Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2spT5ZdrWQPnjU784-a8RkUeeo.cer
File: c2spT5ZdrWQPnjU784-a8RkUeeo.cer (raw, json)
Hash identifier: NpPwTZRvxy5bagBqeRpFMZFXjf4CzjYeRHwtPO8n8no=
Subject key identifier: 73:6B:29:4F:96:5D:AD:64:0F:9E:35:3B:F3:8F:9A:F1:19:14:79:EA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B378F08765524E9BFA1A56CFE10BF8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/c2spT5ZdrWQPnjU784-a8RkUeeo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:48:49 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 209900
IP: 45.65.88.0/22
IP: 2a09:fe00::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:78:f0:87:65:52:4e:9b:fa:1a:56:cf:e1:0b:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=736b294f965dad640f9e353bf38f9af1191479ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ef:40:c1:2d:f8:28:3e:77:93:d7:67:7a:52:
b6:10:92:e8:4f:9e:39:9f:e5:d3:8c:d6:bc:c3:bf:
9b:e6:a4:40:52:a3:0b:95:b0:35:0e:b8:9a:62:49:
8a:e3:0d:9d:15:a3:53:13:56:6a:15:d6:29:e7:28:
e0:51:e5:bf:45:a7:d6:82:40:64:38:7e:fd:e1:43:
a7:d3:27:65:8a:af:58:5b:84:1d:d2:b0:e5:a7:95:
af:99:48:a6:23:ff:e6:25:10:8e:59:17:83:3b:b8:
8e:f1:a1:5d:8a:9e:32:10:db:21:4e:6e:b5:4b:f3:
39:0e:6c:73:97:9d:5d:7e:98:30:5b:92:55:52:c2:
5f:2c:62:0d:4b:44:3e:04:9d:6f:a1:42:6d:b6:48:
92:fe:34:eb:83:c8:86:75:79:02:fc:6c:f9:60:9a:
0e:e5:1e:7e:57:da:00:8b:95:0a:99:51:98:cc:cb:
f2:cf:fe:a6:92:b6:0d:4f:a8:e8:87:0e:cb:5a:b1:
0c:22:1d:88:ef:0d:2c:93:e1:c1:b4:d6:26:8a:5f:
13:9c:3d:86:1c:ef:80:78:fa:c1:df:72:ce:80:5c:
1b:7e:cd:e3:df:08:f5:30:b9:b7:53:1f:9f:24:a0:
2c:6b:aa:76:4f:66:ac:1c:a0:85:fd:89:63:bb:c7:
01:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:6B:29:4F:96:5D:AD:64:0F:9E:35:3B:F3:8F:9A:F1:19:14:79:EA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a71a5c-1746-43c4-a67f-a8f76bd26a27/1/c2spT5ZdrWQPnjU784-a8RkUeeo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.88.0/22
IPv6:
2a09:fe00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209900
Signature Algorithm: sha256WithRSAEncryption
3f:09:de:a2:1e:ba:26:34:e8:cb:e5:a7:62:b3:48:d1:8f:4b:
6b:b4:67:c0:b4:b4:be:82:9e:a4:89:03:b2:c0:e7:61:86:2d:
1e:56:b5:00:fe:73:12:39:9e:a4:26:84:65:ef:7e:92:09:98:
47:f8:72:9b:0a:b1:d3:6a:42:d1:99:8c:00:2d:4a:55:a7:93:
3c:86:7c:9a:3f:48:a0:3a:73:f1:36:57:43:07:1e:19:ba:23:
dd:1a:af:4e:3e:ec:ea:e1:ba:5e:34:3a:84:e9:4e:5f:0a:bd:
bb:de:3e:33:15:32:8c:1f:2b:1b:19:0a:09:a1:33:6d:0b:d1:
9e:67:ae:14:b4:30:99:8a:3c:2b:75:5e:0d:03:82:28:c0:a0:
cf:c5:c7:47:d6:c3:de:0b:63:c4:a7:46:70:64:75:a1:29:2a:
5a:44:d1:e0:42:7b:7f:7c:32:3f:3f:cb:7c:0f:aa:7c:de:01:
67:e0:e0:4f:ab:fa:50:67:5b:31:85:34:00:93:82:bc:94:ed:
cd:de:32:ce:87:fa:bc:f5:46:be:6d:97:09:31:38:4c:0c:a6:
ec:94:4b:fc:69:02:63:b6:71:75:92:44:5b:39:c0:89:09:ae:
41:c9:b7:e9:c9:d8:71:86:9f:4a:7c:7c:c9:00:2c:db:fc:45:
a8:73:94:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:07:41 2025 by rpki-client