Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cG_6qbf85AgnGBpaoKzumaRmkVY.cer
File: cG_6qbf85AgnGBpaoKzumaRmkVY.cer (raw, json)
Hash identifier: x8Fai/RYy3hKCGRGlqE876XsRZVxWU6GbJF6vbnNEQM=
Subject key identifier: 70:6F:FA:A9:B7:FC:E4:08:27:18:1A:5A:A0:AC:EE:99:A4:66:91:56
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B6220A22F223F2033344CA876B3B16
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/55/29678f-c605-4655-9359-10fedccd2924/1/cG_6qbf85AgnGBpaoKzumaRmkVY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/55/29678f-c605-4655-9359-10fedccd2924/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:50:35 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 39098
IP: 156.10.0.0/16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:22:0a:22:f2:23:f2:03:33:44:ca:87:6b:3b:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:50:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=706ffaa9b7fce40827181a5aa0acee99a4669156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a9:3e:7a:d7:f0:e4:14:ed:e4:94:4c:2c:3b:
4d:6c:82:6a:c0:8b:b0:51:d6:31:33:6f:b8:f2:b2:
2b:4d:5f:09:da:66:54:92:d9:19:b3:ed:f3:6e:37:
44:da:c4:ce:bb:37:3f:22:b6:c4:74:84:63:b6:5c:
c2:d8:9c:f3:a7:9e:a4:af:69:79:08:a8:77:44:ae:
88:8a:ef:8f:39:65:62:d2:f6:e7:72:ee:98:65:84:
fc:eb:81:2e:d3:e4:a0:54:19:b1:4c:9f:b9:10:a0:
53:30:46:99:96:f7:72:21:b4:09:d7:09:29:e9:79:
d4:93:bd:fb:f3:89:c0:25:16:bc:9a:cd:48:e4:79:
3d:81:50:93:cb:c1:69:59:6f:04:bb:f3:01:d7:64:
11:03:9f:c7:89:01:a8:51:ee:75:6f:61:33:49:54:
5f:72:50:e9:35:dd:23:ea:d4:cb:15:b7:a5:98:33:
70:6e:a7:b4:b3:74:e9:a4:70:a8:f2:d6:cd:df:37:
05:bd:91:25:90:41:5a:14:7d:3c:0f:2d:bb:10:96:
4d:5b:d8:bd:f6:c7:10:67:f4:9f:e6:bc:6a:d2:dc:
7c:bb:a4:3a:90:f3:1b:46:47:ab:d2:fb:ed:0b:0b:
4b:d9:43:25:1c:db:91:4d:a7:b8:78:ed:f3:95:99:
98:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:6F:FA:A9:B7:FC:E4:08:27:18:1A:5A:A0:AC:EE:99:A4:66:91:56
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/29678f-c605-4655-9359-10fedccd2924/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/29678f-c605-4655-9359-10fedccd2924/1/cG_6qbf85AgnGBpaoKzumaRmkVY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
156.10.0.0/16
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39098
Signature Algorithm: sha256WithRSAEncryption
39:18:2d:b6:01:e3:56:b0:62:fd:b5:9f:9d:b1:1b:af:e5:a1:
68:70:67:73:9d:da:8b:43:4f:ee:d9:7c:9f:77:17:5b:f4:fe:
1e:ce:2f:71:3e:48:55:a7:c3:c8:d0:d5:5b:5d:e6:fd:7d:e3:
ec:7b:76:25:20:46:f5:84:7d:ed:cd:48:74:ca:c4:8b:a6:a2:
a8:b0:c5:d3:fd:c0:07:e8:1c:cc:57:01:1a:30:9e:c6:06:17:
34:41:84:82:94:be:99:9a:54:7f:44:63:0a:28:b7:26:ac:d8:
cf:cb:79:6e:3b:78:71:37:ca:cf:fc:a2:16:0b:a0:1f:e6:f5:
bf:b8:e3:b4:c4:0b:b2:4d:92:9e:b9:44:e6:73:c4:49:35:f8:
6c:dc:4b:2e:0c:22:24:42:e4:04:3b:55:0e:ff:4b:8d:47:f3:
1b:48:8b:c7:01:26:12:fd:ed:8b:bb:8e:7e:d3:38:f6:47:97:
a6:7d:c7:50:df:1c:b7:b1:f6:35:cf:9a:bf:1d:ee:ab:25:b1:
18:fa:80:df:e2:4d:a4:c6:b6:01:38:8a:c9:8f:ee:67:75:85:
f3:d4:c8:04:0d:b8:b0:29:59:d7:9c:78:9a:53:32:75:19:09:
45:4e:d0:ae:01:5d:1d:23:3e:5b:50:97:78:af:d8:e4:79:46:
65:52:52:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:44:48 2025 by rpki-client