Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NgHDzOanHKshpLut8KuE3ePyurI.cer
File: NgHDzOanHKshpLut8KuE3ePyurI.cer (raw, json)
Hash identifier: jtmgo/+MJVzxOaQEBtuEkXWHJD2QiGmac/IlWCRdEYc=
Subject key identifier: 36:01:C3:CC:E6:A7:1C:AB:21:A4:BB:AD:F0:AB:84:DD:E3:F2:BA:B2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194274803A38D1A7F785DEA74804EE4FE73
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f1/0f0a01-0cc4-4efc-9dd5-801ef38dea9c/1/NgHDzOanHKshpLut8KuE3ePyurI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f1/0f0a01-0cc4-4efc-9dd5-801ef38dea9c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:50:18 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 52143
IP: 188.94.0.0/22
IP: 2a02:f280::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:03:a3:8d:1a:7f:78:5d:ea:74:80:4e:e4:fe:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:50:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3601c3cce6a71cab21a4bbadf0ab84dde3f2bab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:30:ca:b1:3d:b0:87:47:4e:8d:31:b8:97:98:
e6:0f:6f:b3:3e:41:fb:60:58:32:ff:f7:9f:6b:60:
10:5a:17:6a:7b:31:ae:b2:55:a3:57:a1:66:d6:3e:
db:a7:fa:5d:0d:b1:49:54:09:6c:6c:f1:23:02:42:
29:1e:8f:76:78:dc:02:80:6d:d5:14:db:10:26:26:
85:43:0b:bb:bd:51:97:ff:82:91:89:04:7e:a7:d0:
af:6d:b0:3b:cf:72:24:dc:02:66:6e:9a:03:04:73:
b1:fb:38:c2:9a:37:ba:c0:a1:06:f7:74:58:89:41:
80:bc:6f:91:1f:1f:44:6e:f5:a9:30:87:ac:a3:e1:
7f:6d:0a:f4:c3:5a:bb:47:69:a5:f9:9c:5d:e4:52:
8d:f4:bd:65:84:4e:16:b9:fd:2e:6d:39:76:27:78:
c0:67:5d:5f:fe:96:ee:ef:b7:70:d2:6a:49:31:44:
9a:45:b6:b6:61:48:3a:8c:84:c8:b1:46:cb:0c:2d:
87:b0:df:00:aa:1f:c8:00:19:3a:c0:b6:b1:3d:a4:
b3:af:43:aa:81:81:32:08:2c:dc:78:26:65:c8:b9:
a7:df:77:95:cf:96:78:c1:ed:19:a2:4b:7b:8e:49:
58:7b:5e:2f:92:47:2d:ea:18:25:0d:01:b8:d2:f6:
55:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:01:C3:CC:E6:A7:1C:AB:21:A4:BB:AD:F0:AB:84:DD:E3:F2:BA:B2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0f0a01-0cc4-4efc-9dd5-801ef38dea9c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/0f0a01-0cc4-4efc-9dd5-801ef38dea9c/1/NgHDzOanHKshpLut8KuE3ePyurI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.94.0.0/22
IPv6:
2a02:f280::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
52143
Signature Algorithm: sha256WithRSAEncryption
2d:e5:ac:a2:d9:4c:14:0e:1a:e5:84:76:19:40:8c:0a:80:7d:
74:64:61:0d:89:45:6a:f1:17:52:a5:13:27:a8:a3:0e:93:86:
4c:a8:71:22:e7:7b:ee:19:ca:c7:a6:86:43:9d:07:83:95:bb:
ad:ad:f2:5b:20:93:76:67:f4:a9:04:2f:a3:75:3e:a2:1b:96:
b1:12:31:6d:7a:cf:77:74:75:2e:26:9d:03:3e:3d:78:8f:8d:
7e:87:45:18:a5:2a:f0:18:c6:a9:6f:37:77:a9:02:5e:0a:4a:
a0:bc:03:1c:ae:e5:1a:61:48:b2:88:b4:d6:a6:06:f3:10:73:
c7:cf:be:fd:1f:c4:a9:c5:17:d3:a1:f1:1a:50:ba:f8:c6:82:
64:d2:9c:a3:ce:ec:64:01:3a:5f:a6:18:34:63:7e:1e:63:14:
93:09:d5:39:5e:39:2d:5d:f4:3e:7b:02:64:60:b4:bd:78:08:
eb:93:13:71:45:f2:94:8b:c7:d4:3b:85:76:1d:21:5a:7b:50:
54:cd:92:a1:31:b4:5c:87:54:b3:84:21:43:83:09:01:2b:eb:
61:17:3e:bb:42:a5:9f:5b:34:e2:89:a6:4e:80:a7:35:57:a2:
23:c5:fe:29:35:81:90:1b:08:e5:78:0b:4d:fe:32:1b:25:6d:
06:85:04:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:22:11 2025 by rpki-client