Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/S9H1DfJj_lCfxd6cWkc6KOOBJjk.cer
File: S9H1DfJj_lCfxd6cWkc6KOOBJjk.cer (raw, json)
Hash identifier: HXq09idtdC1jP9b3TLBkJBNOJe+1ilh312iEekQWfoc=
Subject key identifier: 4B:D1:F5:0D:F2:63:FE:50:9F:C5:DE:9C:5A:47:3A:28:E3:81:26:39
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C113F8B6ACCBFB40EEEE59A434CD3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:47:40 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 212597
IP: 98.158.238.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:11:3f:8b:6a:cc:bf:b4:0e:ee:e5:9a:43:4c:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4bd1f50df263fe509fc5de9c5a473a28e3812639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ed:18:ca:33:c0:0a:60:66:5a:7e:cb:95:30:
48:41:83:7c:5d:b7:5f:fd:99:21:12:a8:62:31:ee:
b4:be:62:22:d2:b1:f5:be:8d:df:f3:20:57:27:9b:
a6:34:ba:b0:2e:f8:2d:f5:71:3c:e9:70:b1:fc:b7:
72:65:87:03:40:d1:06:99:78:fb:5e:d8:89:35:43:
41:d2:54:72:63:1f:c1:23:3c:0c:cc:77:1f:14:b1:
13:e4:94:04:86:10:d3:00:c1:fd:84:88:1b:e1:05:
12:ce:07:03:73:af:39:03:93:32:b4:73:18:89:09:
66:54:6d:9b:76:99:67:bc:26:8a:ca:5c:5f:f9:1c:
27:8f:4b:7f:18:09:05:b4:b5:76:60:a4:ed:16:54:
6a:6b:98:df:71:55:d6:d3:72:7a:51:2f:db:20:94:
a3:30:c1:96:e4:65:f8:5a:33:53:00:0a:ee:01:84:
d8:e9:1d:f2:ed:e0:a7:83:2d:c6:ca:5c:52:a8:b9:
00:08:21:ec:ab:67:22:44:cc:8e:18:9c:5c:2f:f5:
8d:bc:0d:2b:7a:26:b6:6b:98:3b:75:47:4b:15:77:
da:b4:fc:d2:4e:a7:d5:54:8c:01:7b:2a:3b:12:2c:
f3:f9:df:cc:de:12:c6:02:9f:76:fb:b1:77:fb:b1:
e7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:D1:F5:0D:F2:63:FE:50:9F:C5:DE:9C:5A:47:3A:28:E3:81:26:39
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7d20a2-b881-461c-bbf5-2b6809339702/1/S9H1DfJj_lCfxd6cWkc6KOOBJjk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
98.158.238.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212597
Signature Algorithm: sha256WithRSAEncryption
0f:b6:ab:c4:62:03:ba:80:cb:3e:48:25:fa:4f:8f:4f:ed:cb:
59:30:8c:e7:56:35:dd:8e:ef:91:6b:bb:4c:d4:9f:04:dc:68:
f7:15:fd:0b:e1:2d:6e:60:88:55:ae:f0:1f:ee:64:5b:cb:75:
85:e9:a2:25:95:20:85:45:be:ff:40:7e:47:44:e7:ec:2e:88:
01:cd:7d:8d:9e:89:1e:00:7a:81:83:ae:c1:cc:5c:22:1a:ae:
43:00:ac:9a:6d:93:a9:db:b4:78:29:e6:2f:b0:c5:fc:62:6c:
37:9f:82:f8:40:b4:b5:cb:53:5f:30:de:ed:36:24:66:96:71:
02:e1:6b:10:97:b0:92:fa:cb:24:f3:67:42:4e:7d:73:b6:f8:
b7:a8:f8:bf:27:d1:03:e5:96:70:cb:77:a3:a4:e9:4b:45:5e:
af:95:0f:bf:cb:d9:e7:8d:31:0e:3c:73:31:d3:da:44:0d:b4:
af:83:45:22:67:32:1a:f9:08:f2:54:c7:3c:ee:0f:86:82:e6:
20:41:e4:05:b9:1e:6e:93:e1:bc:de:80:7c:2a:bc:68:2f:0d:
e6:b7:1f:6d:55:76:83:fa:6a:14:a4:88:70:87:f4:87:60:ed:
12:6a:60:5c:a0:81:d5:4e:fc:83:92:80:27:ee:c5:62:86:ef:
f9:5c:c8:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:21:23 2025 by rpki-client