Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Lt7Joglt7BA7ri18N5bg1HCFwgI.cer
File: Lt7Joglt7BA7ri18N5bg1HCFwgI.cer (raw, json)
Hash identifier: IRta8drC5NwAPrxz93JdKbwk6N6xME4GfoWzskfHG7o=
Subject key identifier: 2E:DE:C9:A2:09:6D:EC:10:3B:AE:2D:7C:37:96:E0:D4:70:85:C2:02
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942144698ABD7131D518F8200FB82A25F0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:39 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 29687
IP: 77.71.0.0/17
IP: 185.186.136.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:69:8a:bd:71:31:d5:18:f8:20:0f:b8:2a:25:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2edec9a2096dec103bae2d7c3796e0d47085c202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4c:00:23:59:63:1c:3d:65:9b:91:93:b6:a2:
79:85:25:2d:c5:1f:40:65:ce:6f:96:3a:b7:02:fe:
89:b5:a7:3b:c7:3c:ed:10:32:38:26:84:e8:bf:4b:
ac:8f:db:88:8b:21:7d:af:6f:e0:11:31:5d:95:ce:
91:f6:fd:32:6f:29:bf:25:b2:04:f0:f9:3a:28:fb:
37:80:86:64:e8:4e:99:f1:7c:0f:9f:66:b9:c0:85:
76:d2:28:a0:30:59:e6:21:08:e5:4f:3d:b9:3a:54:
29:4e:76:3a:ce:3e:4d:d4:e4:93:27:46:f1:2e:8e:
ad:4e:b9:01:c3:96:d5:6b:95:94:27:f8:7b:20:6a:
78:6f:33:71:96:c2:55:de:5e:c1:a8:28:52:f0:f0:
ef:84:fd:24:11:f5:4d:31:d7:5a:1c:31:b8:bf:4f:
58:17:f8:ca:8c:80:13:e8:b4:81:24:0f:29:f0:1f:
4e:50:c4:5d:6e:fd:d5:ff:e6:05:26:61:f2:3e:e6:
9b:9b:36:83:23:39:58:ee:43:17:06:70:6e:c9:35:
08:d8:45:b2:24:21:7b:86:4b:14:1b:27:58:0f:78:
d7:cc:c1:a6:3d:23:8e:57:d6:40:be:e8:a4:70:19:
55:80:1d:a1:f5:f2:b8:53:74:57:01:d0:12:6c:b9:
9e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:DE:C9:A2:09:6D:EC:10:3B:AE:2D:7C:37:96:E0:D4:70:85:C2:02
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/df0d37-4f65-439d-a531-057d7af0aef4/1/Lt7Joglt7BA7ri18N5bg1HCFwgI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.71.0.0/17
185.186.136.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29687
Signature Algorithm: sha256WithRSAEncryption
78:55:f3:62:c1:fb:79:d2:22:96:ef:f6:ad:b2:97:00:31:35:
95:b8:b9:75:7d:4f:96:26:bb:59:88:05:67:dd:ed:cf:d3:39:
ed:8f:9e:2f:ff:38:68:be:07:09:b3:1e:f8:a0:07:ae:f8:d8:
e1:f0:60:60:8b:3e:96:71:1f:c3:b4:79:34:30:d4:41:27:2c:
3d:57:97:66:c0:25:9e:c6:7d:73:75:a9:07:b5:02:c6:79:98:
f0:1c:da:81:fe:2e:69:92:70:73:38:35:61:df:19:44:e8:ed:
3d:85:99:88:17:46:57:e0:9f:8b:32:e9:82:be:0f:88:38:8b:
7e:3c:36:1d:83:bf:7f:8c:41:65:df:9a:5a:4e:95:f2:26:30:
16:82:23:3b:ea:bd:b4:35:19:80:cc:0a:c0:dd:64:83:88:f3:
0b:d7:59:31:1a:87:0d:3f:70:82:f5:7e:6c:f9:4a:1c:88:7a:
9f:22:e5:18:e9:c8:a9:2a:eb:70:2d:38:b4:e4:e1:8d:d7:d7:
04:7c:17:59:c8:8b:41:4b:4e:56:d2:af:99:71:e6:79:b1:6c:
ed:03:93:f8:2a:99:0f:de:b8:a9:5b:1f:3e:b5:1e:3c:5c:4c:
ed:5e:d1:ba:bc:b2:9d:78:7f:90:b8:31:99:fa:e1:34:d8:80:
a4:96:bf:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:34:59 2025 by rpki-client