Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YCGk2qfc9KTLCKxHRzdfaYquhkM.cer
File: YCGk2qfc9KTLCKxHRzdfaYquhkM.cer (raw, json)
Hash identifier: r4UHyIfQHEur+IlAPZmhKqpQabwtu8XNLDZsdK8CyBM=
Subject key identifier: 60:21:A4:DA:A7:DC:F4:A4:CB:08:AC:47:47:37:5F:69:8A:AE:86:43
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B1FF5207D622AC0827324830974BE7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/YCGk2qfc9KTLCKxHRzdfaYquhkM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:20 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 208447
IP: 2001:678:9e8::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:ff:52:07:d6:22:ac:08:27:32:48:30:97:4b:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6021a4daa7dcf4a4cb08ac4747375f698aae8643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a1:ee:df:8c:2e:54:4d:50:3e:41:dc:db:54:
88:a1:2a:95:3f:4b:d1:57:78:61:82:4b:42:75:b0:
c3:5b:97:ca:fd:25:50:5c:a5:f8:28:20:e3:86:f1:
7e:63:eb:e7:34:60:15:e3:7a:91:cd:8c:e1:bc:f0:
ee:8a:85:ac:f5:2d:ae:ea:c9:c3:56:ba:63:3a:9f:
37:b1:b2:67:de:bb:40:91:b7:23:a5:65:09:2a:4a:
d0:e8:4c:e6:c1:4e:a5:21:2c:d1:e6:bd:a2:67:d0:
11:a9:63:92:9d:88:bb:8a:61:ba:fd:04:0f:c4:61:
ad:91:2c:a4:cf:84:81:f0:b1:68:b7:13:5f:24:7e:
a3:28:e3:3e:56:e2:47:0f:5f:e2:c0:0a:fa:11:00:
ac:a1:f5:f0:78:72:16:42:dc:4d:80:ca:4d:92:a0:
62:1b:92:be:cc:b9:0f:c8:77:af:19:82:17:c2:b8:
95:07:28:0a:83:0f:35:f4:24:8f:e9:03:2a:24:00:
9d:67:74:79:0a:24:05:86:cc:ae:a0:d0:fb:82:29:
a6:8f:29:d8:0b:6f:98:99:0f:bc:bf:90:e7:59:72:
63:5e:48:43:4a:c8:f1:43:24:98:3a:88:9c:63:9c:
d1:f3:f0:67:39:60:53:67:9a:c5:1a:71:c0:6b:17:
27:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:21:A4:DA:A7:DC:F4:A4:CB:08:AC:47:47:37:5F:69:8A:AE:86:43
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/80f42c-d249-4461-9fd7-4d2a6334de77/1/YCGk2qfc9KTLCKxHRzdfaYquhkM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:9e8::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208447
Signature Algorithm: sha256WithRSAEncryption
06:96:6a:f9:d3:16:c9:15:d8:24:27:bc:ad:e7:38:b0:26:60:
3c:84:41:20:14:73:c7:19:2c:ca:c7:53:fb:2f:52:bf:47:71:
59:86:23:a0:06:9a:74:a6:e3:37:89:f8:a5:19:1b:71:6a:1f:
1e:50:f0:4d:0d:f5:b7:37:5b:b1:d2:fa:63:e1:7e:96:4c:a7:
de:11:92:98:8a:bb:c5:ae:c7:38:f2:a2:aa:26:5f:44:ab:82:
51:69:6f:f7:be:10:c1:00:92:ed:68:9d:bc:2c:44:bd:38:c3:
97:e4:38:a2:57:3c:04:3d:a6:76:d5:ad:f3:b5:17:9d:07:38:
d3:ab:1d:9c:bb:cf:0f:7e:85:42:21:55:a0:0e:20:c6:2c:e1:
43:60:ee:f4:b2:c1:b8:d9:e0:53:2a:e0:e5:e3:90:c4:c6:59:
c2:98:e2:be:62:da:81:90:61:ea:a1:ad:58:ef:5d:0a:27:a5:
a8:c0:ad:18:cd:dc:e6:0d:b1:26:4a:02:04:ea:28:86:82:73:
c8:92:b5:62:98:87:02:24:03:58:11:ae:dd:4a:09:67:41:ed:
b6:2e:dd:f2:6d:2a:6d:33:db:c9:1a:9a:da:65:14:c5:f7:52:
3f:e3:ec:7b:26:1b:46:8f:f6:6c:e6:4e:7a:48:ad:60:e1:26:
6b:27:5d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:46:29 2025 by rpki-client