Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BC2fTWr_ODxZ6d54AtvuAk7oh9w.cer
File: BC2fTWr_ODxZ6d54AtvuAk7oh9w.cer (raw, json)
Hash identifier: 6/YR9mmAOWBoJcWV3yRbhpCLsm2+NWM2fz9ULaBHi5w=
Subject key identifier: 04:2D:9F:4D:6A:FF:38:3C:59:E9:DE:78:02:DB:EE:02:4E:E8:87:DC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019428259D5B4F270A9B34DD647C0E2904AF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 17:52:21 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 8529
AS: 45053
AS: 59605
IP: 82.178.32.0/23
IP: 82.178.158.0/23
IP: 134.0.216.0/21
IP: 151.248.96.0/20
IP: 185.200.124.0/22
IP: 185.201.100.0/22
IP: 185.201.192.0/22
IP: 213.202.0.0/21
IP: 2a02:f040::/29
IP: 2a14:1000::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:9d:5b:4f:27:0a:9b:34:dd:64:7c:0e:29:04:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 17:52:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=042d9f4d6aff383c59e9de7802dbee024ee887dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8f:96:15:ec:26:e2:27:ad:fa:3d:0c:d3:b3:
da:05:4c:07:cf:d3:f0:ac:c4:3d:fd:8b:ea:a4:65:
cc:72:cc:3f:65:a6:b6:4e:58:d8:76:01:fd:01:8b:
04:15:e7:cd:21:a2:5f:17:ca:74:1a:de:a6:f9:0a:
0a:8f:6b:b8:e9:52:f2:99:f6:e5:77:b2:fa:cf:aa:
1e:1d:c1:dc:4c:06:d6:fc:f1:ee:b1:d0:4e:80:53:
65:bd:87:88:da:7e:10:36:e4:8c:e5:25:8e:a7:c6:
67:85:b4:4a:1b:ea:1e:c1:92:3e:5a:66:9a:a7:a0:
fe:1f:42:4a:fe:fa:bf:ec:59:0e:ad:72:58:fd:37:
21:0b:e1:0f:97:62:b2:e5:18:83:37:22:ed:5c:40:
e6:8b:c9:ac:ee:bb:b3:12:5e:64:0a:fc:ee:7f:8f:
ae:d3:2e:58:21:2d:88:99:8d:d2:98:02:58:f7:b3:
29:e0:f9:dd:4c:52:1f:d3:49:47:4c:2f:6d:05:e3:
32:70:1a:36:d0:29:92:8f:07:6e:df:6b:d5:cd:f2:
d7:d6:b3:dd:ea:14:16:20:6f:5c:5b:a6:bb:83:a7:
66:95:9c:95:6b:a1:b6:40:77:a0:24:0c:08:8f:91:
43:e6:e1:94:6c:3e:3d:0c:ba:04:07:99:28:b3:76:
4d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:2D:9F:4D:6A:FF:38:3C:59:E9:DE:78:02:DB:EE:02:4E:E8:87:DC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.178.32.0/23
82.178.158.0/23
134.0.216.0/21
151.248.96.0/20
185.200.124.0/22
185.201.100.0/22
185.201.192.0/22
213.202.0.0/21
IPv6:
2a02:f040::/29
2a14:1000::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8529
45053
59605
Signature Algorithm: sha256WithRSAEncryption
af:8b:a7:07:3d:df:c5:bf:ea:e7:d9:57:17:2c:68:70:98:2b:
e4:ab:84:e4:f3:c5:08:44:32:a6:18:ab:6c:77:ec:9f:a2:f8:
a7:34:b0:1b:6d:6b:ab:36:13:58:4e:05:c6:a0:43:93:2c:a7:
5e:86:f2:64:01:0d:39:fc:2f:df:2c:27:43:48:44:3e:66:31:
9b:d1:90:f0:51:9c:b9:6e:4e:17:e9:5b:2a:78:b5:64:b7:1b:
ea:ad:62:52:2c:66:0c:14:db:2f:27:31:53:a5:2c:5e:62:88:
b3:55:70:21:98:17:63:35:9e:d0:f0:cb:0c:69:63:75:b2:55:
90:65:7c:67:4b:d9:d6:d5:23:bf:c9:b3:8e:2c:aa:36:b9:3a:
1c:0e:b2:4c:14:44:57:d5:d3:b4:37:04:66:99:a4:13:c0:84:
d5:9d:68:bb:81:7c:08:1c:77:2c:1b:03:c6:88:be:3d:0d:b9:
b0:33:72:87:7c:41:cf:ec:5d:f8:b0:36:b9:a0:a7:e9:6b:b4:
1d:3b:d2:5b:65:63:ab:32:87:a7:98:5d:df:aa:ae:39:6c:2b:
cc:c0:63:c4:8e:52:20:43:da:d5:07:b2:f0:e7:7b:77:76:dd:
96:51:96:96:5d:e1:5e:5c:b2:4f:bb:d8:f8:9e:3c:cb:b4:9a:
a9:be:1b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:09:18 2025 by rpki-client