Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VcQvLHehgijJ-pqzeYQmYNB5KQg.cer
File: VcQvLHehgijJ-pqzeYQmYNB5KQg.cer (raw, json)
Hash identifier: rRukQlmQi2hYf7XlE+Pt5QSZ0OgFm88oQ+CqnGIzM/s=
Subject key identifier: 55:C4:2F:2C:77:A1:82:28:C9:FA:9A:B3:79:84:26:60:D0:79:29:08
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFAA9B978F8A37D3DFAC0C94AEA7765
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/VcQvLHehgijJ-pqzeYQmYNB5KQg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:48:28 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 198515
IP: 91.235.213.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:a9:b9:78:f8:a3:7d:3d:fa:c0:c9:4a:ea:77:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=55c42f2c77a18228c9fa9ab379842660d0792908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4b:c9:cb:07:88:f4:b8:c2:98:cf:66:b5:d1:
6e:6d:98:2b:4e:80:ba:25:d1:59:75:e6:ab:cf:32:
e3:f5:92:79:6c:e8:4a:9e:60:e7:e5:23:16:99:ed:
94:af:31:23:2f:2d:9f:0b:e5:0c:43:68:a2:b2:35:
e6:f1:aa:9e:5e:85:e3:fd:88:46:94:9b:fc:99:e1:
db:2a:cc:e0:e9:59:1c:bd:16:d6:be:b1:8a:08:ba:
d0:ab:a1:14:49:7c:e4:95:6e:6a:bf:d5:fe:96:bf:
d1:65:57:ca:63:84:cf:76:b0:35:c7:b9:de:b5:12:
da:e7:8e:b5:39:b3:e6:48:eb:77:c5:a4:16:2e:c3:
bc:8d:05:4c:e2:37:1c:2c:5b:19:2c:ae:89:60:76:
00:a7:e8:6c:ce:42:30:a1:9f:2c:2a:2f:be:dd:07:
9f:90:18:cb:3e:02:ab:e2:a4:52:ac:3f:9a:26:d5:
31:13:5f:31:b5:8e:6c:1d:d5:2d:c6:05:6e:8a:45:
6a:e8:34:51:7b:79:42:55:e8:cf:a3:5e:5d:32:b6:
d7:09:59:bd:1e:6f:e6:e7:ba:88:60:ae:f6:bf:05:
48:ce:7a:f2:a6:48:58:8d:03:77:97:8c:54:2a:07:
c9:29:51:1c:44:4d:c8:e2:27:c9:d2:7c:81:63:a0:
36:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:C4:2F:2C:77:A1:82:28:C9:FA:9A:B3:79:84:26:60:D0:79:29:08
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/VcQvLHehgijJ-pqzeYQmYNB5KQg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.213.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198515
Signature Algorithm: sha256WithRSAEncryption
b1:80:21:88:cd:86:1b:35:73:d1:50:6d:e0:2e:d3:4f:44:39:
d4:c3:ea:40:4d:9b:2b:eb:d7:18:d1:fa:22:23:67:85:4f:ff:
44:37:23:4e:24:b2:0b:bc:61:3e:bd:b4:50:4f:ce:27:0d:1f:
7e:c8:4f:b6:bd:54:2c:bf:17:42:b7:85:1a:de:0d:b7:5d:c4:
fe:19:42:e5:7c:9b:0f:69:3f:46:b4:29:c6:f8:96:ae:f9:2b:
70:01:6b:24:82:1b:14:99:3f:85:b4:76:54:20:fc:be:c9:0d:
63:04:54:4c:ad:f5:ff:99:ab:06:1a:da:0a:d9:a0:d1:4d:20:
dc:67:92:8f:3e:ff:c0:ac:4d:96:99:c8:cf:01:0a:96:31:4f:
e6:07:00:ba:db:38:04:36:46:84:93:f4:00:98:ec:18:9e:8a:
81:f3:0b:7c:48:5e:9d:7b:85:a4:71:fc:a2:19:23:63:7c:ea:
9c:bb:82:82:b4:58:61:6f:a6:d6:f7:88:9d:7c:9f:0a:59:d4:
9e:f2:9b:e2:85:e5:ca:c4:b1:2d:93:e2:d2:1e:1a:00:b2:6b:
42:5d:e7:c9:65:0e:d1:d2:1d:91:1e:93:55:d8:6b:5c:a3:f9:
25:80:c4:bf:ae:42:d1:11:1b:1c:42:bb:33:cd:cf:d7:c7:15:
43:57:84:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:45:08 2025 by rpki-client