Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.cer
File: ckmUu3pqP0Mz1mjEmPuWWxcsNFU.cer (raw, json)
Hash identifier: bGO1xDR7k5XWFbbZIqV/fXzXvnb209OYhULcR8LYT3c=
Subject key identifier: 72:49:94:BB:7A:6A:3F:43:33:D6:68:C4:98:FB:96:5B:17:2C:34:55
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221FE7C7E4DE67F555C9A5BE90155158
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:23 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 215585
IP: 91.195.36.0/24
IP: 2a13:5c40::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:e7:c7:e4:de:67:f5:55:c9:a5:be:90:15:51:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=724994bb7a6a3f4333d668c498fb965b172c3455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:df:47:61:ce:71:2d:6d:a7:00:97:91:e9:be:
da:23:27:37:a2:bd:2c:8b:b4:d2:b6:2c:00:94:a1:
92:cc:69:81:3b:8f:c1:7b:01:7a:2a:d7:ad:99:f9:
29:4d:ee:51:6e:d0:53:08:4d:c3:1e:17:e1:0a:3e:
05:6e:db:a1:14:63:83:d9:26:f0:47:8e:65:3a:49:
61:30:35:07:43:60:01:53:21:74:41:c3:97:60:38:
15:24:c0:4d:e9:03:73:dc:44:47:79:bd:f9:db:76:
36:1e:32:19:39:6e:01:47:74:c5:ce:07:cd:b6:5d:
ce:07:23:5d:47:72:db:ce:41:68:11:80:41:3c:22:
9e:85:00:90:49:82:41:46:f9:39:71:0d:24:50:c7:
66:ee:c3:32:c0:90:3f:52:5d:08:d7:35:2b:ff:7e:
0e:1b:71:d0:b1:27:b2:cb:8b:de:ad:0a:b8:39:cb:
20:59:0d:b1:5b:76:06:01:1c:d7:94:f8:13:1c:86:
80:95:69:a8:f3:e9:ed:9f:71:d8:c1:2d:9e:6a:db:
fe:a0:bc:ee:ed:f7:55:a6:ef:24:8b:9e:d0:bf:f1:
88:4c:9e:fe:e4:73:8a:45:4c:2c:24:36:2b:18:df:
9d:ee:c8:51:ca:ea:1a:63:d0:45:29:d5:89:50:eb:
90:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:49:94:BB:7A:6A:3F:43:33:D6:68:C4:98:FB:96:5B:17:2C:34:55
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/7fc80b-8d14-457b-ad5e-83fc48044923/1/ckmUu3pqP0Mz1mjEmPuWWxcsNFU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.195.36.0/24
IPv6:
2a13:5c40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215585
Signature Algorithm: sha256WithRSAEncryption
6d:16:53:02:f3:cd:82:f0:1c:cf:11:3b:37:e4:c1:41:5d:3a:
95:9d:a5:2f:af:6b:d8:a1:84:36:9b:e4:f6:d9:b3:f7:1e:c3:
92:77:34:54:32:7a:e3:34:95:40:57:8e:73:f0:bd:6e:e8:b8:
a9:a1:3c:63:44:c4:e9:b3:13:18:24:cf:a6:6d:2f:90:f8:52:
bf:5d:fe:d3:1c:db:ce:5a:08:3b:29:31:25:74:47:74:5f:a3:
e2:07:d5:c7:d6:51:84:ca:ff:6e:63:96:87:68:06:0c:27:2e:
7d:95:e0:5d:72:39:98:0c:6c:3e:67:24:66:63:21:b2:52:14:
81:8a:fd:0e:d2:e5:47:ff:81:e2:d7:88:a6:f2:b6:6a:88:d5:
92:bb:d6:ea:67:c4:46:49:54:37:6f:9a:81:88:5f:01:75:e2:
78:44:5d:5c:8f:f3:83:ba:e6:6d:91:84:9b:20:c0:78:73:90:
ec:10:4f:d8:ca:51:d2:79:a5:39:d3:3b:66:a6:93:bf:3c:11:
c3:6d:77:7d:77:f2:96:5e:2c:81:07:a8:75:55:0b:df:eb:81:
89:20:66:ed:93:04:89:2e:a7:4b:f2:5f:91:5b:5f:9a:68:7e:
51:0c:31:19:3b:e7:5a:68:69:a2:4c:1c:ff:b9:97:9b:b3:93:
a6:a7:62:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:41:32 2025 by rpki-client