Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Xoy22jWKjS0nDDBfi2HzyZDVdm4.cer
File: Xoy22jWKjS0nDDBfi2HzyZDVdm4.cer (raw, json)
Hash identifier: trwkEp/u65rczaTrJuqxalBzfN/g+cGMFvCHNWzfITI=
Subject key identifier: 5E:8C:B6:DA:35:8A:8D:2D:27:0C:30:5F:8B:61:F3:C9:90:D5:76:6E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194206857288EBC82926F4301FF7B749284
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e6/f02661-b591-4f5e-b369-f74a5f2bcb47/1/Xoy22jWKjS0nDDBfi2HzyZDVdm4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e6/f02661-b591-4f5e-b369-f74a5f2bcb47/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:48:16 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 28876
IP: 81.89.160.0/20
IP: 217.24.48.0/20
IP: 2a00:9d80::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:57:28:8e:bc:82:92:6f:43:01:ff:7b:74:92:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5e8cb6da358a8d2d270c305f8b61f3c990d5766e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a2:14:f6:fc:55:fb:b6:43:37:f3:6d:89:a9:
fc:fb:85:f5:42:e3:6a:bc:eb:fc:60:ca:da:d0:cb:
f1:d7:23:0a:aa:17:47:66:12:a3:2e:85:cf:5b:c8:
87:6f:b1:5c:6e:0a:90:82:48:93:7b:f0:ae:c6:55:
a9:9d:5f:95:d5:ee:fe:a4:eb:b2:fe:60:82:88:67:
73:cb:f4:40:26:ba:c8:e3:1a:3d:4a:d4:9f:6c:b7:
a7:6b:61:c0:30:fe:54:1e:44:b1:97:4e:1c:55:a0:
46:3c:6e:4f:45:87:cf:6e:e8:80:82:a1:8d:23:fb:
d2:2e:4d:f6:03:9b:df:a8:90:50:f8:56:36:78:1c:
09:73:91:4d:18:56:c5:bf:56:87:f8:e8:26:36:85:
15:82:75:4b:07:a3:6f:5b:7f:a9:cc:a1:86:b4:08:
99:a5:ab:15:bb:ab:6f:dd:22:d7:f1:58:59:d1:2b:
a5:c9:e0:00:49:a6:80:5c:5f:76:ef:80:9a:db:b4:
5a:cf:ac:60:cf:d2:69:ae:2e:92:cb:99:2d:04:8a:
17:a2:29:15:f1:ad:2c:10:f7:84:87:9d:52:f1:c8:
46:5a:fa:bd:08:1a:1d:83:6e:bc:c5:cb:50:5b:f8:
3a:a9:6c:8a:ff:26:5e:a8:48:08:df:88:30:28:a0:
6a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:8C:B6:DA:35:8A:8D:2D:27:0C:30:5F:8B:61:F3:C9:90:D5:76:6E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f02661-b591-4f5e-b369-f74a5f2bcb47/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f02661-b591-4f5e-b369-f74a5f2bcb47/1/Xoy22jWKjS0nDDBfi2HzyZDVdm4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.89.160.0/20
217.24.48.0/20
IPv6:
2a00:9d80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28876
Signature Algorithm: sha256WithRSAEncryption
94:07:74:9d:42:d9:f3:81:aa:ab:f2:78:15:20:47:d5:57:4e:
09:7d:44:e7:f3:40:71:35:c0:66:06:07:5b:6e:29:98:43:15:
35:cc:18:dc:11:8b:a2:4a:8c:45:22:4b:2c:f0:f6:44:04:6d:
72:72:5c:0b:9f:f6:e5:05:c5:b3:1f:d0:fc:08:92:af:1e:5e:
4f:c8:0d:ac:6a:e0:9e:56:b9:69:7e:2e:6c:a5:67:9f:14:f3:
a0:a8:f5:f4:9e:d2:c0:06:79:4b:70:e3:3b:b5:c2:d8:ac:3e:
d7:26:ac:d7:34:a9:cd:fd:47:05:d9:fc:d8:91:55:8e:90:59:
8a:a5:20:7a:13:a9:40:9c:66:e3:94:1f:0e:ef:04:35:43:d3:
9e:a0:98:f8:f6:40:7b:a0:73:c0:c9:48:33:bc:00:63:8c:20:
61:9f:10:33:a6:73:c6:16:bb:2d:fa:ab:81:a3:9d:c4:fe:78:
75:a6:be:02:44:e5:dc:dc:49:13:1e:7b:cc:d6:58:7d:ca:06:
89:61:0e:eb:43:25:77:ff:f4:91:69:d6:19:63:86:8c:bc:25:
b5:22:7b:52:dd:d5:01:43:7b:a6:82:6d:1e:41:9c:b9:dc:df:
1b:ad:6f:08:73:0a:55:ce:41:05:5c:44:98:cb:24:56:99:28:
bb:67:2e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:17:24 2025 by rpki-client