Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/P4_xyWZv4ZXySqH-jDRdecSOe8A.cer
File: P4_xyWZv4ZXySqH-jDRdecSOe8A.cer (raw, json)
Hash identifier: GVpNroi2PYqw8aLxA/SqeOa50KIHkfCDTW2K60P0A9E=
Subject key identifier: 3F:8F:F1:C9:66:6F:E1:95:F2:4A:A1:FE:8C:34:5D:79:C4:8E:7B:C0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194206869CA10B1377382020238649A8857
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:48:21 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 57312
IP: 91.231.112.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:69:ca:10:b1:37:73:82:02:02:38:64:9a:88:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f8ff1c9666fe195f24aa1fe8c345d79c48e7bc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7c:c6:3a:1d:92:5d:24:a3:6f:6a:40:5e:16:
69:4b:07:19:63:a2:0f:d3:e7:8e:63:74:0d:77:58:
27:02:01:38:99:81:bc:e2:0a:f3:b2:78:5b:7d:fa:
54:84:ff:55:4f:31:6b:c1:0a:ef:a4:a1:4d:30:5c:
da:15:24:52:5d:5b:79:64:97:66:1d:5c:c9:4d:4d:
9f:e5:f3:08:9b:62:f6:92:cc:d2:10:25:60:1d:7f:
4b:2a:3e:5b:47:a8:08:91:eb:6c:76:f5:f4:b4:76:
df:b2:7b:73:14:ac:d1:15:f3:f9:69:49:f9:fd:44:
e8:a5:0f:2e:e2:a5:2e:75:9f:77:82:4d:d0:77:75:
4d:06:dd:d0:9b:a0:61:63:1a:0c:27:a2:5c:95:20:
fe:0c:26:7d:2a:f6:97:49:55:74:59:b4:dc:a9:47:
2e:72:53:38:b2:70:ea:50:d6:c0:96:7a:7a:af:07:
62:87:0e:30:02:e1:6f:58:aa:0e:56:8b:3d:06:b8:
6e:97:cb:db:f3:3a:49:a0:f4:f5:5f:46:65:62:3a:
f6:ae:66:eb:3e:f6:c2:83:6f:dc:25:98:d8:dd:8d:
3d:55:af:8f:09:80:49:ce:58:f3:93:6c:8b:e1:95:
18:50:93:92:92:dd:7d:3b:06:40:b6:77:e7:a7:4a:
32:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:8F:F1:C9:66:6F:E1:95:F2:4A:A1:FE:8C:34:5D:79:C4:8E:7B:C0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/572ebf-18bb-4c38-a994-fbd361cb8193/1/P4_xyWZv4ZXySqH-jDRdecSOe8A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.112.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57312
Signature Algorithm: sha256WithRSAEncryption
81:6f:d9:44:99:e1:79:31:c9:23:99:2c:3f:6a:59:f0:9f:79:
fc:4d:f5:16:fc:c1:05:e7:24:6c:1c:30:6a:f4:2b:38:07:3a:
04:d7:d3:9b:c4:0d:ac:40:c0:8f:36:ff:66:51:f4:af:26:b6:
84:3f:c1:b1:cb:21:19:65:4a:c5:d2:4f:e1:ad:eb:4b:c1:07:
dd:41:9c:02:95:ac:29:ba:c7:07:4a:b8:4b:7a:de:3b:99:4d:
6f:ff:35:a0:e0:a3:e4:a5:bf:31:7a:33:ce:ef:37:35:28:8a:
47:ac:34:b6:fd:69:02:fe:ee:01:59:d0:05:7c:e0:db:3d:ad:
be:9c:dc:aa:71:24:19:b7:b1:b0:c0:90:24:72:b2:36:b9:a1:
b3:69:93:db:f9:c9:7f:c2:f1:a6:7b:a8:31:71:08:3e:fd:84:
00:3f:0c:b5:ef:63:2e:9f:0e:45:a6:01:fa:01:0e:9c:34:e4:
bf:d9:a0:be:4b:dd:75:5a:ca:d8:71:f2:d8:fa:a7:7c:d6:16:
dc:a5:6c:31:f7:18:a9:66:0e:5f:0e:9f:74:28:75:ce:72:66:
3c:d8:23:2f:dd:85:fa:9c:36:34:14:6a:0c:06:fa:cb:46:77:
c5:6b:45:94:e8:f1:08:0f:72:a0:2f:e8:ae:4c:cc:27:c8:7d:
45:ce:cb:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:37:26 2025 by rpki-client