Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.cer
File: E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.cer (raw, json)
Hash identifier: OMaWSl+AvX370SliJLTw4fAlpKVHPnuBVPGzY9hfx+c=
Subject key identifier: 13:76:4A:52:C8:5E:07:E3:37:49:74:3D:23:A5:A2:4D:09:6D:F1:47
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258F9ABDDC7976AACF0C86D8DE8BBFDF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:49:15 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 49083
IP: 95.131.240.0/21
IP: 185.147.148.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:9a:bd:dc:79:76:aa:cf:0c:86:d8:de:8b:bf:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=13764a52c85e07e33749743d23a5a24d096df147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f1:bf:19:1d:3e:47:8f:be:90:05:78:31:18:
eb:96:19:53:51:d9:d4:20:29:b3:ea:26:7b:9d:fc:
c2:41:87:94:4b:db:72:f5:b1:43:e3:11:40:a2:9e:
bf:77:d2:6e:de:d5:44:ad:6d:bb:a8:a5:d7:96:14:
3d:6f:3f:05:82:e8:a8:98:36:db:d4:e7:48:cf:42:
56:cf:ff:6c:a1:51:7d:9f:28:cc:1a:17:a6:d9:c2:
c0:13:9a:0d:3c:bd:3c:47:31:1a:3b:3a:d1:b4:15:
f3:5e:7e:03:f2:32:24:18:5d:13:0a:5b:78:5c:9b:
c1:88:aa:0f:fd:f3:20:6f:bb:57:94:36:fc:44:67:
ad:7c:d7:b7:a1:2e:d2:1e:02:ef:8b:88:b0:5d:9a:
6a:c9:bd:7e:79:22:70:3d:25:59:1b:bc:8b:0c:41:
d1:92:f5:fd:ae:04:f9:42:78:d6:0b:24:c3:aa:4b:
98:53:38:fb:8b:e1:75:79:cc:44:93:54:de:a7:95:
fb:80:4c:d5:8a:24:d1:fe:82:af:c8:05:b2:c7:3c:
ba:21:5a:09:19:a5:4c:7a:47:6e:92:e9:bc:59:e8:
4b:9b:b0:07:1e:62:fa:e2:74:73:3e:ed:3b:86:84:
0d:45:c4:4d:87:89:88:35:97:65:ae:e9:98:bb:e8:
f4:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:76:4A:52:C8:5E:07:E3:37:49:74:3D:23:A5:A2:4D:09:6D:F1:47
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.131.240.0/21
185.147.148.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49083
Signature Algorithm: sha256WithRSAEncryption
3f:37:b3:18:b7:d3:65:c0:0d:fc:67:f0:45:28:07:b8:d1:c1:
0e:8d:aa:dc:67:b2:98:46:93:6f:c8:31:29:fe:14:6a:ba:ec:
79:cd:61:88:96:0b:53:e0:20:ad:60:7d:ff:c5:f3:7b:c8:e5:
79:17:58:7f:2d:3a:cf:19:40:d0:22:46:2a:a3:fd:9c:af:ad:
0f:eb:a1:c2:17:2e:d7:fb:f6:a7:08:7f:9e:f0:1d:74:10:e7:
1a:26:80:e6:4e:1e:70:c6:72:41:d3:9a:63:ba:aa:da:17:3d:
05:23:1a:5e:8f:4a:77:06:bf:92:f3:5c:6b:1f:28:16:13:b4:
42:3a:3d:47:3c:02:7b:ce:70:20:b7:b8:e9:9c:55:1a:1a:70:
17:0c:18:0b:91:76:5a:05:95:c7:70:08:93:b5:6d:45:fe:e4:
6b:33:a3:54:7f:24:a0:8a:84:6e:91:32:b8:13:59:40:1a:34:
c4:11:97:fc:00:e6:39:db:d6:68:f5:69:76:69:b8:8e:7f:e6:
22:7c:7a:9e:c1:d9:6c:64:1a:8e:6b:5b:eb:b8:8e:7f:03:1d:
e1:a0:bb:db:ec:a8:95:7a:35:4a:22:1a:98:be:f8:51:9a:06:
e3:05:9a:da:57:ab:a0:e3:13:bb:8b:57:5e:81:43:d9:bf:48:
2c:f2:f4:43
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:52:28 2025 by rpki-client