Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_s8oKCHaV19okXZHzz4YmPnQpio.cer
File: _s8oKCHaV19okXZHzz4YmPnQpio.cer (raw, json)
Hash identifier: wklw/D1UExjeiGH+PE7wFQ/jr3zH5T7Dxil+KWJ4uh8=
Subject key identifier: FE:CF:28:28:21:DA:57:5F:68:91:76:47:CF:3E:18:98:F9:D0:A6:2A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B1D653456307FB871AD052C7DAB3DD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:10 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 59560
IP: 176.116.145.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:d6:53:45:63:07:fb:87:1a:d0:52:c7:da:b3:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fecf282821da575f68917647cf3e1898f9d0a62a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:62:48:e4:11:4a:66:d7:e5:06:cb:7a:7b:84:
64:0b:06:d2:9a:07:51:b7:75:27:56:74:32:1e:1b:
43:db:4f:84:a3:78:ce:c9:9a:21:90:99:42:cf:77:
8c:0e:60:b4:2b:66:48:08:db:b4:fa:c1:f7:00:3c:
7d:40:be:0f:45:0e:05:1e:9e:32:48:87:a5:09:41:
ff:85:c3:c9:bb:13:b7:c7:50:35:06:31:79:3b:17:
4b:c1:3a:78:8d:70:cc:31:e6:f0:4a:75:32:89:fa:
0e:23:32:ba:ad:01:c2:25:4b:9b:12:09:8c:ba:e3:
ae:39:be:8c:13:99:00:63:b4:2f:6c:c4:e1:2b:1b:
00:56:c3:90:4d:71:4e:6e:61:06:44:d7:4e:5e:5f:
42:09:ad:19:96:87:81:63:7c:fd:c7:24:b1:14:5d:
55:fb:d9:80:62:ab:e2:73:1b:71:a2:f6:d8:2c:2a:
b6:11:bd:f5:a9:94:36:e8:e9:e9:6a:e7:2e:38:2e:
44:bb:4d:4e:6f:b0:8b:d6:ba:cc:8b:19:3b:4b:59:
e6:a8:89:6b:f8:fa:df:d5:97:63:01:3b:f3:13:db:
72:cd:32:85:af:cc:05:de:a1:ab:27:63:c2:ee:2d:
98:19:89:87:45:45:f9:26:92:e9:73:64:3b:aa:cc:
09:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:CF:28:28:21:DA:57:5F:68:91:76:47:CF:3E:18:98:F9:D0:A6:2A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.116.145.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59560
Signature Algorithm: sha256WithRSAEncryption
54:b9:a2:d0:11:9b:45:b0:98:83:a6:51:4a:51:bb:f6:0d:78:
4b:61:b5:e7:8e:b2:90:45:9b:50:11:26:cc:85:5a:53:ed:1d:
09:3a:94:67:86:81:34:69:26:ed:13:73:93:e5:06:a6:16:5f:
77:ee:fe:91:69:62:e4:81:8e:14:f9:ab:45:c3:45:49:70:c7:
b6:83:47:43:d9:79:38:c2:73:51:24:51:35:cd:2e:9d:4c:86:
f1:c4:e5:6f:34:1a:00:57:51:4f:86:c6:71:0d:1f:35:39:de:
c3:e0:1e:53:8d:f0:86:19:39:b8:a9:85:ee:52:f2:b6:99:cb:
78:07:aa:39:81:eb:f8:4a:bc:97:a5:2b:f0:33:5f:6c:de:3a:
4a:12:4c:41:9a:36:56:ea:ac:ba:77:85:9a:00:54:db:fd:7d:
2a:d1:e0:da:39:83:dc:a5:5c:96:52:be:57:67:39:ff:9e:be:
8f:70:55:66:0f:9c:d6:1f:51:15:5b:89:e1:9b:9c:ab:8b:e2:
51:b8:7b:58:3c:ab:d8:6c:c3:0c:a7:65:6c:82:9b:2e:8c:8c:
9a:2e:be:a3:5d:46:15:db:d2:bb:2e:e0:56:b0:ed:34:30:88:
2e:ee:19:3b:af:7b:74:39:69:ce:33:ab:ee:ab:8b:5d:01:17:
bb:ce:f6:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:52:17 2025 by rpki-client