Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
File: _4fgqwMrDAXrXnTMLAhpjdMk2WM.cer (raw, json)
Hash identifier: GYFIy1Jr5kuT4+PpFCJWjboKqzob2VLMQJEB/YLX6AQ=
Subject key identifier: FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942747E62DD06AC760A8A6954BAA2401A8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:50:10 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 35372
IP: 2a0e:6480::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:e6:2d:d0:6a:c7:60:a8:a6:95:4b:aa:24:01:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:50:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a3:49:a2:5f:32:84:73:7d:99:d3:0f:9a:45:
72:7c:73:ca:db:eb:0d:60:f2:42:86:15:4d:27:e3:
b7:ae:6e:9f:ae:b9:74:48:46:f1:e6:bc:70:bf:36:
19:e0:cb:bc:8c:4f:0f:33:4e:32:84:52:a4:a5:94:
9f:50:02:5a:6e:09:f3:41:8e:30:ae:0b:26:75:85:
54:6b:dc:8e:fa:0b:6a:e8:62:ad:3e:62:90:e7:72:
ed:5b:b1:90:8c:e3:2d:e6:49:99:ae:49:60:40:3f:
aa:ef:3f:54:e7:62:fc:a0:57:35:de:95:02:1a:52:
b0:66:18:a4:18:04:43:ee:44:81:f3:a4:54:15:eb:
39:12:11:13:bd:c1:22:d3:16:03:75:b9:6e:20:ac:
32:18:3b:45:eb:f0:08:39:fb:71:78:ca:ae:c6:54:
97:c2:42:46:60:1e:c1:08:27:d5:59:30:78:5d:c0:
f6:30:ae:70:41:a7:86:9b:94:7e:04:74:7c:be:18:
97:20:f5:c6:89:39:f3:96:2a:eb:e4:82:5f:3f:6a:
50:61:c0:8a:a8:9a:86:45:ff:26:37:96:1e:5e:fd:
dd:34:53:9a:47:1e:0c:28:88:7f:f1:7d:d2:39:83:
17:30:ca:40:c0:7a:6a:56:a0:5b:19:3b:87:6c:6c:
d2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:6480::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35372
Signature Algorithm: sha256WithRSAEncryption
38:8e:3b:bf:41:39:9b:14:ea:8f:b3:e8:65:17:77:97:6d:f1:
19:03:42:20:b5:ea:ad:e1:c7:51:de:39:cb:8a:9e:2c:b3:26:
f6:2a:7a:8b:88:98:02:62:4a:34:7e:f6:e5:8b:c7:12:eb:e6:
9c:67:1b:e0:d5:40:86:a7:08:58:66:86:02:65:e7:8e:d9:a4:
4a:2b:9f:32:0c:0e:7d:85:4c:d9:77:a9:0c:21:e7:95:af:e5:
48:52:ab:32:09:2b:c8:80:64:7b:44:fd:94:dd:ea:50:64:3c:
9f:d2:25:73:6d:de:1f:64:37:72:b8:49:05:76:51:fb:ee:59:
f2:95:cf:48:c3:f8:8b:d4:68:0a:3f:38:07:b5:29:ae:d7:c9:
a8:11:bd:a5:7d:d6:1f:93:63:e6:4f:98:a3:b0:0e:9c:1b:93:
40:e6:68:77:90:5a:7d:93:64:2d:3d:6c:ae:e7:bf:1c:c2:41:
26:db:ac:f0:6b:bd:3d:e9:85:6e:50:e8:4c:58:2e:1c:2d:5a:
51:24:8c:40:df:71:88:8a:ed:b1:ed:f2:6b:c3:e8:a3:be:64:
6c:55:28:36:2a:73:7a:a6:84:72:12:61:65:ea:15:f5:f4:c7:
ff:d1:f0:74:d9:08:19:b3:39:40:e3:f2:62:45:12:84:a2:09:
33:e4:e1:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:15:13 2025 by rpki-client