Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZmA0ymoWu9AUSr31zyRY-WixWJw.cer
File: ZmA0ymoWu9AUSr31zyRY-WixWJw.cer (raw, json)
Hash identifier: ghNFjtyFvrBNT3kZd28vJZjH48V17wgY8wHM6Jm47oM=
Subject key identifier: 66:60:34:CA:6A:16:BB:D0:14:4A:BD:F5:CF:24:58:F9:68:B1:58:9C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194206824660B69953DF8555BA8653FCBC9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:48:03 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 8814
AS: 34170
IP: 80.69.48.0/20
IP: 91.135.240.0/20
IP: 92.39.88.0/21
IP: 158.181.32.0/20
IP: 185.92.224.0/22
IP: 185.105.196.0/22
IP: 212.47.128.0/19
IP: 2a05:8200::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:24:66:0b:69:95:3d:f8:55:5b:a8:65:3f:cb:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=666034ca6a16bbd0144abdf5cf2458f968b1589c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:62:d1:36:2c:61:e5:01:f7:db:74:3a:08:2e:
1a:d2:64:5b:77:61:7f:05:bf:62:5d:9c:f2:0b:d5:
c3:4c:71:44:e8:cb:da:95:1a:70:5e:6e:5a:c3:a5:
6b:ef:b6:31:35:48:f2:d1:f3:8a:59:c8:0b:04:e4:
72:77:a5:07:2c:98:ca:c7:6a:0f:a1:b9:92:d5:b8:
42:55:1e:a1:ad:76:21:6e:5d:c4:a1:1c:35:b8:0e:
34:e7:17:97:81:e3:39:53:ee:14:13:d1:5a:00:8c:
0f:a9:31:f8:f2:26:f1:53:7e:e0:57:fb:f7:8e:a2:
09:d9:f4:bd:15:3b:e0:c7:f4:01:f4:cb:5d:6e:9c:
18:88:59:a2:a9:f9:eb:d0:a8:7f:9e:20:ca:92:45:
18:0a:b3:a0:bc:4f:43:17:96:10:15:f7:80:8a:a8:
81:7c:68:8f:03:76:c1:1f:3d:47:af:b4:99:2e:db:
8d:e0:28:bc:c9:24:74:71:ad:d7:79:f4:58:3e:d1:
d9:6c:10:90:19:3e:69:4f:91:28:a7:03:c7:6e:7f:
0d:a4:64:2d:5f:98:f7:a8:6a:1a:a8:a6:eb:cc:15:
28:d4:1f:ec:18:0d:36:35:88:4d:3a:e8:7a:81:83:
3f:41:e4:fb:38:ab:d8:94:1a:eb:0c:11:b4:5d:ec:
f5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:60:34:CA:6A:16:BB:D0:14:4A:BD:F5:CF:24:58:F9:68:B1:58:9C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f4b733-29ad-4d56-b9d2-5d48bcd7c1dc/1/ZmA0ymoWu9AUSr31zyRY-WixWJw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.69.48.0/20
91.135.240.0/20
92.39.88.0/21
158.181.32.0/20
185.92.224.0/22
185.105.196.0/22
212.47.128.0/19
IPv6:
2a05:8200::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8814
34170
Signature Algorithm: sha256WithRSAEncryption
95:60:fd:54:6d:af:c5:61:84:fb:c2:f8:de:db:2f:0b:b9:29:
1d:47:7b:ed:85:c0:30:b6:a4:bd:73:7f:f4:1a:68:81:25:83:
11:06:d2:3f:95:05:40:8a:00:c9:5a:1d:83:77:2f:f8:56:61:
cf:77:b3:40:9e:4d:81:1e:30:8a:20:00:fd:4d:6c:9a:39:1e:
68:98:bc:e6:0e:6c:47:1e:5d:03:59:72:6e:70:c5:34:e0:66:
19:58:db:72:69:ff:02:61:45:3e:8e:39:98:1b:2b:88:19:d2:
f6:9c:42:67:c2:5d:78:64:2e:56:b8:4d:cc:d7:59:c9:9f:8f:
ce:86:00:b8:99:12:04:de:e4:f0:5f:13:f3:f0:ce:88:48:f0:
d3:07:01:b6:d3:14:95:f2:fc:2f:55:4f:a9:98:02:40:a0:cd:
fc:84:87:5c:a1:73:11:1d:a5:c2:8a:fb:45:b1:32:c7:9c:a4:
c2:f9:9c:cc:1a:64:ce:20:9e:50:a1:33:e8:2f:ad:23:51:cf:
e2:c1:e8:25:b5:51:3d:7f:7c:d9:00:7b:bc:45:b4:04:00:92:
ca:b6:45:ed:ce:1a:48:62:0b:a7:56:c0:74:bd:80:07:5c:f8:
a9:09:d4:7c:a7:64:9d:da:33:aa:66:0b:bf:ae:83:0b:9e:ac:
ee:8b:a0:2f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:15:31 2025 by rpki-client