Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XsBEtLlvIfqahGRb1eOp4ZcjCC0.cer
File: XsBEtLlvIfqahGRb1eOp4ZcjCC0.cer (raw, json)
Hash identifier: F8UMreozHVAEtWpS4p8lRM56u8VhEi6imHNWCzxQj8s=
Subject key identifier: 5E:C0:44:B4:B9:6F:21:FA:9A:84:64:5B:D5:E3:A9:E1:97:23:08:2D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D99EA9A8F328B45BE5B00AEE60FF39
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:43 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 212748
IP: 83.242.104.0/23
IP: 2001:678:6d0::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:9e:a9:a8:f3:28:b4:5b:e5:b0:0a:ee:60:ff:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5ec044b4b96f21fa9a84645bd5e3a9e19723082d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ad:92:09:b1:dc:76:5e:f8:75:ec:8e:3f:50:
48:be:15:8f:78:5b:29:89:b5:b5:84:22:58:68:b4:
d9:13:79:c8:af:68:28:e2:58:de:23:3f:30:80:9a:
ed:6d:d8:a8:8a:78:af:2a:37:21:1f:81:2c:0e:2f:
f9:5a:f5:54:47:24:40:d8:12:ce:da:f4:dd:f4:f9:
99:e4:25:99:63:ce:e4:09:a0:22:6a:1a:76:72:98:
21:f5:f3:88:41:44:03:6c:b6:56:fe:be:c2:e7:a6:
5c:4a:54:08:dd:44:33:e5:7d:aa:1c:9f:76:af:ba:
6a:f3:06:22:f4:e6:b5:e8:50:db:fe:99:22:47:6f:
7f:54:15:29:bb:19:6b:52:36:9f:cb:87:f6:08:a7:
97:31:e8:ce:5e:ce:c8:a9:cb:ce:69:08:86:1b:2e:
b8:65:4b:54:34:83:1a:f4:de:bd:f9:59:01:59:7a:
e2:a5:ce:ee:93:ca:f8:32:b8:63:61:cf:cf:fa:56:
bc:99:b1:2d:fc:e9:63:06:34:87:be:25:88:de:79:
51:56:27:27:90:d2:29:b7:7c:14:a5:8a:7c:dc:a5:
be:a2:8b:a9:92:e1:eb:9b:c0:c3:1f:25:d6:d8:5e:
c0:ec:28:eb:70:da:ef:d1:06:e0:d4:34:ad:62:e9:
e7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:C0:44:B4:B9:6F:21:FA:9A:84:64:5B:D5:E3:A9:E1:97:23:08:2D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/77b86f-7a94-4847-903b-61e4ebf671ab/1/XsBEtLlvIfqahGRb1eOp4ZcjCC0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.242.104.0/23
IPv6:
2001:678:6d0::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212748
Signature Algorithm: sha256WithRSAEncryption
0d:e1:fa:4d:0c:9c:90:fa:e6:63:15:1f:7e:31:79:6f:d5:cb:
ff:94:bd:32:3a:04:c7:b3:85:c4:38:d4:b5:37:6f:92:65:58:
55:6d:e6:60:12:57:08:7f:f6:db:73:e7:4d:f3:c2:84:dd:fb:
47:05:8e:1f:93:82:85:c9:a8:1b:d3:71:87:1b:1e:0f:f0:53:
3d:f1:37:25:9c:b8:13:ca:e6:25:fb:1f:4a:18:c9:20:4a:86:
c8:98:8d:f8:ef:e6:6d:64:40:f0:9d:af:bd:ee:0f:83:6e:b2:
6e:85:c0:6c:b6:75:db:de:77:dd:2d:b7:4c:10:68:b1:16:b1:
b4:82:89:3a:5e:55:20:ff:5e:6b:40:93:16:3b:11:00:d9:0a:
bd:a3:5d:e0:b0:b0:e3:ec:1a:a4:70:b8:fc:e4:cc:55:7c:8b:
df:40:22:ac:e3:af:c0:95:13:24:a1:1b:c5:e7:28:04:c5:9d:
1e:00:2c:29:da:d9:c8:db:ac:fb:b4:1d:c3:df:c2:86:77:48:
9a:49:a2:58:1e:00:c9:48:74:20:66:ab:2e:f1:e5:72:ae:82:
89:6e:e7:65:37:5e:fd:a1:7a:cc:38:3c:58:b4:ab:ee:ec:a0:
4d:e6:ae:3d:03:6a:61:da:7c:23:5a:c3:88:d9:ad:fc:6d:20:
1c:3a:4a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:25:18 2025 by rpki-client