Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bNoVAPXJY-0jT9lIWfI7MvSIXfw.cer
File: bNoVAPXJY-0jT9lIWfI7MvSIXfw.cer (raw, json)
Hash identifier: gIfXVX+1qF5bJuzAA8D0I5ceNqn5fUeF/rMi57t3O3s=
Subject key identifier: 6C:DA:15:00:F5:C9:63:ED:23:4F:D9:48:59:F2:3B:32:F4:88:5D:FC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422202A0B38BCB518B23FE7ADE51174AE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/bNoVAPXJY-0jT9lIWfI7MvSIXfw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:40 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 44879
IP: 193.47.168.0 -- 193.47.183.255
IP: 194.124.0.0/19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:2a:0b:38:bc:b5:18:b2:3f:e7:ad:e5:11:74:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6cda1500f5c963ed234fd94859f23b32f4885dfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9e:73:8f:9e:fb:cd:4a:ce:78:5c:b6:9c:d1:
b1:87:e3:a4:70:9a:df:d0:33:3a:f2:8e:20:2f:77:
cf:91:ae:fa:1b:74:12:41:d4:d1:53:19:03:1a:3e:
ee:56:b4:b4:97:09:cb:bb:cb:f7:d2:8f:e7:5a:98:
ed:55:64:d8:e2:c0:cc:6e:a1:9a:f4:7e:f8:0b:9b:
d7:e8:f8:ce:1a:c0:44:cf:13:c6:6b:e6:ac:2c:21:
b5:4e:7a:b2:d1:3e:04:4b:e6:48:61:7a:bd:5c:36:
d3:e8:4f:5a:35:cc:39:da:82:83:a7:ba:5a:a8:ff:
ee:ca:1a:30:77:d5:de:4b:bb:3f:31:84:28:77:86:
bc:fc:db:5c:60:46:6d:77:2f:c1:45:50:92:eb:f5:
e3:98:32:01:de:7d:6c:f0:1c:37:b4:a0:57:83:f0:
d8:32:b0:9d:d2:ad:ba:a3:49:b7:45:be:1b:44:21:
3e:52:62:e9:5b:f9:51:ee:95:21:f6:3f:8c:57:66:
10:e0:9e:c3:66:cd:e1:3b:c3:9f:be:57:e2:7f:f1:
2c:05:fa:8b:74:fd:a8:64:44:6f:3c:31:b1:83:95:
74:13:fa:2a:9a:91:fa:fa:b8:31:4e:f7:f7:12:4d:
67:6c:6d:a0:1b:40:03:32:5d:44:95:8c:d1:d7:d6:
78:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:DA:15:00:F5:C9:63:ED:23:4F:D9:48:59:F2:3B:32:F4:88:5D:FC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/bNoVAPXJY-0jT9lIWfI7MvSIXfw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.47.168.0-193.47.183.255
194.124.0.0/19
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44879
Signature Algorithm: sha256WithRSAEncryption
44:ce:3e:b1:fc:52:29:b7:07:e9:07:c0:5a:6a:51:a2:dd:cc:
44:73:6b:c5:98:fe:d2:6b:dd:a1:a1:f6:7c:18:04:27:5f:1e:
1a:c1:72:ad:de:5b:a2:b0:74:fc:47:43:db:4a:4b:00:3d:6b:
e5:e6:6a:69:30:60:c8:32:2a:06:3d:85:49:b6:fe:46:dc:f6:
87:6d:9f:73:6b:fc:bb:e9:20:d6:e5:aa:8b:39:79:62:09:ac:
c9:e5:98:6c:2a:72:de:06:5c:8d:15:2e:82:5b:24:71:d0:7a:
20:87:96:a6:0f:4b:41:bd:cb:a4:30:05:a6:76:1e:cb:4a:02:
7f:7e:58:36:69:ae:1a:87:e2:91:f5:1c:19:c4:e5:e8:7e:5c:
46:e0:72:01:f3:0f:b1:0d:d6:02:b6:b7:eb:59:b7:4f:c5:30:
2d:cb:18:09:e0:a0:96:3a:7c:2b:b7:c3:30:29:58:74:62:70:
89:df:b0:7f:f3:fe:dc:f7:50:a4:2d:df:03:ef:65:47:b0:c6:
8a:06:9b:3a:f5:ef:cc:5c:fb:f5:4b:c8:03:a6:be:20:b9:19:
fe:77:6c:60:f8:eb:ef:27:02:53:78:92:f3:b6:3d:13:ba:21:
55:96:ab:a5:9c:2b:5b:15:a9:10:ce:6d:24:97:2b:c7:4a:79:
b5:f7:fd:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:41:02 2025 by rpki-client