
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YGubohnjYrKoJ3IKBcQ8fRwfqO8.cer
File: YGubohnjYrKoJ3IKBcQ8fRwfqO8.cer (raw, json)
Hash identifier: klQwuu5+cj1MfxI667huzEMyOFuEL3wxLiuDkOphsuA=
Subject key identifier: 60:6B:9B:A2:19:E3:62:B2:A8:27:72:0A:05:C4:3C:7D:1C:1F:A8:EF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C7A484B00C96B1BE9F5A882C6DC9D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:48:07 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 202767
IP: 185.135.116.0/22
IP: 185.155.60.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:7a:48:4b:00:c9:6b:1b:e9:f5:a8:82:c6:dc:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=606b9ba219e362b2a827720a05c43c7d1c1fa8ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:23:85:a1:cd:ad:8f:f3:ee:1b:97:1b:d8:fa:
e6:5f:b8:d1:e8:17:13:44:12:c1:2a:6e:a0:5b:05:
77:cb:fa:2b:f6:e4:76:fb:88:5b:f2:63:1c:f8:2a:
9d:ed:3b:7e:f1:f5:25:4e:f9:61:fc:0e:5b:68:14:
e6:cc:23:6c:ea:55:9c:69:ad:92:84:3c:77:88:d3:
6f:87:8a:b1:0f:a5:b7:cc:79:16:36:7d:f2:71:ae:
96:03:b1:4b:a2:33:7c:5a:91:53:8a:31:b8:07:cd:
c3:c4:3e:40:c2:8c:5a:4c:da:08:2d:65:a2:99:7b:
e3:d9:0e:81:01:81:87:bc:28:a3:93:a4:ae:db:fd:
65:e7:fc:c4:26:d4:9a:a5:ea:f2:93:f8:4e:26:ae:
bc:b2:5c:14:77:f4:fa:e1:1d:63:c2:5d:f5:d8:af:
37:39:b1:60:a2:0d:d2:c2:95:d8:36:4d:db:88:55:
b1:81:fa:38:6f:53:43:45:eb:67:e7:f6:00:9e:14:
37:3a:e3:ca:29:b9:2c:da:3f:94:5b:34:da:21:39:
63:98:f4:29:4d:4a:ef:1b:77:1b:07:51:3b:55:b8:
5a:ef:b0:9c:e8:f2:1d:64:e3:c2:e3:79:fb:7f:50:
b3:3b:3c:93:63:59:1e:5e:bc:1a:0d:a4:be:5f:2c:
e1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:6B:9B:A2:19:E3:62:B2:A8:27:72:0A:05:C4:3C:7D:1C:1F:A8:EF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5a0af8-24b2-4154-a412-b4fb5708db15/1/YGubohnjYrKoJ3IKBcQ8fRwfqO8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.116.0/22
185.155.60.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202767
Signature Algorithm: sha256WithRSAEncryption
93:2e:9f:e2:1d:42:bc:db:57:eb:1c:a8:08:5d:90:14:66:35:
5a:98:9b:fe:74:ec:52:79:dc:21:1c:f9:17:03:4e:60:2b:8f:
ad:dd:bf:15:32:42:91:cc:62:61:a7:5f:7e:10:d3:9b:e2:b9:
f5:0e:d1:02:25:f6:6b:72:40:97:e3:7b:5a:59:c5:7d:4e:84:
01:2b:26:36:13:89:fb:35:69:82:04:5c:5e:af:ff:43:b1:e2:
de:54:6b:04:db:fa:cf:ed:4f:d3:eb:c6:d3:0d:56:61:e6:6e:
06:c0:5c:7f:79:c1:c9:48:90:5b:5c:40:b1:a8:7c:18:4d:5b:
c8:4e:18:a5:43:af:3f:b2:1e:12:b5:19:d0:2f:05:b9:6f:5c:
ed:47:da:6c:14:2b:40:05:2f:f8:c8:4a:a7:e7:4d:eb:d9:c6:
44:8f:4f:15:59:33:fc:83:0e:2e:cb:6d:69:6a:07:9e:ae:58:
86:49:4e:3f:6d:84:3e:23:a1:66:a3:67:e8:d1:1a:fb:4e:a1:
b6:16:86:fb:3c:c1:65:22:4e:b2:5e:13:f8:f3:23:60:41:0b:
d4:ab:83:d6:c0:20:61:a8:0c:27:e4:f2:e5:2c:3a:3d:38:c0:
7a:bd:57:8e:16:65:8d:6a:ad:ce:f7:4a:bc:91:70:2d:5d:f8:
2e:73:fc:bf
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:57:42 2025 by rpki-client