Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer
File: cS-cs8KYsVC-t5CAN290verEOKw.cer (raw, json)
Hash identifier: RMWzOj3vv9WwNEZ5VOKxhciay31KjDoGGbb1jXkA+ro=
Subject key identifier: 71:2F:9C:B3:C2:98:B1:50:BE:B7:90:80:37:6F:74:BD:EA:C4:38:AC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258FA08FC1D0AC16C4DD9B915B315873
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:49:17 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 49623
AS: 60983
IP: 185.22.128.0/22
IP: 193.169.46.0/23
IP: 2a00:6060::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:a0:8f:c1:d0:ac:16:c4:dd:9b:91:5b:31:58:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=712f9cb3c298b150beb79080376f74bdeac438ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:74:f5:1d:59:6c:c0:6a:e7:4a:ab:ca:8b:64:
bf:36:63:05:68:0a:d9:47:4f:1b:0a:9a:e7:41:cf:
d8:19:78:0a:c2:bc:c1:57:fa:af:79:c6:26:67:11:
7d:6f:98:16:b5:b8:81:49:c4:b5:e5:41:70:cf:c0:
51:c7:93:be:7f:77:cf:2e:68:3d:c2:f3:84:50:57:
0a:c3:31:a6:30:c6:92:ed:1c:7b:3f:3e:13:20:4f:
0c:64:a8:5a:6a:01:1e:6a:9c:25:96:49:8c:dc:e4:
44:92:77:4c:96:74:77:ca:4b:19:6b:8c:d2:3c:75:
41:56:25:2d:68:47:c5:76:c4:9f:75:f1:ae:db:c6:
c7:0d:45:c5:27:8b:52:46:9f:cd:42:81:a3:86:d6:
60:b3:c3:c1:cf:40:fd:da:18:0c:76:e1:38:45:4c:
56:8b:d5:bd:c4:a8:9d:f4:9a:26:4c:65:ca:07:af:
32:3e:6a:5e:eb:12:23:82:96:01:b6:57:b7:4a:b2:
76:ab:bd:8d:63:36:88:0a:27:36:bc:d9:cb:1d:4d:
fa:ef:9b:bb:e4:6d:41:07:f0:9f:44:c6:e2:e9:fe:
ed:d6:ee:10:75:7b:f1:cf:a8:39:fd:1e:21:d3:32:
03:c6:90:bf:a5:aa:34:9a:08:2d:1e:17:19:75:eb:
07:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:2F:9C:B3:C2:98:B1:50:BE:B7:90:80:37:6F:74:BD:EA:C4:38:AC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.22.128.0/22
193.169.46.0/23
IPv6:
2a00:6060::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49623
60983
Signature Algorithm: sha256WithRSAEncryption
0e:4d:74:6b:ac:f4:0b:3d:2e:75:9c:98:c8:f3:5f:aa:22:83:
40:e3:58:63:fb:7e:aa:dc:8b:9d:ac:4f:fd:dc:a3:58:c2:d8:
20:9e:d4:18:fb:7f:df:79:1c:63:2c:55:98:ee:54:eb:8e:1d:
38:a7:56:fa:99:02:b5:f2:14:2e:70:c6:ed:71:c4:4d:b8:87:
4d:aa:aa:6d:bd:4d:de:e3:81:50:ac:ab:3a:e3:14:26:92:eb:
cb:ff:88:1b:00:45:96:07:f9:32:e8:d7:a7:75:24:cd:69:c9:
56:04:7c:61:30:31:be:87:7b:b8:f6:93:30:a8:dc:25:08:53:
a1:3a:90:e2:bd:db:1c:31:a5:e5:e3:94:a1:ce:ba:f6:5f:2e:
d2:c7:49:e1:ef:0b:9c:87:93:4d:3a:4b:47:43:c4:fe:5c:3f:
d1:db:7d:0e:3e:73:4f:59:69:05:b4:f7:cf:65:d6:5f:0d:34:
5d:04:62:d7:d7:a4:b0:a2:4a:e0:68:77:8d:ce:e2:9a:c4:82:
14:5d:80:7e:d4:d0:75:14:73:90:18:e5:c5:9c:20:05:cc:21:
a4:cd:21:72:59:53:b1:5e:a5:68:6f:ed:96:2a:14:9e:80:f0:
14:9a:83:15:99:af:9d:a8:c0:13:11:dd:28:df:01:46:67:3c:
e6:11:07:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:50:51 2025 by rpki-client