Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FNQhCjRMmZST5hz53XNWd9OLwF0.cer
File: FNQhCjRMmZST5hz53XNWd9OLwF0.cer (raw, json)
Hash identifier: WCVSU3agXwPE4/TgW0suXslgKH33wD5sDQrd9uRCMIg=
Subject key identifier: 14:D4:21:0A:34:4C:99:94:93:E6:1C:F9:DD:73:56:77:D3:8B:C0:5D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D9EB7F5EBED8343A4D7D78DACE80E7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:50:03 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 212935
IP: 91.203.30.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:eb:7f:5e:be:d8:34:3a:4d:7d:78:da:ce:80:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=14d4210a344c999493e61cf9dd735677d38bc05d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:69:69:d8:9e:ac:21:70:3e:18:f5:fd:13:14:
10:14:3e:39:67:3d:bd:81:a1:c5:ed:7c:76:be:4f:
71:bd:70:96:b5:f4:d0:6a:4e:4e:ac:64:69:e6:8a:
ee:f2:33:0c:aa:1a:1c:67:29:c3:be:14:11:0b:ba:
c0:a7:b5:c5:bc:59:c4:1a:47:e6:8e:d0:54:3c:7a:
e1:1a:c6:e2:62:2d:38:f4:e0:4c:4f:f4:b2:e7:00:
7f:c9:bc:8e:e8:ee:a5:ae:38:f8:12:70:2b:e5:ae:
34:9a:56:93:aa:2d:39:61:ed:86:53:4b:cf:36:0a:
46:71:b7:f9:b6:14:65:40:f3:85:83:5d:af:95:c9:
ce:dd:2f:f9:82:c2:6c:37:85:a3:52:47:30:0d:ce:
59:28:6a:41:79:c0:51:a3:57:a1:1b:8c:bc:39:7a:
d5:29:a3:c9:ef:90:a6:26:aa:e4:b5:49:30:5a:16:
91:fa:ca:b5:25:e3:12:f6:29:43:d9:85:86:9e:38:
e5:5d:98:ad:2c:5b:3e:54:23:24:be:eb:6a:6e:05:
9a:87:82:15:c5:d2:e0:6e:71:ea:a3:29:1e:99:3a:
b8:b2:a7:5f:fb:6a:6f:4c:16:93:66:2d:58:21:de:
f1:53:87:14:5b:05:fa:be:5f:70:1d:b4:e9:e1:d7:
7d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:D4:21:0A:34:4C:99:94:93:E6:1C:F9:DD:73:56:77:D3:8B:C0:5D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.203.30.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212935
Signature Algorithm: sha256WithRSAEncryption
70:72:ad:0d:4a:f5:81:ba:8f:50:4b:45:7b:ca:5b:80:2e:65:
fb:cd:60:99:06:21:88:83:1d:43:44:19:78:fd:77:74:04:eb:
07:d9:d2:5f:1b:36:8a:32:5c:ff:c7:84:00:bd:cc:2b:51:ae:
81:eb:61:9b:f7:c4:b6:6a:da:08:d4:56:d2:5a:a6:8f:e5:73:
a9:be:4d:c0:b0:3d:12:d6:d9:03:9a:bb:9f:c4:4a:2e:28:00:
98:76:42:79:63:54:95:c2:2c:1f:ce:a6:67:75:10:59:25:af:
74:5f:88:5e:b6:bf:2e:a8:ec:bb:73:7d:45:72:9f:52:6d:6a:
fa:7c:7c:c1:44:54:30:4f:d3:92:67:2c:2b:cc:c6:0f:8e:6f:
bb:4a:1e:b1:4c:a7:28:b8:67:f1:1e:80:87:db:27:ea:bb:6f:
e0:80:61:e7:4a:00:7e:68:51:a9:6d:99:0c:98:15:6f:82:9e:
48:58:54:e3:ef:8c:49:b8:7e:81:34:13:d6:09:74:3d:4a:5c:
9e:8b:17:43:cb:45:ec:70:60:5a:f0:57:75:2a:6e:4f:1c:16:
f4:17:54:fe:0f:9d:97:bc:4d:c6:91:b0:da:8c:4a:29:44:dd:
51:7a:3d:4c:dd:93:b0:96:d2:56:1c:72:bf:2e:bd:60:c8:86:
dd:ae:c1:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:18:26 2025 by rpki-client