Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b_sPm9w6L65HtH5wIYmTyRnxD7A.cer
File: b_sPm9w6L65HtH5wIYmTyRnxD7A.cer (raw, json)
Hash identifier: x5GvtV/bTng6ha/tmVCd+4eavmSSJjWAsfI7dIuPqUk=
Subject key identifier: 6F:FB:0F:9B:DC:3A:2F:AE:47:B4:7E:70:21:89:93:C9:19:F1:0F:B0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942824332AE0B697805B330F2A095E27C5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8b/84acdf-ba85-4a81-a306-f9ab3b052349/1/b_sPm9w6L65HtH5wIYmTyRnxD7A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8b/84acdf-ba85-4a81-a306-f9ab3b052349/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 17:50:48 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 2799
IP: 147.186.0.0/16
IP: 2001:67c:49c::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:33:2a:e0:b6:97:80:5b:33:0f:2a:09:5e:27:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 17:50:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ffb0f9bdc3a2fae47b47e70218993c919f10fb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:26:99:02:b5:bc:a9:b6:a7:e3:24:1e:52:b6:
7e:3b:74:85:ee:8b:da:b7:ec:8f:06:61:dd:18:e1:
bf:88:a2:77:2f:54:c9:17:c2:5c:90:df:eb:f8:9b:
ff:05:af:68:76:57:ab:7f:4a:95:25:21:26:10:bd:
64:7b:74:40:43:53:74:04:2b:10:3e:ea:ee:88:ac:
07:33:2b:25:8b:dd:62:31:49:ca:d1:a3:cd:8b:f3:
d3:13:88:f0:cd:84:cc:38:76:a2:25:d9:8b:9c:d9:
b3:6b:69:50:cd:be:13:1d:ce:78:65:e5:2d:90:39:
8e:a6:8e:f1:22:c3:05:9a:fc:2f:18:fe:26:5b:3b:
f7:52:0d:7d:ed:8e:ab:58:7a:01:41:c4:06:f7:33:
f9:85:e9:f0:9a:dc:b2:b6:d6:60:cd:15:92:ae:bc:
99:e8:d3:0a:f1:dc:c3:ca:d5:02:6f:7e:62:41:8b:
3f:7b:b0:0b:fd:53:ea:9b:ee:f7:ce:1f:ca:3a:67:
e7:b9:ff:bc:5a:2f:62:0d:d7:62:47:6b:3f:57:db:
a7:63:ce:a9:16:4b:03:02:ea:bd:3c:a1:99:f1:72:
a8:d5:38:d6:71:18:bb:b2:32:ca:c5:d8:0a:06:aa:
07:24:3e:54:cb:bc:d4:ca:86:d0:d2:3f:52:6b:88:
2e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:FB:0F:9B:DC:3A:2F:AE:47:B4:7E:70:21:89:93:C9:19:F1:0F:B0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/84acdf-ba85-4a81-a306-f9ab3b052349/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/84acdf-ba85-4a81-a306-f9ab3b052349/1/b_sPm9w6L65HtH5wIYmTyRnxD7A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.186.0.0/16
IPv6:
2001:67c:49c::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
2799
Signature Algorithm: sha256WithRSAEncryption
a6:89:0e:1e:bc:61:94:d0:00:7b:8c:a0:26:84:20:e0:21:5a:
20:97:15:c0:07:22:e5:ce:d8:a4:c6:bd:d4:92:9d:ac:27:7b:
f8:d1:9d:e8:2a:05:eb:fa:ce:4e:4b:d7:72:68:24:06:bc:5b:
79:f8:1c:2b:0d:9c:46:4c:48:33:6e:45:55:45:2b:e1:2a:3f:
2d:47:18:98:3d:58:59:19:78:a9:0f:74:78:d0:12:1d:93:39:
b0:ec:33:b1:29:f4:f3:8e:ba:1d:78:1e:df:74:47:01:5d:a0:
96:97:5e:d1:8d:3e:13:ec:24:e5:8c:10:a9:05:ce:5d:b5:92:
52:26:e8:9f:f4:b4:39:15:d1:b1:3c:41:8f:32:b9:5c:d4:63:
68:52:18:02:a7:cf:cc:fe:63:9c:18:17:c9:a8:2d:fd:b0:27:
2c:c4:b0:39:bc:6f:e3:f2:fb:71:e3:dc:8c:2f:1e:37:40:5d:
65:b3:13:60:18:19:05:fe:05:72:59:62:72:9c:05:b4:f3:b4:
b8:52:d4:24:25:83:87:81:32:9a:eb:ae:15:bf:8a:b5:7c:2b:
ab:55:03:17:81:19:7b:2f:39:bb:52:1b:9d:5c:15:20:8a:bf:
a4:d7:72:11:7c:97:60:b9:04:c2:36:dc:0d:9b:96:27:b2:26:
ac:9f:1c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:27:31 2025 by rpki-client