Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_5lGMPx0VWzlCAJocJAVRft7BM0.cer
File: _5lGMPx0VWzlCAJocJAVRft7BM0.cer (raw, json)
Hash identifier: EzQkeGE0VgLro0GPfzBGdd+qX20zEOFZJjfZ1XBR6mA=
Subject key identifier: FF:99:46:30:FC:74:55:6C:E5:08:02:68:70:90:15:45:FB:7B:04:CD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228E2B4E09C60C2F11453254B2311715
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:50 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 16360
AS: 47965
IP: 2a0c:d280::/30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:2b:4e:09:c6:0c:2f:11:45:32:54:b2:31:17:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ff994630fc74556ce508026870901545fb7b04cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:da:56:03:f2:5a:55:c4:a9:2b:32:d6:49:8f:
88:aa:0e:48:35:8c:cf:51:2f:e5:06:4d:75:57:50:
9b:ea:37:ea:9c:5c:7f:3c:72:a4:8b:6e:de:b7:ca:
a4:ed:22:fb:25:04:fd:99:1d:77:32:5e:1e:16:b6:
17:f7:c3:c5:83:3a:7b:05:61:ac:b1:bb:b4:41:ad:
af:af:35:34:42:dc:67:75:66:37:c4:77:73:a8:81:
58:76:8e:d1:45:27:88:54:d2:da:c6:7e:4d:19:f5:
06:c5:0f:e6:1f:10:4d:00:3f:8a:7b:8d:81:2b:2d:
7a:4a:5e:ef:7f:3d:07:c6:5a:fd:96:1d:8e:78:98:
8b:a0:e2:6b:9c:2b:41:b8:cc:c9:39:6f:48:a9:9d:
98:e6:3a:21:2d:8c:a2:66:65:23:6f:8c:42:2e:4e:
cf:33:b3:32:d3:aa:93:cc:ba:19:09:15:e0:74:3a:
18:06:3d:7d:3a:41:33:d4:28:e5:0f:f9:7a:bf:50:
55:04:5b:29:c8:fc:0c:cf:5b:5f:63:66:52:ef:8c:
84:86:cd:9e:78:ff:cc:d4:f4:5a:c4:cf:66:44:c6:
76:ef:98:86:1b:f8:32:f8:42:b7:ba:09:6e:e8:a6:
d3:f2:33:62:37:06:b6:7a:59:8b:68:80:48:35:fd:
93:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:99:46:30:FC:74:55:6C:E5:08:02:68:70:90:15:45:FB:7B:04:CD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/db5651-95f1-47c1-acf0-eafca5854257/1/_5lGMPx0VWzlCAJocJAVRft7BM0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:d280::/30
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
16360
47965
Signature Algorithm: sha256WithRSAEncryption
42:81:92:ab:26:30:70:b1:8e:be:35:a3:97:dc:df:22:38:ad:
42:e2:a4:80:33:47:4c:df:31:7c:8c:d9:6a:d8:2e:eb:a9:70:
67:41:a2:0d:6c:7d:c4:ba:05:5f:af:df:ec:75:9d:0b:0a:5c:
cf:97:09:65:69:4f:7c:26:91:5d:3c:0b:4c:04:58:34:c4:73:
b3:94:0c:10:fc:41:f0:df:5d:13:ff:de:23:10:d2:e8:d0:88:
42:c8:ae:fd:7c:2f:f9:bb:11:5a:fb:2b:39:63:97:fc:3e:36:
eb:1d:76:d8:56:7b:db:c7:51:9b:43:c8:ea:1d:94:fc:7d:44:
a9:d1:9c:92:df:29:79:c5:9f:52:14:4c:28:57:4d:8c:36:fd:
dd:24:05:dc:60:00:21:0d:50:3c:0f:ed:fc:43:a4:aa:65:6d:
cc:12:9a:83:11:44:0a:b0:13:d2:5d:b3:30:d2:a7:5a:ee:c4:
e6:7d:db:f9:dc:be:68:2f:b4:90:a2:83:5b:0e:79:99:a5:84:
c0:f5:8d:15:29:60:47:45:e4:ab:06:46:81:0e:b0:e0:3b:24:
f2:d3:83:8c:13:b6:f8:fa:e3:ce:7d:25:c0:60:5e:f1:8f:c2:
3f:4a:36:68:fe:39:fe:50:5d:de:e1:a1:da:90:84:2e:1e:d8:
48:73:20:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:51:06 2025 by rpki-client