
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VGLTx682xAGqlwlNPyOJ14ddFOw.cer
File: VGLTx682xAGqlwlNPyOJ14ddFOw.cer (raw, json)
Hash identifier: UTh7DUN8rMdi4erpBplNimHrgMEu8EHabRmWKibZDrk=
Subject key identifier: 54:62:D3:C7:AF:36:C4:01:AA:97:09:4D:3F:23:89:D7:87:5D:14:EC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B372B64850672AA53DAF06DC4931BB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/49/13c02e-cca0-4dcd-9125-8b315229757d/1/VGLTx682xAGqlwlNPyOJ14ddFOw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/49/13c02e-cca0-4dcd-9125-8b315229757d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:48:47 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 48003
IP: 91.208.239.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:72:b6:48:50:67:2a:a5:3d:af:06:dc:49:31:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5462d3c7af36c401aa97094d3f2389d7875d14ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:62:33:47:3a:3f:b7:13:d2:88:9d:b3:72:76:
5a:f1:aa:05:51:d0:41:f1:fe:54:7f:49:47:4e:11:
76:90:a9:79:03:63:00:34:31:71:68:cb:67:6c:f1:
12:2a:1b:2a:4b:ea:ab:75:b2:1e:ec:ec:70:a3:c4:
bf:90:e6:76:8b:a4:d0:7e:09:59:46:ab:ca:95:27:
04:f8:37:88:1c:0d:dc:7a:87:c3:46:56:a6:98:f0:
81:d3:47:bc:05:a2:fb:3a:c1:4c:34:16:a1:9d:a2:
61:89:62:7a:a6:cf:87:d3:28:68:c9:ea:7c:d4:2c:
57:3f:9e:61:e6:e6:c9:22:88:e6:7c:41:79:d2:80:
94:60:69:2b:c2:e7:ea:af:b8:89:8b:a0:9a:12:af:
98:7b:55:3a:c8:91:7a:af:54:e0:ae:b2:d5:30:84:
8e:55:ab:21:92:6b:98:ef:3a:9b:66:ca:45:9d:13:
ec:3d:7a:5d:ce:a1:a0:51:bc:bd:59:a4:87:c7:da:
24:d4:6e:2f:b2:ad:11:5d:3c:a7:68:b5:fb:40:ec:
e3:9b:91:11:15:91:df:d7:92:67:19:58:e0:27:e9:
e7:44:02:6c:7b:5a:5c:11:86:44:57:d3:85:f1:35:
d9:73:35:f6:ae:57:ad:87:e3:9d:66:b5:8b:73:a7:
a1:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:62:D3:C7:AF:36:C4:01:AA:97:09:4D:3F:23:89:D7:87:5D:14:EC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/13c02e-cca0-4dcd-9125-8b315229757d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/13c02e-cca0-4dcd-9125-8b315229757d/1/VGLTx682xAGqlwlNPyOJ14ddFOw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.239.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48003
Signature Algorithm: sha256WithRSAEncryption
42:71:96:e8:48:46:12:be:25:45:5d:e4:01:fe:27:58:a1:76:
f4:b3:29:fb:b7:46:92:60:04:f8:51:fd:c6:b9:3a:76:b9:8d:
5f:bc:f0:9d:a1:c0:ea:f4:b0:25:8f:41:43:bf:be:95:fe:67:
fe:a9:6a:3c:5a:93:c3:95:26:e2:4c:01:ac:e5:25:0b:3b:58:
c3:7e:11:ab:09:c5:8d:1a:f8:01:dd:c4:48:49:b4:b8:71:94:
29:f1:cc:12:68:f8:06:53:c3:9f:a9:50:25:00:66:f3:ba:de:
35:61:df:ee:a1:a2:2e:2c:e8:04:7d:be:bd:56:1a:40:8a:9f:
6e:8f:e5:3a:94:63:66:d8:c4:94:c8:98:6f:9e:bb:c3:2c:53:
36:63:9d:3e:82:50:12:9b:7c:0f:c2:9f:d0:68:ca:c7:27:1d:
b8:c8:57:64:42:10:95:56:4b:1a:c6:76:d6:75:7b:bf:31:13:
ac:74:43:7b:26:46:33:5d:6d:be:6a:f8:bd:8d:52:65:e9:33:
7d:46:a5:17:04:1c:d6:0c:dd:26:94:ee:0f:3a:ee:20:67:55:
bd:30:a6:cf:3b:1c:77:ce:2e:9f:72:62:b4:a4:6a:43:75:b2:
95:81:4b:8e:3a:64:23:e8:ce:da:b1:79:14:fb:e8:f5:12:b6:
cd:a0:63:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:23:23 2025 by rpki-client