Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer
File: N21flFiDj88WzChwIl7l-I_5Tco.cer (raw, json)
Hash identifier: eaw8gSmjVeBxIxzNOvRfyLeVXbuy5qTES3wIEB7Hw2k=
Subject key identifier: 37:6D:5F:94:58:83:8F:CF:16:CC:28:70:22:5E:E5:F8:8F:F9:4D:CA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194282345332FE87C62990560E1A3C2D73A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 17:49:47 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 197042
IP: 91.216.148.0/24
IP: 194.164.219.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:45:33:2f:e8:7c:62:99:05:60:e1:a3:c2:d7:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 17:49:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=376d5f9458838fcf16cc2870225ee5f88ff94dca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:69:62:1c:f0:a6:5e:f1:ae:32:22:d8:e0:f1:
c5:e8:88:06:39:6f:6f:83:9f:5c:e8:35:e8:c6:0e:
5e:cf:6d:97:e1:e9:1b:5b:9e:8d:ba:fd:93:d0:0c:
86:ac:d3:c8:1c:d5:31:ee:92:6d:ca:6a:f6:ce:77:
00:e5:c3:9f:4f:33:49:26:67:4f:3a:90:fa:d6:91:
f4:db:57:7b:d8:be:22:94:bd:3d:80:ec:43:25:6a:
4e:e1:27:fa:3c:98:80:91:22:73:68:0d:13:59:05:
67:bb:10:66:1e:d5:fc:b1:67:fc:80:7e:3a:c9:30:
1f:c5:d0:9b:4f:3a:ae:d6:85:23:a0:92:5a:c8:97:
79:dd:c5:29:7f:72:37:43:14:74:1c:6e:17:69:6d:
16:0c:08:7f:76:3c:06:4c:1c:f8:82:04:aa:ea:91:
1e:cc:36:3c:45:f5:e7:6b:5f:00:01:0d:fe:93:73:
b4:e9:85:e1:77:99:5d:04:ad:8b:39:4d:54:27:1e:
9c:03:07:e1:68:e4:8f:ad:b0:75:2f:aa:f5:b0:f2:
8d:a2:1f:f7:4e:f5:31:63:96:71:30:0c:ed:20:17:
92:e5:0a:ea:bf:5d:a3:89:83:00:d9:5b:d8:46:f4:
46:d0:e1:ab:31:1c:9f:71:76:4a:b6:a6:f6:97:b4:
1a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:6D:5F:94:58:83:8F:CF:16:CC:28:70:22:5E:E5:F8:8F:F9:4D:CA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.148.0/24
194.164.219.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197042
Signature Algorithm: sha256WithRSAEncryption
26:9c:7c:34:8c:5a:e2:81:72:57:fb:93:fb:10:75:05:4d:ec:
64:e3:c3:0c:63:4d:27:c7:e0:a3:3b:71:a4:ec:fa:c9:e0:e2:
7f:48:42:2c:27:29:2d:0d:69:a2:1f:d5:28:76:f8:fb:91:fc:
17:c2:b3:9d:b3:c2:93:de:70:bf:c1:d9:33:13:73:5e:95:da:
14:38:28:41:56:0f:f6:d6:41:29:50:18:29:61:d3:a9:d6:e2:
6c:b5:89:30:b0:3e:65:b2:16:d6:cc:fc:2f:0d:3c:0e:7c:a8:
9e:43:e0:6e:2b:16:42:8b:82:ed:af:89:51:b2:71:5c:2f:a8:
2a:aa:58:e1:05:2f:af:fe:29:f3:d2:9b:e1:bb:24:e3:31:a1:
b1:0a:1c:f1:c4:4a:7c:ff:79:fe:ac:23:53:55:6c:20:16:40:
73:b6:17:0b:2b:61:2e:8f:cc:59:10:db:4d:12:b1:e6:fd:7f:
a2:09:52:9f:57:fd:05:4b:46:ae:a1:1d:7e:52:12:bf:af:af:
a2:f1:ae:35:1d:29:37:f0:6a:b6:dc:aa:26:31:54:59:72:8c:
80:39:53:e5:8c:13:4d:ad:a7:a2:a3:65:e6:b0:fd:fb:df:89:
ab:50:12:88:2e:0e:d4:86:7e:d8:c7:12:42:2c:43:c6:d4:bc:
fa:12:b1:fe
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:15:39 2025 by rpki-client