Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a15HDpDV693Mqpz2uyLoneDZ8gc.cer
File: a15HDpDV693Mqpz2uyLoneDZ8gc.cer (raw, json)
Hash identifier: NAH37rtwqp8TqbIly8bH0GWZeaVWpC1Rcl0p5RWbkHY=
Subject key identifier: 6B:5E:47:0E:90:D5:EB:DD:CC:AA:9C:F6:BB:22:E8:9D:E0:D9:F2:07
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942825243503DB0E70E503782F51CE56A3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1c/a82c10-5218-47a7-a7c4-eeb6daa75ec5/1/a15HDpDV693Mqpz2uyLoneDZ8gc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1c/a82c10-5218-47a7-a7c4-eeb6daa75ec5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 17:51:50 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 198467
IP: 195.254.176.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:24:35:03:db:0e:70:e5:03:78:2f:51:ce:56:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 17:51:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6b5e470e90d5ebddccaa9cf6bb22e89de0d9f207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7a:89:95:b1:58:47:b0:ad:0f:f3:89:51:ad:
7c:58:e0:1d:9f:13:25:8f:9c:7a:be:ff:d2:53:39:
3c:96:c1:96:d7:76:bb:a0:97:e6:ac:25:fd:44:ed:
d6:f4:6c:84:a5:66:e0:2e:e4:2d:eb:19:ff:9c:72:
af:47:bb:92:c4:cd:7c:be:44:7e:fd:f1:b4:e7:0e:
2b:04:6b:11:05:31:e0:b8:1c:b9:6d:e3:80:d4:ee:
d9:4b:1a:16:93:17:9b:18:58:ff:16:f1:f9:8f:f5:
43:3b:43:62:0a:77:07:d7:5c:d9:3d:4b:97:87:ec:
78:b6:30:20:cb:35:bf:e4:ea:3b:0c:57:3d:7c:4c:
e8:aa:3e:fd:b4:88:ea:26:3d:7f:73:08:95:16:cc:
ec:05:21:91:83:38:f1:39:6b:67:04:30:1a:88:78:
59:5d:98:ac:e8:9e:30:fd:c8:2f:7f:af:e8:53:5c:
d6:29:3a:d5:74:2e:a0:60:5b:44:ff:1d:e6:fe:3b:
5e:cb:9a:28:d7:ea:e7:53:71:71:11:2c:11:ca:32:
90:f2:e8:06:f9:00:fb:94:3f:5a:27:34:92:96:72:
df:b8:b7:61:84:79:0d:e4:f7:0c:e7:b8:b5:cb:ca:
69:c9:f4:d2:df:d5:6a:fc:be:3b:e8:32:f5:77:68:
4f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:5E:47:0E:90:D5:EB:DD:CC:AA:9C:F6:BB:22:E8:9D:E0:D9:F2:07
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a82c10-5218-47a7-a7c4-eeb6daa75ec5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a82c10-5218-47a7-a7c4-eeb6daa75ec5/1/a15HDpDV693Mqpz2uyLoneDZ8gc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.254.176.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198467
Signature Algorithm: sha256WithRSAEncryption
a8:3c:73:cc:a8:ff:0d:9d:58:39:b7:e6:9a:fc:6f:1f:e4:31:
cf:eb:fa:89:36:cc:e4:14:59:26:c9:3f:d1:99:74:f6:2a:a9:
32:61:65:bd:2d:b2:23:98:36:23:b0:1b:6c:8e:79:2a:ff:d7:
c6:13:72:63:7c:f9:8e:79:db:e8:9c:0f:a2:0d:fb:55:3f:da:
9a:02:f8:36:3e:49:f4:78:5f:1c:7c:45:de:fc:7b:53:83:44:
7b:50:4d:6c:15:5e:27:79:da:ee:10:5e:85:53:fd:04:d2:9d:
47:61:50:55:f7:92:26:ab:3f:80:1a:a0:de:49:51:45:95:4f:
6b:51:77:28:33:07:24:b1:4c:73:f2:39:f3:31:4b:46:59:a7:
44:83:6d:df:82:70:70:cf:78:f4:69:97:24:c1:e2:86:b1:a7:
bc:18:83:70:1d:0e:04:91:75:ad:a1:3e:8b:0f:ec:86:b7:aa:
5d:15:82:51:d2:76:47:6d:e5:16:59:71:d9:05:81:76:37:54:
c5:98:81:fb:d7:b2:a4:9a:3a:83:4c:0c:79:33:9d:1e:29:81:
c0:ba:4f:06:ea:81:1f:2a:df:1e:35:a8:36:27:35:43:54:fb:
94:68:8b:80:a8:d0:f5:d8:bc:28:5f:b9:27:a9:c4:23:d2:df:
59:16:63:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:42:34 2025 by rpki-client