Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_z8mtUHwu6ilznHqU4EbRsFlerM.cer
File: _z8mtUHwu6ilznHqU4EbRsFlerM.cer (raw, json)
Hash identifier: nLJbMDOoX/DewIBcSswwq+mHV5Xubd2AcODBka+MaWA=
Subject key identifier: FF:3F:26:B5:41:F0:BB:A8:A5:CE:71:EA:53:81:1B:46:C1:65:7A:B3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942144268569B817718635123901145506
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:22 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 34146
IP: 78.40.72.0/21
IP: 185.200.220.0/22
IP: 217.197.208.0/20
IP: 2a02:448::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:26:85:69:b8:17:71:86:35:12:39:01:14:55:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ff3f26b541f0bba8a5ce71ea53811b46c1657ab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:25:92:85:56:6e:00:43:4e:4b:2d:70:00:68:
ab:2c:c3:2b:fd:c8:58:e1:90:f8:7c:b9:e6:b1:3c:
23:d5:d7:07:d7:29:94:cd:ae:52:d3:f0:40:6b:70:
1f:9c:cb:f1:3c:ea:6a:77:b0:d3:80:1b:79:37:e1:
0a:36:02:f4:ea:59:f9:89:eb:4d:c3:3c:f6:0d:a9:
6c:cd:6d:f9:2c:44:fc:6d:44:1f:40:cf:95:5e:79:
8b:6a:44:02:80:a5:6c:6f:3b:b6:ac:a3:07:b8:2f:
d1:2c:06:60:fe:a7:f8:0f:f5:f7:e8:43:58:44:46:
66:cb:47:1e:48:56:0b:31:d6:e0:46:d7:a7:55:14:
35:fa:c0:dd:15:5a:c0:0f:6a:a4:16:93:e3:99:39:
09:81:d8:97:8e:a3:e9:0d:08:30:c9:9d:94:f1:e1:
c5:65:c5:58:da:01:ed:30:60:31:a1:eb:2a:d4:ed:
d1:ef:0a:13:48:10:ab:e0:4f:64:6f:75:ec:87:d6:
de:e9:75:db:34:65:ee:29:32:dd:c2:f3:5c:8d:a8:
20:26:a0:a5:17:d5:de:f9:09:e5:9b:ef:68:8b:e8:
e5:ed:dc:73:e9:11:eb:7c:8d:42:da:e3:2e:44:a7:
ce:82:28:d4:d6:3a:16:3c:ea:80:17:62:45:5c:93:
ef:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:3F:26:B5:41:F0:BB:A8:A5:CE:71:EA:53:81:1B:46:C1:65:7A:B3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.40.72.0/21
185.200.220.0/22
217.197.208.0/20
IPv6:
2a02:448::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34146
Signature Algorithm: sha256WithRSAEncryption
88:b9:c0:e0:b7:fd:2a:6d:f5:8c:90:84:d8:00:4c:52:47:8e:
25:29:53:29:cd:81:a8:0b:cb:07:cb:a0:d5:19:2c:5d:73:0b:
57:32:cb:84:d9:12:83:32:b6:a6:89:ea:85:0d:8a:e2:0f:0d:
06:bf:b7:3b:2b:56:29:29:94:e8:c5:f7:b5:f2:bc:9b:f5:b8:
c4:11:5d:b6:23:0f:99:64:dd:f9:ae:e8:c2:bd:5c:24:f9:9d:
06:5f:e0:e4:7a:b4:fe:51:ea:bd:83:0e:11:3c:a9:0a:17:64:
bf:d4:d1:7d:02:26:1f:3a:d7:54:92:18:46:eb:76:af:62:45:
64:60:38:13:40:9c:bc:f2:5e:40:79:ca:14:02:53:20:e9:ad:
98:db:f8:a0:a7:65:16:f0:86:a3:82:0d:0f:d4:ff:77:e9:a1:
9d:be:06:29:f5:6a:c4:e8:20:80:de:8c:2a:37:3a:5d:4e:f0:
29:1f:09:ad:d0:76:a9:e2:e5:28:51:8e:a6:96:3b:c5:ef:9a:
21:8c:ec:4f:57:85:c7:ed:05:bb:83:0a:61:38:af:4d:f4:d9:
21:19:7b:37:f7:25:c0:ef:e8:4e:05:ff:3d:7f:33:f4:30:c3:
bc:66:8f:68:71:a2:80:7e:27:59:2d:2e:2b:6e:22:fb:f7:82:
0d:96:d2:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:43:55 2025 by rpki-client