Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/X6TYBGSXj26_upX3RaMwVyb3LZM.cer
File: X6TYBGSXj26_upX3RaMwVyb3LZM.cer (raw, json)
Hash identifier: jCgyODTM62wGN14CwB7ajCnEt5Dtuc0UxrW+r/7UvLk=
Subject key identifier: 5F:A4:D8:04:64:97:8F:6E:BF:BA:95:F7:45:A3:30:57:26:F7:2D:93
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B5251D1E50B252350FBABAE0171C99
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:49:30 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 5542
IP: 92.61.176.0/22
IP: 185.123.208.0/22
IP: 2a06:af80::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:25:1d:1e:50:b2:52:35:0f:ba:ba:e0:17:1c:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:49:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5fa4d80464978f6ebfba95f745a3305726f72d93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:19:b7:70:ac:b9:1f:e3:11:8c:ca:0f:51:5a:
84:22:42:58:6f:a2:83:a2:3b:25:e4:e4:ad:f3:88:
b3:0d:69:aa:a9:d9:3a:4c:29:ed:4a:b6:f6:74:56:
14:ab:1d:39:54:d2:26:c1:9c:cd:eb:72:09:36:e0:
99:23:8e:ee:8f:4f:ca:fd:19:65:26:46:aa:be:79:
b7:63:22:54:14:be:61:0a:b9:56:fc:e0:9e:0d:1a:
07:76:be:cb:c5:44:9d:8d:20:93:aa:3e:22:ff:49:
4e:09:95:79:6a:0c:63:7a:9f:e4:53:81:9e:74:37:
94:63:3a:64:44:62:38:f8:21:7d:95:aa:b4:93:31:
0a:ac:7d:11:ad:c9:2b:5f:08:00:73:6c:c9:e7:bc:
7c:e6:3b:f5:2f:9f:96:d9:fb:46:c9:4f:a8:d5:51:
92:fa:32:3b:c9:fa:ba:3a:45:fa:08:23:82:f1:7b:
ed:37:1d:8e:24:f5:5a:3b:b2:48:9a:5f:f7:b5:ba:
98:da:ca:c6:3b:77:0d:77:12:51:69:9f:0f:ea:c7:
bd:28:4f:2e:94:ad:8f:f0:05:9e:c1:62:26:0b:38:
3f:be:97:1c:f5:dd:aa:71:d5:7d:f7:f8:0b:99:3d:
d9:cd:2a:64:fb:73:ae:1c:61:78:ff:d7:a8:0f:b1:
de:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A4:D8:04:64:97:8F:6E:BF:BA:95:F7:45:A3:30:57:26:F7:2D:93
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.61.176.0/22
185.123.208.0/22
IPv6:
2a06:af80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
5542
Signature Algorithm: sha256WithRSAEncryption
a1:68:1b:62:da:38:64:54:25:aa:32:94:54:7d:3e:0a:4d:3f:
b2:d7:b0:bb:4e:bb:1e:c3:33:88:37:a6:f5:5c:af:0c:78:2c:
4d:0a:7d:7f:a0:7e:32:c4:4d:d8:b3:9e:7a:34:9e:d1:7c:56:
02:fa:1e:18:8c:a8:1f:2f:92:5a:9f:b5:cd:28:24:ca:14:b5:
9f:b1:16:41:da:c9:61:79:f5:88:ce:bf:35:a1:3b:16:52:86:
97:d2:05:57:85:e4:5e:2a:ac:7a:67:86:a6:2c:6c:29:d9:65:
7e:8d:de:b3:37:1f:f4:cd:6a:e6:b4:a1:ec:79:93:ae:52:7c:
61:9c:d1:84:a2:4d:9c:84:4c:96:9c:0d:9d:16:63:20:0c:bd:
d0:2a:a3:18:ac:67:cc:90:1e:55:35:6c:cc:a5:5e:73:e9:56:
4c:60:d0:95:45:e0:f5:be:15:d5:bc:2d:88:9d:44:31:07:25:
e0:fb:7c:05:b3:e2:8e:8e:05:40:0d:4e:9b:a0:13:72:6e:3f:
7b:5a:8c:6d:a3:b9:a2:98:70:9a:93:38:04:54:3e:5e:90:38:
66:ff:a7:d0:36:5f:c6:cc:91:67:cb:91:41:d3:43:7f:4a:34:
61:34:25:a3:50:c6:7a:63:9c:cd:09:ad:b8:5b:aa:ea:06:9a:
de:66:89:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:35:13 2025 by rpki-client