Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XNN5ztzcIPCHXEsIuUtBFhs-jAM.cer
File: XNN5ztzcIPCHXEsIuUtBFhs-jAM.cer (raw, json)
Hash identifier: AUXBdelcURYMao0oFzhhSZK70KVqvBRW2nb3/ocARdo=
Subject key identifier: 5C:D3:79:CE:DC:DC:20:F0:87:5C:4B:08:B9:4B:41:16:1B:3E:8C:03
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424457C54C32C78B70F4224FD5B8C8406
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ba/f3cca4-f6bf-4734-abbd-0964464c1751/1/XNN5ztzcIPCHXEsIuUtBFhs-jAM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ba/f3cca4-f6bf-4734-abbd-0964464c1751/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:48:41 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 42936
IP: 91.193.64.0/22
IP: 2001:67c:13c8::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:7c:54:c3:2c:78:b7:0f:42:24:fd:5b:8c:84:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5cd379cedcdc20f0875c4b08b94b41161b3e8c03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0d:13:ed:c6:d2:b5:91:a0:cb:68:df:6f:30:
00:50:ff:2e:70:b5:26:3b:aa:69:00:3d:92:96:b2:
8b:6d:9d:5c:53:32:c3:b6:e3:e6:44:9b:11:23:bc:
70:f1:e3:38:ad:42:95:99:92:ad:ec:0a:d3:13:a3:
40:4d:6e:61:2a:e1:40:95:d2:c3:87:d6:23:1e:ba:
c3:3c:1b:c2:ab:53:6f:4f:d6:b5:85:8d:2e:c5:42:
0d:3b:93:39:ec:94:e9:89:09:eb:b4:ec:8f:d6:c2:
3f:04:4b:1b:a0:84:9a:45:9a:e1:eb:8e:66:c2:35:
c0:14:0c:c8:10:cf:9e:be:24:17:97:91:cc:b3:95:
78:00:6c:85:71:07:b9:a4:fa:91:06:26:70:4c:d9:
41:79:ad:ca:35:0b:df:3d:50:dd:63:8f:53:78:3e:
a4:04:19:ff:7d:3d:ba:36:28:69:05:bb:62:d3:ac:
be:4e:3b:de:11:ed:d2:a0:c3:ca:2f:05:fd:a0:1b:
83:b8:f0:9d:1e:43:69:1a:91:ca:3e:f6:d9:d2:b8:
3b:be:ba:0a:cd:81:73:24:5a:d6:5a:b4:99:68:76:
04:79:94:1d:81:b7:df:4c:31:a6:e9:e6:e9:c3:d8:
fe:67:bc:f3:42:c1:37:55:ba:4a:a6:a1:ab:15:6f:
e8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:D3:79:CE:DC:DC:20:F0:87:5C:4B:08:B9:4B:41:16:1B:3E:8C:03
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f3cca4-f6bf-4734-abbd-0964464c1751/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f3cca4-f6bf-4734-abbd-0964464c1751/1/XNN5ztzcIPCHXEsIuUtBFhs-jAM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.64.0/22
IPv6:
2001:67c:13c8::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42936
Signature Algorithm: sha256WithRSAEncryption
b0:fc:c3:17:c9:c1:5e:d2:e7:11:77:b7:51:92:c9:37:9f:bc:
60:56:e7:f9:aa:c3:4b:24:e0:b6:46:21:03:ab:c8:31:fe:c4:
18:da:26:b2:c0:58:09:d8:cd:78:df:bd:59:fa:8c:73:57:0c:
05:62:e1:4e:bb:43:9b:10:6c:93:31:d0:b5:f5:f7:c7:90:75:
da:47:4b:d0:a3:57:b2:6e:88:e5:59:66:4e:cc:a4:5a:76:14:
ed:00:13:c7:f1:fe:8d:d9:7e:2b:19:39:7f:6d:0a:1c:bc:63:
37:cc:70:b6:ad:ac:1c:60:06:68:5f:c4:be:c9:eb:68:60:06:
98:1c:8f:a9:1a:87:85:90:16:a6:eb:05:05:ae:b7:a4:7d:fc:
11:ec:b1:e7:4c:ae:84:96:f1:b0:ac:a4:29:96:63:d9:fe:28:
2a:37:d7:8c:fd:f9:02:3a:bf:72:87:92:cb:7d:ae:cb:3a:43:
3a:ba:9b:2f:26:fc:b6:5a:9a:fe:7d:24:91:77:70:38:d9:72:
11:00:92:3b:2e:8a:18:e2:c6:ff:a5:4a:a5:2a:30:68:fc:50:
eb:d4:71:ac:02:51:ab:32:8a:71:34:38:9b:f6:82:01:94:b7:
ac:fb:74:31:df:6a:ea:14:03:89:80:b3:29:0b:0e:0e:7a:a6:
a5:61:42:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:28:16 2025 by rpki-client