Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FuSSWNx2VG3FlQhNJZPhgc1HmD8.cer
File: FuSSWNx2VG3FlQhNJZPhgc1HmD8.cer (raw, json)
Hash identifier: HUaCGKvOtfryi3M1mAFzXe5+2CJNRdR5v/kNCVi2+Mc=
Subject key identifier: 16:E4:92:58:DC:76:54:6D:C5:95:08:4D:25:93:E1:81:CD:47:98:3F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B2C5973199B105A03F2C6338AEA7DB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/FuSSWNx2VG3FlQhNJZPhgc1HmD8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:48:03 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 28839
IP: 193.138.94.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:c5:97:31:99:b1:05:a0:3f:2c:63:38:ae:a7:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16e49258dc76546dc595084d2593e181cd47983f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:11:84:99:f6:3f:95:75:ed:78:b8:e1:c2:cc:
96:45:58:61:c0:bc:cf:72:4c:3e:30:4e:61:be:b4:
b7:8a:f9:c6:65:0c:0f:e8:90:9f:65:d9:c1:62:fd:
83:19:b8:0d:8d:9f:43:d2:33:e6:a9:dd:b4:b0:fd:
80:d7:8d:e4:3f:5f:b7:91:b9:f4:78:e7:9c:51:d5:
ac:7f:11:50:8d:d5:8c:66:7f:75:e8:4a:12:80:20:
63:f6:d3:c5:17:a2:5c:c9:07:2f:cf:44:9e:c9:dc:
da:cc:48:b8:0b:c1:b6:39:3c:58:00:d6:9b:93:75:
bb:6f:90:8e:73:30:29:f8:70:e5:c9:c2:40:d5:1a:
f7:2a:40:ba:18:d8:26:ff:ba:68:31:7c:b6:f8:2c:
8a:08:b2:75:fa:7d:3c:0d:43:ff:91:4c:b2:9b:26:
55:26:98:ce:a7:96:8f:0d:0a:42:09:60:ff:ff:8d:
fe:06:e4:3d:0e:cf:17:a0:39:ee:b4:55:25:72:6a:
9f:46:d9:24:c5:23:6d:48:7b:8f:e6:e4:6d:b4:2d:
95:5c:ac:a8:76:83:cc:21:40:05:56:6a:91:05:51:
bf:24:55:40:43:e1:29:96:0b:0f:0b:69:36:72:88:
0a:66:f2:8e:01:2e:34:ef:28:a0:27:f9:a5:ca:d0:
bc:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E4:92:58:DC:76:54:6D:C5:95:08:4D:25:93:E1:81:CD:47:98:3F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0f16f7-1455-43db-acb4-8327a952b2b8/1/FuSSWNx2VG3FlQhNJZPhgc1HmD8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.138.94.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28839
Signature Algorithm: sha256WithRSAEncryption
74:c6:47:eb:ac:8f:1a:a6:bf:57:e0:d8:c3:b3:00:46:ba:af:
9e:2c:df:f1:e6:36:a4:f7:0e:8b:1c:81:da:1e:03:d8:05:16:
eb:c8:86:30:41:45:e1:80:9b:1e:b1:28:ef:c4:cd:a8:ae:69:
92:3d:d4:4b:f0:4a:f8:8d:fb:61:68:b0:13:70:b9:34:ba:72:
a7:8b:39:d4:37:db:7c:71:f8:bb:17:11:1a:6c:be:0f:63:b5:
3f:ac:fe:fc:83:70:fe:9b:5a:1d:bc:64:35:e8:e2:c7:2b:9d:
01:64:da:c8:d1:f8:98:41:96:73:a4:d8:f0:e2:40:0f:aa:bf:
85:c5:65:d8:fc:47:82:80:f1:95:0b:7d:0f:25:d9:85:61:36:
76:33:8b:99:2e:12:f2:3f:af:5e:0b:80:49:62:28:0e:c3:17:
0b:ad:3e:3b:84:98:f5:e3:a6:a1:95:e6:a9:03:02:54:98:cb:
c9:82:50:88:a4:0a:ca:4b:94:65:71:2b:86:40:a9:ac:68:7e:
7c:2a:f2:b7:29:4d:6d:83:0e:a6:d7:bf:35:d8:c3:32:e5:8f:
84:1a:b0:41:46:e6:87:4b:e6:d4:18:fe:ac:8e:e7:03:23:a3:
a9:1a:04:e4:93:97:85:ba:e4:06:96:56:f7:ba:85:bd:98:cb:
c7:6d:b0:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:20:02 2025 by rpki-client