Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/D5XJyafxmprXF-TapTDIXPmauXU.cer
File: D5XJyafxmprXF-TapTDIXPmauXU.cer (raw, json)
Hash identifier: iZLrPdrePFpCMHsacuEy/TPWOBZ2ZSkPfocMVEJl6+0=
Subject key identifier: 0F:95:C9:C9:A7:F1:9A:9A:D7:17:E4:DA:A5:30:C8:5C:F9:9A:B9:75
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942143A25EA1D3FB7BE42BE3E5A6EC00CC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/53/08f5cd-8eec-4d55-8812-c93659f76737/1/D5XJyafxmprXF-TapTDIXPmauXU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/53/08f5cd-8eec-4d55-8812-c93659f76737/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:47:48 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 58221
IP: 91.237.36.0/24
IP: 91.239.80.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:a2:5e:a1:d3:fb:7b:e4:2b:e3:e5:a6:ec:00:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0f95c9c9a7f19a9ad717e4daa530c85cf99ab975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:26:34:fb:30:07:29:e1:a1:0f:3a:34:da:b3:
7d:5a:ea:b2:7d:9e:32:b7:15:af:98:60:6a:dc:4c:
64:a5:45:a9:ec:66:b9:69:20:73:e4:49:76:de:9b:
08:72:7a:12:aa:f0:ad:3b:ba:6d:37:de:d9:2f:da:
70:01:2f:cf:6c:a8:da:34:ca:68:5d:0c:e2:2b:8c:
4f:05:4f:56:49:c6:16:84:44:45:c6:15:d2:57:10:
35:5c:7e:c9:cd:86:30:0f:f4:ab:f2:7d:30:b9:93:
c9:37:70:b1:2b:98:d5:76:92:33:32:32:5d:04:9e:
45:f6:55:13:8e:40:bf:3c:3a:04:a2:3e:59:cb:ca:
6d:2e:e5:e8:e4:6d:47:32:49:e6:f6:ee:f0:67:e0:
0a:b4:58:68:72:bb:9d:01:83:d9:a9:0b:7c:09:22:
58:6d:81:01:1b:0d:e1:19:98:77:41:da:8d:c3:b4:
3e:94:c9:99:c6:09:4c:fe:fe:93:64:74:b3:34:23:
ab:3c:13:25:e5:06:7b:64:12:32:cc:9a:63:21:38:
7f:5d:6e:fb:a4:02:fa:cd:c1:30:94:60:bb:85:35:
27:0c:0b:2b:9c:b6:0f:8b:87:2a:97:5a:3e:50:e2:
6c:37:ef:d0:24:ca:a1:28:33:46:4d:16:8f:7a:02:
53:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:95:C9:C9:A7:F1:9A:9A:D7:17:E4:DA:A5:30:C8:5C:F9:9A:B9:75
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/08f5cd-8eec-4d55-8812-c93659f76737/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/08f5cd-8eec-4d55-8812-c93659f76737/1/D5XJyafxmprXF-TapTDIXPmauXU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.36.0/24
91.239.80.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58221
Signature Algorithm: sha256WithRSAEncryption
8a:bd:b0:bd:af:64:72:9d:85:78:9e:39:fd:78:b3:40:0e:2e:
45:94:f1:12:66:bf:4f:fe:c5:b7:0c:f6:0d:58:f5:85:52:bb:
fe:c3:61:b4:8f:12:36:1a:0a:7b:40:f9:61:c6:4e:1f:a9:fd:
74:a2:19:e3:83:3e:ea:28:6b:8d:2c:b3:61:5d:b5:d6:e0:d0:
ed:8b:dc:20:49:a0:3d:0d:e1:c2:4e:05:d6:8c:d7:e1:f6:a4:
03:bc:c3:1f:f1:84:33:15:1b:32:73:3b:af:9f:31:47:4b:3b:
27:92:51:78:b0:fc:4d:8b:6e:aa:bd:2c:ef:fb:2c:76:86:a5:
2b:da:86:1d:2c:d9:43:08:e9:47:04:c3:ae:fd:1c:9e:47:fa:
71:62:bd:23:32:11:3a:76:06:e3:06:96:2d:9f:7e:b9:0c:19:
a0:2a:e9:44:c3:6a:7d:3b:51:c9:a4:29:98:20:35:ea:10:79:
a9:f4:83:e6:5f:d5:77:b5:63:14:59:87:84:8d:d6:7a:b5:f8:
17:b3:4a:3f:09:e8:7d:21:6e:cc:cf:be:d2:88:15:5e:9d:1e:
1a:60:ad:62:1a:27:4a:94:f8:bb:63:f1:a0:f0:aa:08:bb:a4:
0e:77:31:d0:23:17:0e:b7:51:b5:29:41:c7:36:6c:94:ea:d3:
5c:c6:3f:4d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:34:36 2025 by rpki-client