Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YCC9ukbOUMCqDEHwsbSfp-1oEMs.cer
File: YCC9ukbOUMCqDEHwsbSfp-1oEMs.cer (raw, json)
Hash identifier: 8mSVkIALE+qKwHJRQoh0aLslxdkjqj25Dzf8GncMr+0=
Subject key identifier: 60:20:BD:BA:46:CE:50:C0:AA:0C:41:F0:B1:B4:9F:A7:ED:68:10:CB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228DAC33746BDAF4FFFFB490B7BDDC30
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:17 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 202494
IP: 193.148.40.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:ac:33:74:6b:da:f4:ff:ff:b4:90:b7:bd:dc:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6020bdba46ce50c0aa0c41f0b1b49fa7ed6810cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5d:18:d8:08:1e:63:40:90:72:66:15:2d:77:
fc:92:55:5e:95:38:d5:35:b5:2f:dc:16:79:07:30:
d7:f7:ab:a6:b5:4c:48:7d:58:53:ae:30:06:e1:5e:
09:e7:92:ab:cc:b2:74:81:f6:35:fd:94:d8:fc:fd:
2a:c1:ab:e1:4b:80:3e:21:2e:05:16:f5:47:66:c5:
be:00:59:fe:54:b4:18:58:a5:1c:5e:fe:90:b7:bb:
8c:e7:0c:88:9f:9b:77:6e:71:54:64:cc:ca:30:f3:
bd:26:10:9c:90:3f:0f:29:2f:fd:b0:6b:4c:50:3c:
86:40:4e:8a:38:6e:48:4b:6d:c7:7d:5e:5c:1a:a3:
20:70:c2:c7:29:ff:34:2b:e4:e5:e9:67:1e:17:f3:
7f:6e:d0:53:27:d5:bb:92:d3:bb:5c:da:08:1d:08:
32:bf:f8:61:a3:fb:46:9a:e0:95:ea:38:59:f6:1e:
ff:0e:5b:91:78:13:89:c9:5d:c7:ca:4f:87:20:25:
67:81:14:53:eb:ca:02:80:8f:d8:f4:c1:bb:22:31:
ab:9f:6c:a7:03:4e:34:16:24:67:8c:92:b8:c3:05:
d4:97:7c:ec:ab:44:d1:64:af:eb:49:9d:a2:d6:85:
55:ef:dd:39:2d:32:7b:4e:5c:ee:02:bc:a3:f7:a6:
a3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:20:BD:BA:46:CE:50:C0:AA:0C:41:F0:B1:B4:9F:A7:ED:68:10:CB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/769596-2c4a-4ad8-86cf-b309112d2eec/1/YCC9ukbOUMCqDEHwsbSfp-1oEMs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.148.40.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202494
Signature Algorithm: sha256WithRSAEncryption
30:c5:60:88:46:a6:4d:33:33:b6:f9:6a:7d:69:46:74:be:90:
ab:3f:36:2c:96:a5:06:f6:1a:0c:97:76:c4:81:9c:42:eb:e7:
94:e0:80:b7:55:dd:0c:5e:22:35:59:9d:72:d6:98:36:09:9f:
e8:18:43:11:2f:07:4e:50:e4:4b:94:44:c3:21:b5:89:28:e7:
c3:a3:f7:68:f6:e5:27:38:0c:fa:42:be:68:82:60:84:25:52:
2e:01:5b:94:12:d3:32:eb:75:23:fb:8e:9b:c5:71:6d:dc:38:
cd:ef:45:9d:7b:d6:03:46:26:a7:0c:7e:59:f2:bb:af:db:c2:
1c:2f:b3:00:68:fb:15:4b:bc:8d:0e:52:76:ea:e6:54:4f:f9:
52:0e:91:55:11:30:97:66:9a:a5:f0:f2:c7:10:ba:3b:55:19:
65:3f:f7:6b:33:a8:13:7d:62:38:9e:67:04:27:13:ce:96:90:
79:5f:9f:54:9e:64:ca:27:dc:74:f4:70:ca:7e:28:f9:59:36:
12:02:13:02:fd:22:55:e0:d0:ed:8a:93:fe:54:63:16:c4:0e:
53:0c:82:a0:a0:33:0d:cb:2d:3f:d5:db:ff:be:2d:ef:94:91:
af:ae:1f:7b:b0:89:84:48:f3:eb:ff:56:c3:3f:a9:76:56:22:
10:48:24:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:11:40 2025 by rpki-client