Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YJDN0x06cdoc5KS9hfGYfjyk6vo.cer
File: YJDN0x06cdoc5KS9hfGYfjyk6vo.cer (raw, json)
Hash identifier: 0rjyCNfX6A73z2hx/U6MRXsVFbX+Red1QbOrU/BapeM=
Subject key identifier: 60:90:CD:D3:1D:3A:71:DA:1C:E4:A4:BD:85:F1:98:7E:3C:A4:EA:FA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942067FC57DC8EF20B2105DC9C5DEEFBF3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:47:53 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 21453
IP: 80.84.112.0/20
IP: 80.252.128.0/19
IP: 88.84.192.0/19
IP: 94.253.0.0/17
IP: 95.183.64.0/18
IP: 178.57.224.0/19
IP: 178.167.0.0/17
IP: 185.5.148.0/22
IP: 212.7.224.0/19
IP: 2a01:4200::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:fc:57:dc:8e:f2:0b:21:05:dc:9c:5d:ee:fb:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6090cdd31d3a71da1ce4a4bd85f1987e3ca4eafa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ad:07:46:e1:6e:61:db:ad:0a:77:dd:ae:db:
84:fd:3c:73:db:87:17:8f:85:73:68:b1:1b:3e:bd:
14:10:bf:da:50:58:30:ed:98:75:14:c5:ab:51:61:
f1:85:67:6b:d0:e9:0c:40:d9:1e:92:d9:b3:90:62:
4d:a3:7f:b6:22:4e:f4:5f:f0:47:14:a6:f0:89:e3:
9c:f5:8c:7c:de:20:e2:b5:76:88:d9:ec:f7:b9:53:
4a:31:36:82:a9:ce:1d:fe:05:e5:38:8f:c3:fb:b4:
1a:83:93:d4:9b:3c:28:8e:65:43:b3:59:2b:06:66:
c0:df:65:5c:8d:55:87:43:d5:7a:24:ae:a9:70:27:
f0:da:d4:7c:b1:75:78:02:bf:2d:1a:79:7e:a3:93:
5b:bb:36:14:70:ab:53:36:3d:76:3c:b6:db:06:fc:
bc:e6:f1:1e:51:09:e5:29:b2:76:df:d9:d3:41:53:
c6:d0:82:2f:88:e6:95:c5:4f:4d:89:12:9f:12:cc:
fc:d3:ed:b2:45:9f:3b:e0:9c:02:59:47:f5:16:f5:
8a:9f:2b:2e:2c:72:96:da:bc:ac:80:25:d9:3a:22:
52:0f:16:c2:44:cb:34:43:12:4b:68:60:70:1f:bd:
cf:7e:89:91:c9:43:dd:96:57:8a:c6:c3:96:2a:c5:
a1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:90:CD:D3:1D:3A:71:DA:1C:E4:A4:BD:85:F1:98:7E:3C:A4:EA:FA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.84.112.0/20
80.252.128.0/19
88.84.192.0/19
94.253.0.0/17
95.183.64.0/18
178.57.224.0/19
178.167.0.0/17
185.5.148.0/22
212.7.224.0/19
IPv6:
2a01:4200::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
21453
Signature Algorithm: sha256WithRSAEncryption
0e:f3:02:a0:d3:ab:74:80:ac:e1:a0:4c:a6:38:02:a9:d9:e9:
eb:09:ce:de:d6:0f:58:c7:da:e4:3e:b0:71:58:49:3b:d6:20:
5b:d7:c7:f9:c3:70:e4:a8:8e:48:14:64:f8:33:98:1a:48:6b:
a9:18:cd:a0:7c:2d:02:59:bf:c0:d8:fe:d4:38:63:46:f6:a4:
15:ea:e8:ff:8e:84:fd:2d:ec:b0:fe:4f:96:3d:2e:a4:2d:40:
48:ce:c8:b4:e9:96:f8:b3:48:d1:5d:57:f9:27:46:c7:81:9e:
e4:3e:66:a5:c9:b8:03:3b:65:74:06:03:10:74:fc:84:03:21:
e5:97:8a:13:37:83:32:19:f4:4b:6e:20:d9:93:74:e1:1e:3b:
2f:b3:ad:79:61:1f:cd:7b:8a:15:58:67:dc:2e:6d:0e:5f:d5:
93:e2:0d:30:77:2c:46:7b:01:45:2d:47:3c:41:2a:cd:1a:0e:
81:7a:da:6c:08:26:62:68:31:3f:6d:5c:fe:33:b4:10:eb:77:
30:ce:83:0e:92:5a:db:81:0d:3a:c0:be:3b:b6:c5:1b:29:a1:
6f:e0:de:a0:b6:93:b3:c1:ba:4d:71:39:82:08:6d:d5:bf:e5:
f4:a3:f7:d3:8a:5f:d9:2a:b3:d8:cf:a1:a2:6a:92:2c:0e:9a:
22:29:77:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:38:40 2025 by rpki-client