Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AslIBM_MfvJY1G_DJMFnZEdgPvY.cer
File: AslIBM_MfvJY1G_DJMFnZEdgPvY.cer (raw, json)
Hash identifier: dKg1AX5HUm8uyK4mlCWwIVuf2Tn5qzv3OUPWj70g6dU=
Subject key identifier: 02:C9:48:04:CF:CC:7E:F2:58:D4:6F:C3:24:C1:67:64:47:60:3E:F6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194236A3E8C69CABFD30950C54ADD2EE8FC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:49:12 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 89.254.0.0/21
IP: 89.254.16.0/20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:3e:8c:69:ca:bf:d3:09:50:c5:4a:dd:2e:e8:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=02c94804cfcc7ef258d46fc324c1676447603ef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:78:17:31:46:31:73:57:36:7a:1e:25:e9:a4:
91:ec:e0:90:64:0c:6f:a3:ff:8a:f3:95:f7:ff:ae:
7e:b7:5f:6c:6a:12:ac:1c:72:79:72:9c:26:ed:79:
24:a4:6d:6c:f1:19:d6:bc:b5:11:b5:bd:a1:4f:03:
a3:ed:35:95:27:28:e4:0a:f4:a8:78:e1:32:00:cf:
60:35:1c:e8:de:dc:2f:15:4f:56:50:55:d0:12:77:
2c:9f:91:0f:9e:2d:f8:86:7c:7b:7f:24:05:da:2c:
74:62:36:3c:7a:6e:ae:29:a0:35:47:af:51:01:a9:
9c:f6:96:79:7e:00:12:01:84:1b:a7:35:af:38:8a:
23:1e:8f:24:1e:24:50:b1:38:c9:43:87:97:96:6c:
19:52:48:b1:3b:f5:f6:e7:49:41:de:36:05:37:4a:
4b:5e:2e:58:da:b9:b8:2c:10:65:2c:b5:05:45:9f:
52:b9:55:33:bb:fc:f1:f4:d4:87:4a:cd:b6:06:0a:
83:bd:65:f3:0b:b4:0b:e7:25:c6:db:f5:41:1b:e6:
9a:c9:d2:cc:bc:d6:ab:4a:33:f9:23:da:a8:24:6e:
41:b9:a4:77:b8:17:4c:5b:11:db:8a:5a:2b:3d:55:
06:fb:11:8a:df:ab:d3:c4:c4:0e:0e:87:a8:08:5a:
ad:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C9:48:04:CF:CC:7E:F2:58:D4:6F:C3:24:C1:67:64:47:60:3E:F6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.254.0.0/21
89.254.16.0/20
Signature Algorithm: sha256WithRSAEncryption
4f:6a:73:2d:6b:b3:59:f2:77:61:5b:f1:51:74:a8:f9:3c:83:
3c:0f:21:64:62:59:b1:51:09:42:0e:fe:ac:59:8c:04:22:f8:
17:33:4e:8c:c8:bb:e4:87:31:6c:0d:0e:ac:5f:9f:e3:2f:81:
23:18:9e:f2:c8:c9:45:92:64:82:e9:bd:1c:06:07:82:dd:99:
40:0f:33:23:23:37:71:c7:61:6e:ad:bf:a8:4a:66:ce:1f:83:
46:3e:86:4d:48:94:af:99:2b:e5:fc:25:da:95:8a:21:85:5d:
d2:21:18:30:a6:dd:bb:e3:3d:07:6d:76:c2:13:4a:49:87:03:
75:cc:55:21:3c:46:85:68:cd:6f:42:27:4b:f1:d5:d6:f2:c6:
7a:47:62:84:79:48:3b:de:3b:f7:48:b5:bb:9e:c6:5b:fe:f8:
5c:aa:2c:71:f1:40:30:84:cf:73:b0:da:b0:ba:91:92:2f:14:
4c:61:88:2a:ba:f5:d1:7c:af:1b:da:b1:0e:44:1b:b8:d5:92:
02:63:ad:51:24:81:2f:44:03:9a:a6:61:22:8a:93:66:67:0b:
de:7b:a0:85:7e:a9:dd:d0:99:03:9d:a2:6d:89:e0:bf:00:f3:
67:27:1c:a9:b7:5c:94:b3:6b:51:4c:b7:6e:cf:9a:c0:7a:e3:
e0:a6:48:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:42:32 2025 by rpki-client