Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.cer
File: PrF4j-Ig5GQ0aS0cxDcHLXkteIg.cer (raw, json)
Hash identifier: g6g27NdkFlCK7KTu/KaxasC0ZteyoILpWX/rljAxm7o=
Subject key identifier: 3E:B1:78:8F:E2:20:E4:64:34:69:2D:1C:C4:37:07:2D:79:2D:78:88
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D7412B29B6A5CA396F66FCEC8424AD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:48:17 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 34878
AS: 58069
AS: 204680
AS: 212674
AS: 213068
IP: 129.13.0.0/16
IP: 141.3.0.0/16
IP: 141.52.0.0/16
IP: 157.180.228.0 -- 157.180.235.255
IP: 185.1.189.0/24
IP: 185.237.152.0/22
IP: 192.108.45.0 -- 192.108.47.255
IP: 192.108.68.0/24
IP: 2001:678:da0::/48
IP: 2001:678:da4::/48
IP: 2001:678:da8::/48
IP: 2001:678:dac::/48
IP: 2001:7f8:103::/48
IP: 2a00:1398::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:41:2b:29:b6:a5:ca:39:6f:66:fc:ec:84:24:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3eb1788fe220e46434692d1cc437072d792d7888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:23:f0:ec:d6:2c:50:df:a4:b5:1e:6f:ad:9e:
13:93:c2:51:44:34:35:8a:39:a3:9d:96:3a:4b:27:
59:59:56:1d:a2:4c:9c:05:46:9d:56:18:73:67:c5:
4e:cb:42:77:31:33:28:25:81:f7:c5:37:10:d3:89:
c0:16:1e:b1:f5:87:10:07:ef:ba:42:72:60:4c:25:
55:5e:12:ee:90:b9:77:88:0d:d4:cc:7b:44:a7:c4:
7b:17:be:67:33:83:ae:0e:f8:db:8d:23:0a:f9:b9:
80:b0:8d:14:d8:d8:6a:58:eb:18:1e:fb:8c:b0:e3:
23:62:35:f5:07:a5:7d:b0:07:0f:a8:87:f5:94:93:
66:aa:26:42:03:b8:65:df:6a:56:44:e4:cb:d4:b8:
87:bd:fb:68:3c:7b:4e:1c:06:f7:5a:1d:5e:be:cb:
4d:3b:69:31:15:41:db:6d:e6:e6:d0:63:dd:01:fb:
9f:be:58:a8:90:a7:17:ef:5c:39:24:ac:31:8e:eb:
8f:59:29:0a:a1:4e:bd:6d:91:ee:bf:ad:e0:55:fd:
02:9b:d7:f4:f9:09:71:78:ac:c1:f3:fd:46:35:fa:
60:fd:f8:ab:db:96:80:ab:6f:f3:ee:89:56:67:00:
90:82:10:5a:54:22:6c:58:22:c5:df:fb:2f:8e:43:
f8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B1:78:8F:E2:20:E4:64:34:69:2D:1C:C4:37:07:2D:79:2D:78:88
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
129.13.0.0/16
141.3.0.0/16
141.52.0.0/16
157.180.228.0-157.180.235.255
185.1.189.0/24
185.237.152.0/22
192.108.45.0-192.108.47.255
192.108.68.0/24
IPv6:
2001:678:da0::/48
2001:678:da4::/48
2001:678:da8::/48
2001:678:dac::/48
2001:7f8:103::/48
2a00:1398::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34878
58069
204680
212674
213068
Signature Algorithm: sha256WithRSAEncryption
94:62:fb:00:05:ff:0f:47:cb:fe:c2:e7:80:2a:3f:74:82:c7:
e9:f3:81:f7:ce:f0:c7:05:dc:da:89:85:6e:ab:ea:a9:d9:6a:
a4:4c:dc:54:00:65:cb:50:5c:7e:d6:a0:13:4b:df:f6:54:86:
d5:40:41:e0:d8:57:d3:29:e2:62:59:16:04:43:f4:e9:14:a7:
00:d8:31:6e:a3:ee:2c:89:b4:34:e3:25:64:f7:99:ff:b7:98:
32:18:e9:77:3c:ed:b2:1a:fc:f5:76:57:33:f1:10:c9:92:40:
9a:61:20:a2:8d:53:34:c2:36:48:c7:91:1a:55:52:4d:a3:d2:
ad:81:0c:ab:07:52:b9:c3:9a:b9:1e:57:a3:22:ee:0f:4f:0c:
b0:8b:f2:8c:57:02:11:38:ae:fd:c0:da:68:47:6b:5e:fc:62:
56:d4:9b:cd:c6:84:14:75:8d:f0:f8:e2:01:f8:ae:4c:88:1c:
62:98:25:15:b6:fc:c9:f0:33:06:8a:d1:d2:80:46:96:d5:6d:
61:47:5b:a8:82:8b:02:25:4c:b7:f4:c9:6a:89:03:94:ac:28:
8f:52:3d:a0:09:7e:0a:fc:0a:8a:55:11:6b:26:00:94:e0:7c:
27:8c:f7:46:07:b4:24:0b:38:2a:9f:cd:37:48:25:d5:20:05:
9a:ce:3c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:32:18 2025 by rpki-client