Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.cer
File: FXHmaEMGt0gVbCrj9CC7Nmsu_O4.cer (raw, json)
Hash identifier: ZhGSETaNexmjppUO6bducshTcK78uBXsA7p9QETYHNE=
Subject key identifier: 15:71:E6:68:43:06:B7:48:15:6C:2A:E3:F4:20:BB:36:6B:2E:FC:EE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D95316517090A56ECF345C261F61B6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:24 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 207646
IP: 194.31.224.0/24
IP: 194.31.226.0/24
IP: 194.31.239.0/24
IP: 194.31.247.0/24
IP: 2a0f:aa40::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:53:16:51:70:90:a5:6e:cf:34:5c:26:1f:61:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1571e6684306b748156c2ae3f420bb366b2efcee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:57:95:04:cf:db:7a:88:c0:b5:d2:68:30:d9:
c6:0f:20:bc:93:5b:cb:96:60:0e:ec:f0:20:2c:ed:
d5:65:f2:34:63:83:d3:7a:14:29:1a:5c:68:70:fb:
8d:6d:8a:b5:a7:4f:2c:0d:8e:82:26:88:8d:13:fc:
95:63:16:f2:bd:80:9c:ca:45:98:2f:d1:20:1d:f5:
02:b9:66:99:48:a1:b1:fc:24:7b:17:72:8b:5f:d8:
bc:8d:25:9b:c7:72:64:7f:b5:c8:48:38:73:62:2f:
24:9a:30:84:51:bc:94:68:49:63:cf:9b:09:48:09:
58:b7:2b:0a:43:37:9d:42:32:12:af:32:5c:09:00:
1c:ae:66:6b:4d:d6:d4:cb:a3:4b:3a:fa:90:92:e1:
da:28:63:bd:3a:78:94:7c:ac:ed:be:46:81:25:cb:
49:96:27:2b:79:ab:ca:24:f9:3a:70:a0:f2:a8:91:
04:2a:20:ad:88:b3:e8:f1:d7:5e:bc:f1:dd:7f:67:
16:09:98:6c:18:6c:56:90:05:33:9b:d2:8e:4b:47:
82:90:70:e5:49:c0:7c:70:c8:a3:a2:27:f6:ce:54:
23:ad:44:45:4f:34:8d:3d:d2:3f:f1:49:20:c7:5a:
7f:19:23:b4:8e:88:54:a9:56:17:49:d6:67:44:a5:
98:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:71:E6:68:43:06:B7:48:15:6C:2A:E3:F4:20:BB:36:6B:2E:FC:EE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/506f2a-7246-4190-96ff-738c0bf8ea98/1/FXHmaEMGt0gVbCrj9CC7Nmsu_O4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.224.0/24
194.31.226.0/24
194.31.239.0/24
194.31.247.0/24
IPv6:
2a0f:aa40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207646
Signature Algorithm: sha256WithRSAEncryption
af:4e:c2:d1:ed:6c:fd:e0:2c:a5:a4:c2:fb:61:b5:7a:85:0d:
82:36:28:03:4f:64:a6:e1:59:2a:e1:0f:22:f6:22:df:ea:08:
eb:4e:e3:5e:e8:2e:4e:a7:96:45:c7:25:fb:2a:22:e8:93:b6:
8d:51:fa:52:b8:0a:a5:a2:34:73:dd:dc:ec:90:8d:6f:39:3c:
ed:d4:bf:5f:ce:6b:cc:1e:32:85:55:c1:ef:28:2c:e8:de:70:
16:b5:90:51:22:9e:b6:2d:c7:93:e4:4f:4f:28:63:7a:e3:f1:
db:64:02:e8:37:f7:50:4e:b0:8c:cf:a0:f3:3d:98:3b:df:58:
e4:8b:f1:72:ec:ad:b4:8c:d7:e2:f2:41:e7:0d:ed:03:c5:c2:
d5:cb:24:b4:fd:b7:b6:ed:69:05:57:cd:9e:49:0c:3c:87:4b:
b3:27:cd:39:6e:af:55:74:4b:7d:a7:db:89:96:9a:d4:c7:db:
7f:f5:df:eb:12:52:07:94:2c:9e:e7:bf:2b:45:c2:68:96:dc:
c7:e7:9f:f7:9e:74:a0:ee:31:78:3c:a3:60:62:70:c6:ee:a3:
fe:ae:19:40:eb:18:a2:3b:46:6b:6b:fd:69:ec:89:03:3a:e7:
8d:08:91:d2:0e:ef:36:75:cd:65:5f:1a:37:f8:c7:b7:7e:9d:
1c:58:02:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:53:25 2025 by rpki-client