Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QrTHmiKj_ph-8xkIzUT_gemxrPQ.cer
File: QrTHmiKj_ph-8xkIzUT_gemxrPQ.cer (raw, json)
Hash identifier: Yukimr+wlVVdVFT0Jqa8k8vbhZovaD3HNQAUNO84hnk=
Subject key identifier: 42:B4:C7:9A:22:A3:FE:98:7E:F3:19:08:CD:44:FF:81:E9:B1:AC:F4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942067CCDE24BACA98152BBA239A5F381B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/QrTHmiKj_ph-8xkIzUT_gemxrPQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:47:41 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 48293
IP: 91.194.246.0/23
IP: 91.212.217.0/24
IP: 94.228.192.0/20
IP: 185.108.20.0/22
IP: 2a06:4180::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:cc:de:24:ba:ca:98:15:2b:ba:23:9a:5f:38:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=42b4c79a22a3fe987ef31908cd44ff81e9b1acf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b6:28:92:ed:c7:71:54:3e:ef:44:5d:30:a9:
ed:93:3f:c6:3e:f0:2b:97:46:65:51:7c:a1:59:17:
e6:fc:b5:71:5d:d6:86:af:cc:4d:11:8d:93:73:b6:
6e:b0:5c:35:34:a4:61:7b:80:27:15:d9:05:cb:da:
f2:1c:7a:84:20:15:18:1f:f9:28:23:92:e3:40:5b:
9b:57:62:b1:fe:2a:57:c6:1f:28:f0:6f:fd:17:97:
45:e1:54:cc:7b:b3:2a:bd:69:b6:dd:f2:35:8f:48:
60:62:8a:bc:60:75:54:75:36:a0:3a:e6:29:ef:7d:
e1:39:81:2f:18:10:29:e9:c4:31:c1:79:6c:2f:99:
79:20:2a:6f:a2:18:78:7e:b6:47:fc:ed:c5:95:b9:
55:9f:d6:8a:e5:1b:e9:42:32:36:3a:c7:32:a6:2f:
81:b1:e8:4c:97:5a:ee:eb:95:3a:bb:e7:01:35:83:
ba:48:a6:cf:4f:c0:da:b4:bc:18:b4:11:60:b9:92:
af:bb:a3:d3:cd:a8:4e:aa:f2:d4:3f:62:db:9a:0e:
c9:eb:56:3c:9e:b8:71:2d:c6:ff:05:6a:71:35:7f:
cb:97:fe:5d:5f:9d:5b:74:8d:df:71:80:54:e1:bc:
8d:e2:0c:b1:0f:5e:45:71:4a:a6:b6:e2:1b:bf:77:
a0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B4:C7:9A:22:A3:FE:98:7E:F3:19:08:CD:44:FF:81:E9:B1:AC:F4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/4b911c-3d4d-42d5-9234-f288137cb500/1/QrTHmiKj_ph-8xkIzUT_gemxrPQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.246.0/23
91.212.217.0/24
94.228.192.0/20
185.108.20.0/22
IPv6:
2a06:4180::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48293
Signature Algorithm: sha256WithRSAEncryption
86:1b:08:c6:1b:fa:d4:1e:e5:9d:d2:28:00:7e:00:34:3b:14:
07:46:be:c0:96:82:96:d0:58:47:de:5a:a1:30:9b:51:2a:3f:
7f:94:52:39:26:a9:fc:d2:06:27:63:52:91:0a:b7:d6:f2:d9:
20:e6:5c:c8:dd:3c:ca:20:fc:a0:dc:ab:a0:b8:4b:d1:c6:04:
fa:4d:8c:30:55:b4:89:b7:b1:3c:3b:fe:5d:10:33:ec:e5:cb:
cc:ee:88:b6:93:7b:57:88:47:95:9d:ec:df:8b:a8:76:9e:98:
a5:9a:42:1e:a1:2a:9c:bb:83:57:29:a0:b1:8c:bb:45:95:80:
f6:d0:f9:8f:9e:1d:de:c2:4f:dc:ad:52:44:86:cf:7f:9b:35:
e6:97:22:8f:f7:35:e9:89:cb:b0:99:50:c9:98:08:43:05:fc:
a3:7a:99:b4:b5:45:82:78:4c:13:0a:e0:41:2d:13:5e:07:3a:
dc:d5:a5:19:50:19:e3:4d:b0:4d:58:67:d5:14:a9:3b:b6:d7:
5f:91:ee:11:68:47:15:6f:85:32:f2:4c:3f:7c:92:39:71:d9:
d3:96:52:4c:bc:dd:53:64:bb:4b:b0:0d:db:ba:c6:f5:3d:57:
9e:1f:9b:34:0a:66:c3:46:96:db:c0:1e:23:df:25:63:4b:31:
e6:3a:5c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:41:52 2025 by rpki-client