Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/E2elkhpPFIx4qmwh-E8s_I2I6ck.cer
File: E2elkhpPFIx4qmwh-E8s_I2I6ck.cer (raw, json)
Hash identifier: 5PMmIrBOoiKlAvKMo+N8KXJX2DmCUrflkc4aIjdVfsU=
Subject key identifier: 13:67:A5:92:1A:4F:14:8C:78:AA:6C:21:F8:4F:2C:FC:8D:88:E9:C9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B1E62FE3EFEB1A79E4FCA2861E7DE0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9b/db755a-1db9-4a69-a9bd-4f5eb2c88c28/1/E2elkhpPFIx4qmwh-E8s_I2I6ck.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9b/db755a-1db9-4a69-a9bd-4f5eb2c88c28/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:14 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 58297
IP: 91.240.96.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:e6:2f:e3:ef:eb:1a:79:e4:fc:a2:86:1e:7d:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1367a5921a4f148c78aa6c21f84f2cfc8d88e9c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:67:71:81:a4:3a:3b:c2:ce:8e:fe:38:46:d5:
dd:db:ca:86:8e:22:9d:f3:d3:c7:9c:4c:28:6d:19:
93:61:8c:f0:e0:20:f5:5b:c6:4e:ca:dc:91:4d:28:
dd:01:06:e8:0c:2e:fb:56:c5:a5:85:2e:f9:6d:1c:
52:d7:af:83:7c:70:7b:e9:64:61:90:74:03:d8:32:
13:b3:c5:54:24:b3:87:6b:74:38:ca:69:3b:36:33:
fc:b9:5f:3e:0e:04:aa:ed:1a:bc:8e:e6:b9:5f:5c:
65:48:83:20:03:6f:ca:c0:fb:37:d1:d8:0e:5d:8f:
c9:b6:44:d2:5c:f5:ee:cb:a3:18:67:e2:08:8e:cf:
54:c1:45:a0:5c:a7:5d:dc:f2:fe:d4:d1:5e:63:f7:
63:d5:b4:de:3c:08:08:42:59:d4:8a:d2:e7:d7:73:
10:72:e6:4b:a5:25:c4:6b:17:40:da:00:f7:76:62:
39:cb:6f:a9:3c:ac:27:46:0e:4e:8d:70:86:40:0d:
e6:5e:ae:e5:5c:3d:54:a1:ac:d6:fc:98:b1:06:22:
88:bc:a7:b4:4a:e8:e6:74:5e:0f:0d:70:d3:10:79:
06:7b:fb:51:bc:73:a1:fe:af:0f:5a:c6:6f:d3:b1:
25:38:cc:a7:00:4f:0e:1c:79:c6:bf:83:38:3a:cf:
c6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:67:A5:92:1A:4F:14:8C:78:AA:6C:21:F8:4F:2C:FC:8D:88:E9:C9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/db755a-1db9-4a69-a9bd-4f5eb2c88c28/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/db755a-1db9-4a69-a9bd-4f5eb2c88c28/1/E2elkhpPFIx4qmwh-E8s_I2I6ck.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.96.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58297
Signature Algorithm: sha256WithRSAEncryption
53:28:23:e6:66:65:83:18:eb:da:c2:ad:62:6a:25:8f:e6:78:
76:77:2e:d9:6e:1a:0b:67:5c:27:7f:a0:f1:f5:23:0b:f5:2e:
91:1b:f7:52:df:2b:6e:36:89:f0:42:cd:02:75:b9:61:47:6c:
2a:d2:94:06:da:e6:35:b3:99:93:9a:f8:df:f8:da:30:b9:b0:
71:14:67:3b:b9:26:82:3d:46:d4:92:72:8e:86:b4:db:4f:2f:
81:82:07:72:7c:53:f2:90:5f:4b:44:59:4d:c9:84:ca:7e:0e:
ad:9d:72:7c:a0:07:ce:e9:81:60:f8:63:1f:f4:f3:71:6b:60:
cd:29:6f:67:79:67:e1:73:99:28:54:f1:6c:89:b0:7a:4d:fd:
97:f4:3f:4d:b4:62:87:bf:da:9f:b8:0d:83:df:b5:66:dc:15:
14:14:f4:61:5d:0b:ae:cb:37:a5:62:3e:c2:18:cd:c2:df:6b:
6a:93:82:42:6f:cf:12:ca:1a:82:6f:ae:92:ad:ed:e4:d3:69:
37:e7:3f:f3:f0:1b:4e:0a:25:a0:cc:84:3e:d8:d5:48:9b:42:
40:51:25:59:4e:c5:04:d5:a1:c4:79:ff:a2:03:2c:9e:ad:a6:
9a:2c:3a:50:7e:de:d1:ce:d2:2e:e2:62:24:8c:d7:1b:c7:ea:
85:d4:90:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:15:20 2025 by rpki-client