Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.cer
File: KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.cer (raw, json)
Hash identifier: wCh84BEtqYeXJLK0e2MWmVOlmSAecbUG7b1VhqZ9DIo=
Subject key identifier: 28:5F:EE:C8:7D:19:59:34:08:72:F8:F7:98:31:20:2F:24:C8:0C:9E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B3A728A3884369765BFDDFE98806C1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e7/c6efdb-3165-4535-8ab4-fd3cfe601245/1/KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e7/c6efdb-3165-4535-8ab4-fd3cfe601245/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:49:01 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 208910
IP: 83.171.220.0/22
IP: 2a09:3100::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:a7:28:a3:88:43:69:76:5b:fd:df:e9:88:06:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=285feec87d1959340872f8f79831202f24c80c9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:81:92:c6:c8:3a:10:06:04:58:96:73:d6:3b:
eb:e0:e7:2f:87:28:52:d4:09:11:6f:72:bc:a4:56:
d3:59:51:65:39:9a:f5:e7:0c:31:de:0e:8a:a9:bf:
28:96:6a:af:ea:a4:90:a6:3b:4e:09:75:da:03:63:
a9:5f:a9:63:e1:bf:41:24:ed:37:af:56:4d:02:20:
ae:16:a2:97:fc:61:39:03:aa:36:1d:44:2d:24:92:
0a:29:8d:e8:ad:2b:8c:f0:51:0d:4e:4f:c6:e1:87:
55:c7:e2:71:6e:29:dc:a8:8d:55:3e:ef:78:8c:6e:
d9:69:9a:9b:ae:eb:9d:67:a9:ac:c3:bd:58:e8:0e:
77:4c:59:d1:cd:5d:68:5e:aa:e1:b7:a0:c1:7b:f7:
85:e6:a6:9f:ee:56:4f:2f:88:ae:4b:ab:71:6c:13:
fb:93:d3:cf:07:78:9d:3f:64:fe:3b:d3:dc:54:b3:
bf:71:43:5d:76:7d:90:be:85:e5:45:a7:34:9a:65:
75:8e:70:d7:c0:6c:db:06:de:eb:a8:54:91:70:11:
bf:3d:91:42:12:70:52:60:ed:fd:af:33:2d:0d:bd:
7a:db:a9:80:22:08:7a:f1:8b:c4:cf:6c:8d:a4:ba:
2b:78:69:4e:95:c0:f4:c0:a1:da:3a:66:f3:44:43:
4c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:5F:EE:C8:7D:19:59:34:08:72:F8:F7:98:31:20:2F:24:C8:0C:9E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c6efdb-3165-4535-8ab4-fd3cfe601245/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c6efdb-3165-4535-8ab4-fd3cfe601245/1/KF_uyH0ZWTQIcvj3mDEgLyTIDJ4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.171.220.0/22
IPv6:
2a09:3100::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208910
Signature Algorithm: sha256WithRSAEncryption
7b:2d:ea:da:17:2d:ab:55:e4:cd:80:97:80:f4:61:87:e2:e0:
dc:fb:d0:13:5c:4d:fa:3e:be:c7:11:25:f5:4f:8a:16:d6:2e:
d7:78:a0:4e:3f:91:c6:92:23:a3:3f:7d:ec:bd:62:1d:b1:23:
7d:bd:1b:7e:75:cb:de:b3:98:87:3b:2d:03:d9:92:eb:fc:fd:
1a:81:54:d7:ca:6c:19:75:a4:28:4d:ec:60:ff:b1:14:0c:f7:
1e:de:ab:3e:e6:f0:7d:df:a2:c4:14:8d:6b:e5:70:36:b2:c1:
fd:75:35:10:41:d9:58:84:0f:15:30:c9:13:2c:8e:c7:2c:23:
60:c7:79:ef:a0:60:43:6a:80:a3:75:30:2f:1a:c0:70:64:94:
43:98:eb:ee:38:ae:42:fa:3b:d5:d7:e0:9a:3f:64:81:47:83:
d4:60:d3:e2:24:8d:c4:8f:d4:53:de:17:17:9c:07:d6:fc:c1:
04:37:10:ff:99:28:ad:5d:5b:80:29:72:65:b1:9a:07:c8:5c:
98:11:ff:fa:ae:d5:0e:c3:44:13:a4:49:4e:92:ff:19:e2:f3:
59:4c:50:35:27:53:e5:00:54:be:e8:7f:07:31:07:b8:6f:52:
2b:d0:cc:b0:e6:d2:1b:1b:a8:3f:23:a5:6c:2c:42:96:c3:3b:
80:1a:66:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:08:05 2025 by rpki-client