
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TVP4paBndE6P43yXwcxLiH7axyA.cer
File: TVP4paBndE6P43yXwcxLiH7axyA.cer (raw, json)
Hash identifier: x9IjZxnDNTmwlMmRx7+QY+RAfqXU4bVMJ3gcAN7rBWg=
Subject key identifier: 4D:53:F8:A5:A0:67:74:4E:8F:E3:7C:97:C1:CC:4B:88:7E:DA:C7:20
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427483B52AF54455A33D543809BCD128F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:50:32 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 51181
IP: 91.216.164.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:3b:52:af:54:45:5a:33:d5:43:80:9b:cd:12:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:50:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4d53f8a5a067744e8fe37c97c1cc4b887edac720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5e:3a:59:ae:b2:2c:20:96:58:2e:3b:05:46:
a6:69:09:2e:f8:bf:17:cf:29:7e:92:34:6b:74:16:
f2:6b:d3:a6:ac:fc:ca:5a:82:07:b8:05:cb:2a:e7:
4c:23:e0:a8:43:86:f7:4d:c1:5d:32:c0:9e:29:11:
28:c7:7d:e0:88:39:87:dd:b3:03:a7:6b:cc:af:1b:
a6:e2:6c:dc:c9:7b:49:1e:01:d9:7e:7b:74:9b:6f:
f1:39:1d:a3:de:38:08:9d:4e:2b:fd:4e:79:d3:ca:
72:98:2d:74:62:14:17:61:ec:bf:a1:a4:61:bf:b1:
97:89:0a:f0:3b:4e:66:f7:c1:cf:da:41:ab:58:1a:
02:00:47:84:99:e3:c9:6f:97:21:eb:e3:83:6e:4d:
58:e1:11:70:ee:97:33:35:f4:d6:48:d3:f7:15:02:
9c:d6:45:7a:e4:0c:e0:77:16:e7:11:d9:69:31:bc:
e9:80:c0:64:8e:2f:ae:da:6d:17:ed:b9:28:64:3f:
c3:00:fa:82:f9:37:ea:d8:3e:ac:99:f5:9c:70:ad:
11:f8:1d:fa:37:ca:50:30:64:2f:75:91:5b:f1:37:
f4:87:19:30:3c:df:9d:1b:0e:cb:1f:7b:f0:ee:9c:
a7:b8:91:da:1b:1f:0c:33:d7:45:a4:02:95:9b:7a:
fa:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:53:F8:A5:A0:67:74:4E:8F:E3:7C:97:C1:CC:4B:88:7E:DA:C7:20
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.164.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51181
Signature Algorithm: sha256WithRSAEncryption
39:41:0b:29:4f:2a:6f:ea:c6:06:a6:3a:83:7b:a9:0a:e6:5c:
6a:88:ee:d7:74:5e:e9:79:2a:6e:b1:6c:83:a7:ff:1f:04:da:
d1:1e:db:81:1d:2c:fc:db:41:a8:e4:72:32:2b:78:73:ca:5e:
0d:0f:1b:d1:fc:37:4a:bd:86:98:21:8c:d9:ca:20:43:19:b9:
2b:f5:05:93:f6:ac:4c:b6:e0:aa:e7:cd:cc:98:2a:6a:3b:db:
70:38:8c:99:e8:b5:c8:d4:99:b4:bc:8f:d0:a5:b4:99:94:18:
29:09:48:16:4e:4d:8f:86:09:57:96:b9:2f:11:ad:23:e8:66:
5d:20:a3:18:5f:8c:83:48:59:2c:29:5b:0b:7e:93:c0:cf:93:
b4:d8:ef:cf:e4:b9:d7:bc:c7:16:3b:5b:96:f6:cd:36:b8:71:
b9:3f:04:92:62:88:d4:81:94:68:f9:59:70:51:9e:67:e3:69:
ed:83:19:79:ab:44:b9:c4:8a:e5:54:0a:c7:f3:b1:83:f3:bd:
f2:76:cf:6e:73:64:b5:30:e3:c0:49:da:07:1e:33:3a:60:2d:
ea:cc:52:d1:1f:15:cf:b1:7a:67:b1:10:f5:07:dc:0e:9e:62:
cb:33:ae:cb:02:a9:ee:45:6f:a2:38:49:ca:0e:c4:a5:e4:22:
ba:1c:1a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:24:40 2025 by rpki-client