Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_sY8Uk5V3zS_dYKCd1PnenaZx6I.cer
File: _sY8Uk5V3zS_dYKCd1PnenaZx6I.cer (raw, json)
Hash identifier: GqTfOo4nZ+0V0hEfaJ6OC/L6h++Ytjtp21DrBcOuzwk=
Subject key identifier: FE:C6:3C:52:4E:55:DF:34:BF:75:82:82:77:53:E7:7A:76:99:C7:A2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA6DF6578C4C88E79F0136C8E60B45
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:48:13 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 31396
IP: 193.30.42.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:6d:f6:57:8c:4c:88:e7:9f:01:36:c8:e6:0b:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fec63c524e55df34bf7582827753e77a7699c7a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:77:f5:05:fe:64:a2:f9:a1:f6:29:33:52:1e:
91:be:24:b1:34:7e:37:43:71:b9:ac:96:1d:14:6c:
64:08:ae:fb:87:3a:37:23:19:23:a5:df:51:33:18:
90:2d:87:22:a2:4c:f1:b3:70:30:e8:5d:a4:ba:ef:
c5:72:79:a9:87:bf:b4:6d:e0:71:0f:45:95:3f:42:
21:2a:84:8c:79:05:8c:2d:1f:16:e2:92:2e:b5:2b:
a4:b2:ed:4d:e1:ed:25:4a:c8:58:72:27:d6:b7:c2:
3a:79:8a:1c:96:b6:09:a3:0a:54:6b:0b:73:ad:7a:
55:22:93:90:17:d2:6a:ce:49:4c:8c:48:2a:1a:90:
53:ea:41:a9:32:89:ef:c7:42:40:67:78:f4:35:ef:
b3:0f:a3:c3:5a:03:01:01:a0:30:35:2f:56:e2:01:
db:fb:95:33:7a:f7:5e:a6:bd:f5:a6:08:69:2f:63:
e2:a1:17:c5:ab:e1:61:b4:54:39:54:df:e5:b8:dd:
d3:04:4f:a6:4d:66:14:15:ef:aa:22:a5:a0:f4:16:
95:1c:dc:cb:6b:9e:c5:25:2b:cb:45:58:2f:f7:42:
3c:59:be:0a:d0:36:1f:92:8a:c8:e3:57:6b:a1:36:
b2:f1:ea:10:fd:52:ca:76:94:aa:27:6b:82:82:2f:
28:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:C6:3C:52:4E:55:DF:34:BF:75:82:82:77:53:E7:7A:76:99:C7:A2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/cca115-2b93-4afd-ad02-b31df7117715/1/_sY8Uk5V3zS_dYKCd1PnenaZx6I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.42.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
31396
Signature Algorithm: sha256WithRSAEncryption
74:4e:58:cd:78:4b:ca:d2:6c:6d:d4:92:5f:51:72:38:be:2e:
8c:bc:50:5a:e7:7d:e3:d9:3d:68:66:7d:39:2c:eb:58:38:49:
c2:55:5b:37:94:6e:ad:6c:e2:12:39:96:03:33:33:4e:25:0e:
43:8a:61:f7:89:60:c9:f3:0d:ee:9f:73:42:ff:25:fb:8c:f1:
b1:45:f6:68:d3:57:6e:c8:a8:92:f5:14:d3:a6:3c:95:ae:e0:
ed:49:f1:f9:f8:36:01:35:65:15:82:4d:61:ea:95:a1:1b:6b:
41:a3:fc:26:0a:1f:47:9d:b7:ef:da:a0:9b:7d:87:80:b6:f5:
37:8d:b6:15:c7:c1:22:9b:90:c1:b3:1a:e6:6b:6f:2d:85:6f:
5c:2d:41:33:38:ca:86:28:ba:be:2b:73:1f:4a:96:8a:07:d9:
c9:56:cb:06:76:2a:86:e6:9f:4b:dd:23:68:4a:5a:3c:49:60:
9b:a4:2f:86:ec:3b:9e:b2:4c:58:ec:1f:fc:ce:a5:91:c9:1f:
c0:95:c8:4c:5b:78:e7:38:27:e6:42:91:a3:b1:60:0e:bb:b9:
40:1d:8e:be:05:07:f0:f1:6e:0c:05:ec:98:09:c7:3a:77:db:
ab:58:1f:2d:23:94:e7:fe:6c:d0:a3:a2:26:bf:f2:6b:36:f7:
47:8f:e6:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:34:18 2025 by rpki-client