
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Yc4uV_b4YsowVuX9Wz5urDVUBAE.cer
File: Yc4uV_b4YsowVuX9Wz5urDVUBAE.cer (raw, json)
Hash identifier: 70PDPq1Fk8UpCIEEbf1urwtVqqK06nSCcqtuu0rFAMs=
Subject key identifier: 61:CE:2E:57:F6:F8:62:CA:30:56:E5:FD:5B:3E:6E:AC:35:54:04:01
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942444B2258ADB481F8272D4C829F32B1A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/Yc4uV_b4YsowVuX9Wz5urDVUBAE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:47:49 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 38938
IP: 91.240.164.0/24
IP: 185.41.108.0/22
IP: 193.33.58.0/23
IP: 2a04:8900::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:b2:25:8a:db:48:1f:82:72:d4:c8:29:f3:2b:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=61ce2e57f6f862ca3056e5fd5b3e6eac35540401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f4:1b:95:15:eb:b8:93:88:1e:23:dd:09:f3:
23:41:e8:74:c3:ac:56:e5:68:ee:55:40:08:c2:d6:
f1:bf:e2:af:97:c4:ee:2b:a8:e6:cb:16:5b:be:d8:
d7:3d:9e:07:1f:d4:e6:bc:7e:62:02:28:a3:74:33:
1b:71:b3:4f:a5:39:7c:de:bb:0b:e2:db:f2:75:e9:
f1:63:c8:03:24:8c:1f:b6:f9:16:a4:51:9f:fa:c8:
11:ef:3d:ea:12:c3:b6:6d:2d:19:f0:7d:b3:44:e4:
a8:2b:e8:f1:bb:a3:41:64:c5:63:d4:1b:cc:be:5c:
76:7b:40:f7:44:e6:ce:a1:c4:cf:b8:3a:51:17:49:
c9:5d:07:75:b1:4f:70:78:c7:d5:8d:fc:3e:6c:82:
c2:0b:42:28:1d:f7:89:17:75:47:2f:a1:4e:8a:29:
6c:45:83:63:e5:b1:0d:2e:f7:ba:a9:4c:1d:b4:94:
87:6d:c8:db:fa:77:16:40:3e:0d:b7:d2:9b:43:be:
f4:91:5e:24:e7:2c:54:3a:17:8f:28:4f:ff:c9:14:
95:00:5a:85:1e:fc:76:c4:39:a4:a2:17:52:a3:7f:
b2:c6:97:3a:14:fd:50:0d:6a:b4:e9:71:eb:f8:90:
8a:ef:0d:b9:68:03:69:68:aa:04:a6:ca:6d:5c:ba:
c4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:CE:2E:57:F6:F8:62:CA:30:56:E5:FD:5B:3E:6E:AC:35:54:04:01
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/876203-e8fd-472f-afc2-990385559d1c/1/Yc4uV_b4YsowVuX9Wz5urDVUBAE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.164.0/24
185.41.108.0/22
193.33.58.0/23
IPv6:
2a04:8900::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38938
Signature Algorithm: sha256WithRSAEncryption
87:97:b3:ed:80:d9:42:8d:4f:c6:05:ab:ed:eb:25:ca:67:b1:
cc:b1:af:94:56:b0:bf:0a:19:c7:80:78:48:e0:03:de:7e:23:
c4:61:6f:a0:1a:7b:78:63:d6:ac:d6:bb:22:58:28:70:12:12:
19:18:cc:dd:12:27:35:0c:dd:89:3b:ff:68:2a:b6:d2:3c:47:
c0:d8:5d:4f:1a:0a:94:63:f6:11:70:55:b7:24:82:c4:36:15:
09:fa:60:3b:b8:8d:cc:73:4d:ec:e6:bd:16:41:b8:14:7d:19:
0d:e0:bf:38:24:5e:84:e2:05:ff:d6:a0:e7:d3:19:4d:27:1e:
dc:f8:cd:e4:ec:14:a0:ee:ed:32:75:81:38:46:9b:62:1d:72:
8e:d4:4c:3e:d3:a3:07:bb:6c:7a:87:0c:b5:3e:2f:05:ff:ee:
98:d1:3d:65:b2:15:9b:0e:17:8b:36:03:2f:03:c0:65:7a:28:
f2:eb:cf:8c:cd:b0:46:78:7a:88:05:0e:fb:89:b3:34:2b:b4:
d9:1d:d4:c8:d2:a6:9c:fa:6a:57:47:aa:3c:85:88:51:a2:90:
6e:78:0c:79:41:4b:96:45:f2:46:25:df:2e:ab:b6:d2:43:24:
b3:42:82:af:30:a7:08:38:b2:d7:bd:32:8a:33:9f:e0:a1:19:
e4:4d:5d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:47:10 2025 by rpki-client