Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_VOKrk7E0KLzwKZfifSHRrUV5Xs.cer
File: _VOKrk7E0KLzwKZfifSHRrUV5Xs.cer (raw, json)
Hash identifier: oNcxt5ve1c80BvZ+A1E2BAtJO2EN/OJtGmvfV4FiCy8=
Subject key identifier: FD:53:8A:AE:4E:C4:D0:A2:F3:C0:A6:5F:89:F4:87:46:B5:15:E5:7B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221FC8E3396DB9DB991F62E2CE4635E5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/_VOKrk7E0KLzwKZfifSHRrUV5Xs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:15 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 205604
IP: 185.212.64.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:c8:e3:39:6d:b9:db:99:1f:62:e2:ce:46:35:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd538aae4ec4d0a2f3c0a65f89f48746b515e57b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2d:07:bc:fa:fc:a8:dd:aa:9f:dc:33:98:c1:
a9:cd:ba:90:db:5a:4e:c6:c5:73:60:39:a1:01:92:
e3:88:67:76:33:5d:e3:e2:86:25:bf:0e:ea:39:c7:
26:71:9e:08:5d:d8:a9:18:0b:2c:c1:3e:ea:3f:5c:
9a:ed:3f:c1:89:cb:05:46:c2:7e:23:4d:af:ec:56:
5e:a1:d2:b4:ea:9f:d2:c6:ca:49:08:18:f2:81:eb:
2d:3a:f8:91:d6:44:84:d9:62:2c:c3:92:fb:dd:ca:
f8:08:3b:07:8c:51:7e:d9:71:0b:86:40:5e:70:e2:
3e:7c:56:2e:d3:72:e7:2b:48:ad:b3:b2:7b:f6:59:
7a:a4:d8:d3:be:a3:ee:28:e7:c1:35:1f:00:ba:b1:
17:c8:5e:38:5d:e6:b9:5b:78:b5:a1:e9:88:2d:65:
ac:7c:ed:ef:b0:72:53:8d:47:f1:b4:00:02:24:b7:
c9:71:a6:c2:80:46:13:db:c4:c8:e2:54:7d:20:16:
ee:60:e9:f6:9f:23:49:80:27:c1:f2:2d:9d:06:28:
66:23:70:11:c9:21:d2:3c:9c:1f:e9:d8:7a:bf:e3:
8d:ba:ea:99:76:d4:de:90:fb:7f:65:8a:c3:8a:fd:
1d:2f:0c:6f:56:c6:f7:3a:37:92:2b:c2:dd:02:6c:
86:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:53:8A:AE:4E:C4:D0:A2:F3:C0:A6:5F:89:F4:87:46:B5:15:E5:7B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/_VOKrk7E0KLzwKZfifSHRrUV5Xs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.64.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205604
Signature Algorithm: sha256WithRSAEncryption
40:cb:c9:08:75:5f:30:79:3d:28:a8:75:4c:81:6b:38:9c:fc:
81:59:10:f8:e4:87:eb:0d:28:47:09:b7:d3:e9:1a:f1:44:0b:
f4:a4:43:11:17:8c:79:0a:2f:59:7c:da:29:11:1d:c7:b1:5e:
55:89:65:5a:70:c2:b1:62:93:1f:59:4e:cd:20:d2:93:32:9c:
bb:02:4a:c5:3d:de:0f:eb:fa:95:5b:f7:ac:24:ef:67:b4:d2:
09:a4:92:a2:5e:ec:99:b5:11:e2:ab:d3:86:da:e1:2d:2a:62:
4f:3c:f8:ae:c3:dc:6d:dd:7c:27:45:9d:71:57:9c:cd:68:dc:
78:cc:72:93:af:b5:f9:7f:86:9c:95:f7:fa:81:9f:2a:45:60:
7b:ab:51:4e:af:88:4a:fa:60:f8:91:61:10:ae:ad:2d:df:78:
3a:ed:e1:87:ae:59:3a:f6:d5:48:04:a7:2b:04:b7:3f:43:26:
44:bb:9a:ad:6f:0f:0b:e5:ee:31:ad:13:45:50:97:58:79:c4:
2c:88:7c:0f:d1:4f:d5:d7:57:26:5e:fd:0a:76:bd:44:b2:bd:
21:4b:50:ed:8e:a7:77:94:6f:fd:3f:30:41:e6:3e:9f:05:cf:
c2:1b:60:bd:b3:b0:aa:26:8c:b5:fd:c1:e0:54:b4:68:27:d4:
13:c8:87:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:41:59 2025 by rpki-client