Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
File: XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer (raw, json)
Hash identifier: N641OQHQNe14Lw5bvY3V/Aa5mVxaAxIuyRBSG+gjjPY=
Subject key identifier: 5C:32:31:19:52:56:6D:1C:E1:8F:08:8E:8B:B6:CE:AB:E7:E7:93:5A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221F79A96A1052FBBC5EF918C3695218
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:47:55 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 60759
IP: 188.95.91.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:79:a9:6a:10:52:fb:bc:5e:f9:18:c3:69:52:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5c32311952566d1ce18f088e8bb6ceabe7e7935a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5e:db:45:10:a7:75:18:5c:e1:51:5c:81:01:
4d:42:d6:80:1a:9a:dd:22:e5:33:f9:30:7d:09:35:
ec:17:ac:26:8d:4f:e4:a4:3e:d5:54:d7:0e:f7:16:
5c:8c:18:80:eb:50:d5:39:10:6b:ec:5e:14:5d:05:
e5:c1:fe:84:d8:4b:a1:65:92:ff:aa:ce:ec:bf:2c:
02:06:e4:9f:69:ab:9a:ad:c4:be:76:ef:d4:ce:c5:
b6:a3:c6:33:10:91:2f:77:2b:79:2e:52:a3:3d:de:
d8:68:68:c3:1a:bc:d8:7d:19:b5:b8:9a:a9:9b:c1:
b0:c9:90:78:0d:b5:5b:3c:b0:43:ca:f7:97:ae:b3:
50:98:4b:ed:99:2c:12:fe:fc:14:f2:29:ca:b0:6c:
76:98:94:20:9b:bc:cf:e0:ad:1d:82:4b:1b:7c:2c:
c7:fa:6b:66:42:13:ac:b6:ef:9f:70:23:91:c4:52:
d3:0a:4c:4e:54:05:a6:a6:4e:83:86:a3:c0:5d:23:
78:71:9c:00:36:36:20:6e:38:b8:67:b4:86:fa:79:
db:0a:24:29:a9:44:22:45:f6:08:87:7a:a9:08:9f:
78:8c:25:bf:33:f1:f1:4e:19:74:52:e7:cf:d8:50:
cc:a1:b6:d4:3e:ef:dc:b3:1f:81:27:9f:bb:08:38:
4c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:32:31:19:52:56:6D:1C:E1:8F:08:8E:8B:B6:CE:AB:E7:E7:93:5A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.95.91.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60759
Signature Algorithm: sha256WithRSAEncryption
78:17:d7:40:08:9e:dd:7b:77:e3:1a:c5:2f:0f:f1:65:b6:7d:
12:bd:f0:0c:70:d3:67:d0:32:8a:d8:b6:85:d1:e2:c2:f3:e5:
9e:9a:71:f0:98:0f:ed:c7:88:27:8d:58:74:ff:ce:fd:65:09:
d4:04:92:54:e3:df:6b:a7:7d:fd:5c:7a:6d:86:28:b1:07:71:
81:81:9d:f8:e0:4b:3e:88:71:6c:e4:6c:69:03:3d:69:ed:b8:
a2:55:9a:ba:12:97:00:e9:89:7e:4f:0e:ae:7a:e4:4f:f9:7f:
6e:7f:dd:65:6f:bf:8d:50:95:80:b7:28:9b:22:25:2d:d1:6b:
6f:df:9a:ae:b6:15:34:02:e0:d0:5d:19:02:1b:4f:53:56:07:
92:22:de:9e:66:de:e9:82:eb:0c:51:e9:69:85:3c:15:73:8a:
fd:d8:bd:f5:5f:40:d8:e4:35:db:fc:6e:ba:b9:5f:5b:5d:cf:
a6:51:e1:c4:bf:1a:af:6b:5d:e5:77:34:50:79:06:6a:86:91:
00:a9:e0:7c:2c:13:b5:b1:38:45:bc:19:16:f1:0c:5a:6a:55:
20:0d:ab:09:48:99:09:6b:46:8f:a0:b1:cd:b6:0e:6a:54:f5:
bb:b2:00:2b:e3:11:80:c1:54:ae:29:44:d5:76:8f:62:16:4d:
63:a6:c5:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:57:38 2025 by rpki-client