Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.cer
File: Ci1xwNFF7yeARxCSe5Q8Z-UK56s.cer (raw, json)
Hash identifier: 5n987yXJF4fEc/Yb8XeJvwRBIDST3x537XsfKEX/R+g=
Subject key identifier: 0A:2D:71:C0:D1:45:EF:27:80:47:10:92:7B:94:3C:67:E5:0A:E7:AB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA451BBC328D002AC92F00202E01A0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:48:02 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 57609
IP: 193.222.58.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:45:1b:bc:32:8d:00:2a:c9:2f:00:20:2e:01:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a2d71c0d145ef27804710927b943c67e50ae7ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:05:f3:28:b3:09:f5:b4:5c:75:85:ba:48:78:
9c:9a:7e:88:f2:9e:6e:64:84:83:74:39:8e:73:36:
99:5a:a3:08:21:a8:5f:3c:8d:12:e9:2f:e1:6a:1f:
90:0a:2b:c7:50:43:9b:01:1f:fc:21:7c:0a:6d:aa:
4d:0c:27:db:be:8d:43:c6:16:f4:c5:58:9d:12:38:
3f:d8:33:88:d0:20:f0:27:de:7b:92:c5:0b:0e:9a:
db:ad:a3:ab:2b:b8:97:c8:be:d4:06:46:41:08:72:
f7:0b:cd:34:5a:2e:1a:e6:fe:2c:71:65:41:e8:c2:
6c:09:fc:6e:30:48:19:a0:26:6a:f7:37:bf:f7:df:
10:c1:22:d2:ca:37:65:14:38:f9:34:29:81:37:a4:
ae:9e:b0:b2:8d:e6:03:d1:85:aa:44:d8:81:41:aa:
2c:fb:3b:0f:6b:b6:42:6b:5a:60:3e:b7:f1:2e:42:
73:8f:4b:b9:07:d4:63:25:1c:5c:ad:e7:a8:10:44:
06:4c:a1:43:0a:4d:20:c9:22:8c:01:21:14:4f:c1:
8b:94:f2:e4:28:07:5f:9d:6e:50:f4:ae:eb:74:aa:
53:c0:ff:37:4a:35:8d:66:cf:b9:7e:49:e9:b6:73:
3a:39:a0:37:d5:c1:fe:83:7e:0a:49:f0:68:01:2a:
f6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:2D:71:C0:D1:45:EF:27:80:47:10:92:7B:94:3C:67:E5:0A:E7:AB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b910f-dcc1-41db-96cd-092e89d59fa8/1/Ci1xwNFF7yeARxCSe5Q8Z-UK56s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.222.58.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57609
Signature Algorithm: sha256WithRSAEncryption
5a:47:d3:fc:8b:fb:f8:cf:89:f2:3b:46:af:b7:de:a7:f9:26:
cf:3b:a1:b5:53:65:64:8c:6b:b5:33:5b:14:fd:d6:ec:9d:6b:
75:c9:3e:30:12:9d:64:2a:bf:16:8a:5f:b4:99:74:82:d4:e9:
ad:9f:f7:6d:0a:e9:59:69:71:b3:d3:3d:4c:ab:10:83:89:b7:
75:6a:85:ea:92:d0:fd:75:b0:c1:92:e6:6b:a5:04:a6:ac:d7:
69:37:eb:ce:5f:ac:62:e4:17:2d:fe:0c:3f:61:38:34:a4:e4:
04:d4:81:c3:af:0f:e8:8f:6e:7c:e3:2f:ba:f7:dc:d8:97:b6:
8e:dc:c0:4a:71:89:c0:a2:52:89:d4:3d:d8:e0:c8:d0:cf:de:
a2:c5:22:bb:bc:16:48:e3:9a:db:ff:3c:33:41:75:ab:05:ea:
9d:fa:3b:f3:7c:3f:ae:7f:f0:ba:9f:35:4d:54:9b:05:67:69:
82:02:f0:bc:1f:2e:9e:f1:ae:0d:9b:71:44:ed:00:51:04:26:
f9:4d:e9:e7:b4:e5:71:ca:ad:ad:d0:95:a8:35:1a:60:e8:58:
21:6e:59:37:89:50:63:1a:d5:7d:bb:ff:43:d6:7f:74:11:c2:
79:8e:16:52:d0:07:aa:84:56:3b:9e:12:51:83:a9:c9:cb:bf:
65:dd:c4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:55:49 2025 by rpki-client