Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KEEmKs1iyQ5oCBpvd3N13yw3E8I.cer
File: KEEmKs1iyQ5oCBpvd3N13yw3E8I.cer (raw, json)
Hash identifier: XoqRhikoqkNm7Lrufli0PgdXzE+kQGudUiGrNYskdws=
Subject key identifier: 28:41:26:2A:CD:62:C9:0E:68:08:1A:6F:77:73:75:DF:2C:37:13:C2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D959F5FA301B663B8273665DDC1B29
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:26 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 39834
AS: 196792
IP: 79.173.0.0/18
IP: 91.217.98.0/23
IP: 2a02:f740::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:59:f5:fa:30:1b:66:3b:82:73:66:5d:dc:1b:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2841262acd62c90e68081a6f777375df2c3713c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:35:63:4c:35:d9:94:fb:7c:75:1d:5e:08:3a:
5d:72:62:9c:a3:2e:fc:15:a8:14:c8:06:0e:07:99:
dc:1a:0e:76:68:0c:3b:59:f3:77:22:21:d8:9d:14:
1d:a6:d4:c0:26:ca:59:c3:72:26:47:7c:b4:81:d2:
4a:78:fb:5b:61:26:e8:bf:2b:af:fa:11:59:bf:a4:
7a:d9:a3:38:0f:39:07:ab:bc:f8:2d:a5:d0:41:0f:
bc:f5:19:6b:5a:af:3d:32:04:da:a1:fe:70:d0:c1:
5c:fc:2f:2f:e0:a7:ec:f5:7a:68:7d:ae:ee:b2:98:
31:7b:de:f3:46:bf:9b:dc:1d:97:86:38:cf:76:80:
49:b9:08:7d:9a:4a:19:ff:69:c1:53:78:21:87:8a:
ca:9d:fa:15:f7:b2:cd:db:82:c9:f6:8b:4f:17:c2:
7b:46:88:ab:7d:db:08:c5:c8:00:ab:b7:d3:d0:5a:
8a:a6:00:04:e8:28:22:58:e0:52:ac:48:10:90:20:
9a:00:79:4f:37:09:86:7a:14:8f:e8:08:30:34:34:
e4:3c:03:3c:78:87:ad:7e:af:df:a2:09:aa:25:4a:
5d:da:9e:52:14:b8:e4:55:d8:fe:92:c3:34:d3:43:
71:8b:e5:d1:8b:86:58:1a:bc:d5:d9:f8:56:38:b6:
e8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:41:26:2A:CD:62:C9:0E:68:08:1A:6F:77:73:75:DF:2C:37:13:C2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.173.0.0/18
91.217.98.0/23
IPv6:
2a02:f740::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39834
196792
Signature Algorithm: sha256WithRSAEncryption
7e:02:fc:8e:f8:54:fa:a4:bc:31:59:25:14:52:70:2e:e2:bf:
16:29:6a:a4:c7:d6:b8:cd:2a:97:62:ff:6c:7f:fe:bb:59:56:
1d:b3:df:92:61:54:56:e5:bd:7c:b2:97:62:66:c9:2b:eb:87:
cb:1a:47:d1:86:fb:cd:93:db:50:32:8c:fa:2d:6c:68:dd:dc:
b7:66:e4:9e:42:47:a5:f7:4b:ad:9b:4f:fa:10:55:4f:0c:a4:
ab:73:86:94:ff:06:ed:cc:3c:6c:d9:2e:f6:a8:ae:ed:ff:6a:
56:b8:ef:58:c4:98:da:fd:87:46:f2:a6:de:f1:bb:67:76:44:
c4:32:d0:f3:1f:7b:23:a3:d4:ca:c7:8e:5a:22:86:b5:d6:c3:
6d:03:a1:48:15:37:6a:96:73:70:10:9e:ed:7a:eb:53:55:f5:
79:80:f7:07:13:ec:26:98:c4:18:92:39:fc:59:de:13:2d:34:
fa:9b:2b:2d:39:f4:98:0f:30:94:5a:f4:a8:38:a4:31:d5:e7:
6f:f6:c9:59:d0:1f:26:57:33:7f:26:cf:e2:e7:55:9f:da:c2:
ff:fb:39:06:9f:de:3c:75:f8:8b:f2:85:05:a4:ca:35:59:da:
85:be:e0:1d:99:95:1c:4b:f7:bb:ea:ce:56:39:6b:b8:5c:85:
f2:7b:53:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:38:49 2025 by rpki-client