Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XvzNfX4wj4GAcFH41Ifp2CnCSGg.cer
File: XvzNfX4wj4GAcFH41Ifp2CnCSGg.cer (raw, json)
Hash identifier: Bgt+TJFPfsnZDP5Ms2cZ6OS6+9c+0E+YV1vMkFEextk=
Subject key identifier: 5E:FC:CD:7D:7E:30:8F:81:80:70:51:F8:D4:87:E9:D8:29:C2:48:68
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942444C614554F10700470560B601B2EAD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:47:54 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 12620
IP: 62.48.96.0/19
IP: 84.55.192.0/18
IP: 176.46.192.0/18
IP: 185.179.16.0/22
IP: 195.190.160.0/19
IP: 2001:4b00::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:c6:14:55:4f:10:70:04:70:56:0b:60:1b:2e:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5efccd7d7e308f81807051f8d487e9d829c24868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:27:ee:e8:fe:3c:8f:b7:09:8a:a1:cc:64:65:
32:16:d8:40:8a:a8:eb:0e:85:ad:53:8a:15:16:b9:
bf:6b:7d:c2:43:86:89:2d:c7:5c:df:cf:ed:20:60:
34:8c:52:c1:f1:41:5e:2d:dd:a3:3e:a9:77:03:90:
0f:da:6b:e8:95:91:b5:46:e6:a2:eb:00:3d:a4:f2:
ac:45:3a:67:89:8b:40:6a:03:13:6a:34:5e:8b:23:
8e:79:4a:3d:b1:69:c3:d8:9b:42:d2:39:e6:45:a8:
f9:5d:bd:30:4c:e5:7d:85:4e:f4:20:01:c5:2b:49:
49:89:44:a2:86:54:e1:de:b4:11:e5:e5:e3:d3:d0:
d9:31:a0:ee:30:fc:3e:ce:9a:e0:51:1a:79:11:81:
06:b0:24:6f:5c:df:57:68:76:58:cf:c3:cc:bd:ea:
9d:5f:d3:2c:d4:8f:5b:af:69:e2:f5:b3:fb:67:a9:
a1:7b:2c:46:7a:fc:d3:08:2d:08:f8:b0:ba:9d:60:
b8:8f:79:34:f7:bc:a8:dc:91:ba:99:78:34:f1:d7:
7d:75:d8:da:86:10:40:0f:f6:8a:cc:6f:47:ad:84:
a7:11:b1:26:05:42:61:71:3d:20:71:54:24:4f:f8:
21:2c:fe:22:87:ff:d7:6b:47:f2:cc:c1:b1:7c:01:
b6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:FC:CD:7D:7E:30:8F:81:80:70:51:F8:D4:87:E9:D8:29:C2:48:68
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/59650d-c935-4aa9-9804-d1bd06f5bf00/1/XvzNfX4wj4GAcFH41Ifp2CnCSGg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.48.96.0/19
84.55.192.0/18
176.46.192.0/18
185.179.16.0/22
195.190.160.0/19
IPv6:
2001:4b00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12620
Signature Algorithm: sha256WithRSAEncryption
6e:79:6c:5f:3e:3a:02:9f:0d:49:66:c5:89:39:45:93:90:d0:
b6:25:69:5d:14:bd:f9:17:88:6a:2a:f7:d9:2f:ed:dd:59:a1:
09:76:85:c0:f4:e8:76:a4:a3:c1:4d:b5:69:d2:21:05:e6:2e:
bc:ce:38:74:69:6f:9b:1c:9a:59:f8:15:63:75:ae:ef:2b:99:
22:a4:97:98:4e:b6:34:6b:a3:1d:a4:33:da:99:6c:31:02:e9:
41:f8:a7:ec:bd:e7:ed:ce:4f:cd:86:e1:22:63:28:bd:9a:49:
39:26:8e:e4:54:2f:60:16:17:69:74:b6:a5:87:89:e0:1f:4e:
88:14:2d:ac:3a:c2:4d:65:26:0e:27:dd:50:06:3d:c0:8b:15:
ed:24:37:34:b6:f3:f5:fa:e8:02:e5:cb:13:e2:2c:ec:6a:3e:
7d:ef:80:56:ed:80:c8:3f:2a:ff:09:9f:44:d0:b7:be:39:35:
7c:80:b7:a7:40:8d:ec:41:a5:e9:e8:11:40:3d:af:2e:3d:7f:
e4:a6:45:d0:d4:8e:0b:0b:13:78:63:e8:43:63:15:11:d8:88:
ec:d4:18:20:6d:ca:f2:3e:9f:c0:c8:22:6c:c2:3b:6a:26:0e:
40:4e:96:91:5c:9e:55:ca:41:04:ae:dc:76:fe:a8:47:30:97:
2f:5a:03:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:58:11 2025 by rpki-client