
bc:25:88:a7:5d:a5:d0:ba:6e:ad:6c:6b:06:b0:69:
7a:30:e5:3f:f5:5d:7b:5f:99:d9:e7:9d:70:ce:3f:
86:e0:0d:63:97:8e:e8:f8:d4:a2:21:43:fc:ea:ed:
f0:0f:2c:8e:4c:c1:91:a6:89:18:69:7f:3b:a2:19:
77:08:e3:1b:9a:d0:7c:c5:3b:c0:7b:0f:1e:21:b6:
87:a1:f9:82:9e:40:8b:41:57:6b:85:d0:3b:64:18:
32:93:82:92:c7:5d:a7:34:be:75:17:e1:03:07:61:
ae:68:19:90:60:46:a4:13:1b:6a:40:b9:2b:6e:13:
d8:77:fb:cb:3c:10:0b:43:fe:bf:1b:77:d6:f5:71:
68:ed:67:89:ed:f5:4f:49:03:e7:be:3e:44:55:e6:
bc:ac:5a:73:95:e0:ed:5d:97:36:09:9f:df:fb:34:
c7:44:f6:08:8d:fc:2e:5f:4c:05:90:ff:55:de:69:
76:db:bc:da:0e:58:de:0a:35:f0:96:65:db:94:56:
25:57:5e:e4:0a:ea:b3:da:9a:b2:db:ee:f6:29:f3:
45:23:fc:44:3e:85:69:4e:4b:2f:f4:9e:89:89:99:
98:9e:37:7a:d2:88:c9:fb:fb:81:ec:e0:ff:f9:a8:
91:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:95:72:7F:07:B7:58:F9:86:84:76:C1:3C:F9:77:65:4B:F3:80:EE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.44.240.0/20
46.254.240.0/21
77.243.112.0/20
185.14.68.0/22
IPv6:
2a02:f560::/30
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
5547
Signature Algorithm: sha256WithRSAEncryption
24:db:6f:02:3e:9a:94:44:1f:60:4d:b6:72:a2:e8:61:1d:5d:
35:f1:35:a0:13:e7:54:c9:d7:d9:52:f2:df:17:40:be:35:5d:
d0:08:15:bb:62:eb:3b:8d:af:5c:16:8a:23:fe:11:f0:f4:ee:
f8:a2:d1:d2:9d:87:c9:43:d1:65:7f:10:40:46:09:9c:b7:15:
da:a2:18:48:d4:86:bc:43:be:c2:5e:fc:b4:61:35:be:5c:96:
45:03:cd:99:3c:be:22:98:fb:69:c5:41:8d:57:a3:af:d2:ad:
89:c1:ad:a0:41:3a:f0:3b:a2:20:e6:bb:91:78:70:65:1a:05:
0a:e4:c9:f6:69:cd:40:3a:33:6c:51:9c:a0:04:6c:3c:3d:0a:
b8:fd:49:9f:f6:ee:68:ba:04:a9:1d:bf:09:bd:3d:0b:96:c0:
7f:d5:15:cd:ae:9d:fd:a7:63:ee:b3:65:75:ae:2b:37:3a:0a:
80:ce:13:3a:1c:12:6a:c4:70:13:41:3f:4b:77:2b:bc:fd:a6:
d3:c3:df:6f:de:01:e1:c6:35:e7:f0:f6:61:33:a3:1f:28:e6:
07:91:54:f9:5e:af:f6:da:95:2c:ab:c1:39:32:68:86:b5:be:
b2:66:ae:5f:71:72:b0:83:e0:d7:09:6b:d3:56:aa:88:08:22:
90:11:c0:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:42:36 2025 by rpki-client