Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer
File: KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer (raw, json)
Hash identifier: FlnsgHbfttEMFLRN7k5vQBYQXjARSOHAM6omZG6fGbU=
Subject key identifier: 2A:73:4E:AB:CF:B5:B6:C2:A4:E4:83:88:ED:B3:AF:8F:50:6B:1F:AB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C4EFF61DCD38D0595ED32EBB503B0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:47:56 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 47208
IP: 195.160.160.0/23
IP: 2001:67c:19ec::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:4e:ff:61:dc:d3:8d:05:95:ed:32:eb:b5:03:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2a734eabcfb5b6c2a4e48388edb3af8f506b1fab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ff:ce:16:3e:90:4b:24:2b:39:52:3e:0b:fd:
7b:cc:5e:b5:ae:d5:d1:d2:0b:ab:92:a7:4b:86:56:
d6:e0:6b:4d:0a:2a:d9:d0:47:d0:00:dd:56:4f:25:
a9:f6:ef:b4:a0:2a:39:05:c7:4d:b6:89:e2:21:4f:
15:89:a7:ec:f6:f2:57:3d:ef:d3:33:40:f7:2e:f2:
97:0c:20:8d:4a:06:cc:06:af:68:77:a4:aa:1c:c2:
4e:4f:a4:95:01:15:36:23:31:f1:d0:06:08:08:2e:
0e:07:a6:cb:4c:46:45:33:b1:80:55:d6:4c:c8:74:
a7:7e:f1:e2:43:0d:1d:91:c4:c2:23:b7:56:b7:58:
c6:31:22:a8:3b:2d:9a:d9:7c:c4:2f:ca:66:4a:a1:
3a:83:75:87:9c:25:79:1a:02:3f:ae:e5:aa:d1:15:
a3:e5:0c:bc:fc:a4:78:88:03:90:35:a4:9c:59:0e:
73:81:29:31:b8:1c:97:82:21:99:59:de:f2:85:ec:
1a:4f:d6:ac:d2:60:70:3c:ed:4c:ae:e5:97:79:5f:
da:a9:06:7e:87:9b:80:a4:af:64:7d:14:2d:3f:19:
09:47:53:1d:c9:47:77:37:84:ed:67:a8:1d:f0:62:
2b:73:35:49:6f:b3:04:c2:d0:3a:c2:e6:af:c1:ae:
a9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:73:4E:AB:CF:B5:B6:C2:A4:E4:83:88:ED:B3:AF:8F:50:6B:1F:AB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.160.160.0/23
IPv6:
2001:67c:19ec::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47208
Signature Algorithm: sha256WithRSAEncryption
52:50:80:c5:aa:3e:8a:58:80:85:f9:cf:19:01:4a:4a:bc:39:
8f:f7:11:f6:7f:13:f6:fc:38:d7:49:08:9a:d2:ee:6a:88:09:
10:e9:87:cc:75:ec:05:4d:2c:7e:9e:9a:c6:41:59:59:fa:21:
cd:57:85:30:23:7f:0b:70:da:4a:4c:e9:11:79:c5:12:15:ed:
dc:1f:34:a5:13:77:88:46:bd:4f:88:db:91:5c:96:28:39:5b:
db:0a:f8:8c:71:cc:0e:64:2c:0f:9d:cf:2a:dd:2c:77:a5:98:
35:f1:d2:85:a0:b5:ab:80:c4:9d:11:f5:2c:fb:63:2d:e8:99:
b0:9f:08:d6:76:48:ef:65:e9:81:cd:4f:ed:1f:f4:da:af:26:
4c:e5:6d:37:99:73:50:7c:8d:6d:07:e7:0b:73:f7:23:ec:40:
2d:a6:29:29:9f:cd:bc:d9:cd:aa:4c:78:b2:3a:3c:ea:4c:56:
ed:fe:af:f9:ae:94:fe:f5:7c:81:e5:e7:b2:56:58:d1:a4:e3:
ab:6d:dc:6a:ea:95:cc:5e:d4:07:e3:36:1c:52:c9:73:bc:35:
d2:9d:ad:89:59:49:fa:c7:b1:fb:9f:c5:14:27:36:29:9c:34:
e2:91:94:d9:48:12:1a:46:94:d7:08:21:fd:16:6a:5f:d8:31:
16:6c:87:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:41:47 2025 by rpki-client