Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DNLKvrHXJOekjdYemn4MUKTpv1A.cer
File: DNLKvrHXJOekjdYemn4MUKTpv1A.cer (raw, json)
Hash identifier: 9V5URLcfWRclkfAlMtHxwfamjl+Q9c94PpBYi+OpsOU=
Subject key identifier: 0C:D2:CA:BE:B1:D7:24:E7:A4:8D:D6:1E:9A:7E:0C:50:A4:E9:BF:50
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D91A9C3248821A9887AC2CC0748B30
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:09 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 209772
IP: 185.68.128.0/22
IP: 185.207.160.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:1a:9c:32:48:82:1a:98:87:ac:2c:c0:74:8b:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0cd2cabeb1d724e7a48dd61e9a7e0c50a4e9bf50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:be:18:6e:6a:22:83:6e:6c:fe:eb:5a:75:c0:
63:ff:64:7b:11:ac:45:24:2b:86:db:03:62:ef:f5:
0c:43:95:8d:ba:bf:69:30:cf:82:25:66:ce:d1:bb:
ab:c8:0a:79:bb:00:00:bb:12:d8:59:e1:df:87:68:
c2:eb:b3:0c:ee:5f:49:bb:87:15:e3:36:28:30:a0:
18:8e:d6:0a:dd:83:42:7c:33:b9:f9:5c:56:51:6a:
be:fb:aa:bf:9e:29:a7:e5:1a:2a:7a:9c:39:f4:ef:
30:4c:e7:b7:67:ae:ca:fb:3d:5e:0c:bb:d8:78:f9:
f2:94:52:2d:74:df:5f:73:bc:b7:23:10:04:95:9f:
45:18:6b:72:87:88:86:07:e2:ed:c2:f3:f4:9b:c4:
e4:ac:9b:56:79:b7:e9:f6:4b:1b:1a:01:46:29:1a:
be:ca:95:1c:d0:24:a9:e1:bb:73:4d:0f:93:e4:92:
38:74:47:e2:5d:60:07:1e:56:b7:6f:be:99:72:9d:
bb:5f:1f:dc:73:66:74:d0:eb:de:eb:96:60:ce:e2:
a9:15:a3:9a:fb:b6:06:64:4a:83:7f:a7:4f:38:fb:
51:de:4c:1f:5d:a3:99:dc:c2:2d:01:72:44:4f:1a:
84:3f:5e:56:37:0d:4f:62:10:86:8b:00:c6:d0:c3:
d6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D2:CA:BE:B1:D7:24:E7:A4:8D:D6:1E:9A:7E:0C:50:A4:E9:BF:50
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.68.128.0/22
185.207.160.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209772
Signature Algorithm: sha256WithRSAEncryption
46:91:5e:75:42:3d:94:dc:7a:1e:81:54:ba:35:8e:8c:4a:ee:
22:bb:a3:11:98:45:34:c4:09:2d:59:e4:af:41:51:ef:91:31:
fb:21:34:dc:f8:b4:c2:0c:66:a9:7c:09:40:6c:12:4c:64:e0:
71:31:a8:b7:dd:cb:27:75:e0:57:4d:5a:48:dc:c3:e2:ca:47:
85:0f:ed:d4:30:3f:3d:5c:9f:cd:25:7b:b0:dd:d3:92:fd:6b:
13:07:e3:45:3e:29:81:31:cc:10:62:c8:e4:eb:11:8f:19:6f:
e5:82:f7:b1:27:bc:d4:5d:9c:73:5b:c6:e2:e3:e3:de:65:70:
44:84:8a:8d:21:13:af:f7:b3:2b:90:40:a4:b5:fc:e2:50:38:
db:42:3a:e7:22:e2:d6:4d:1f:97:ac:46:d5:3c:dc:da:bd:95:
fa:9e:21:9c:93:e3:49:1e:84:4b:10:66:48:de:7c:5a:ee:0e:
54:50:aa:40:a4:47:79:8c:00:c9:eb:97:83:0d:b3:58:ee:27:
f0:5b:3c:88:9c:1d:ea:49:12:40:a9:eb:9c:71:b3:24:69:22:
98:e6:e4:79:dd:ef:c1:b6:44:c5:fb:a1:2e:05:a6:04:de:30:
7d:c1:26:a7:a0:f7:8f:c1:22:ed:ad:82:8d:a2:41:76:25:86:
e2:da:b1:74
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:42:46 2025 by rpki-client