Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dL8H8EzHapCtl_nxdJ-rzwXDXWI.cer
File: dL8H8EzHapCtl_nxdJ-rzwXDXWI.cer (raw, json)
Hash identifier: ntyuYklMyjkBgu8sOhuE48wHouAtCUARiofr5EE9AhI=
Subject key identifier: 74:BF:07:F0:4C:C7:6A:90:AD:97:F9:F1:74:9F:AB:CF:05:C3:5D:62
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B52EA235D12E745462721454C5F405
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:49:32 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 205384
IP: 84.234.120.0/23
IP: 2001:67c:11e8::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:2e:a2:35:d1:2e:74:54:62:72:14:54:c5:f4:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:49:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=74bf07f04cc76a90ad97f9f1749fabcf05c35d62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:14:c2:81:1c:a7:d5:e6:ce:5c:23:65:55:b9:
a8:24:ea:c0:48:fc:ef:78:bd:c2:2e:ad:d8:0f:7e:
7d:92:35:11:8c:8c:61:d0:4d:5a:91:36:8d:6c:8d:
db:37:74:89:c4:90:eb:c8:a6:cd:4f:97:59:5c:00:
49:c8:b7:7c:2f:26:bc:40:98:f4:c1:8c:69:6a:8e:
c7:4c:a6:35:db:31:4a:29:54:30:dc:ad:de:f1:72:
2f:04:b6:b1:69:78:e8:58:ee:30:18:3c:a2:18:58:
9b:e5:f1:79:b4:4e:7a:95:b9:13:43:c0:d2:22:4b:
5f:25:3d:e9:3f:bd:19:c7:79:68:86:23:71:20:0e:
3e:5c:6a:9a:04:28:a1:30:a7:4f:cb:93:ff:d2:0a:
64:8c:f8:a2:94:4d:eb:1d:04:4f:2e:47:e5:52:15:
65:1b:a2:0b:d5:a3:f7:35:66:54:78:a1:ba:c9:da:
ca:bd:87:3c:2f:8a:f8:5f:1d:78:f5:d0:a5:02:4f:
d8:b3:55:e2:f1:59:29:f9:63:12:88:28:39:1e:dd:
35:cb:9b:d3:5d:46:e2:18:a0:34:b7:04:2c:a1:f0:
19:49:4a:b9:2c:78:9d:4d:5d:55:07:48:4a:25:e5:
26:65:f1:c7:66:bb:90:59:e4:e1:4a:75:3f:68:b2:
a0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:BF:07:F0:4C:C7:6A:90:AD:97:F9:F1:74:9F:AB:CF:05:C3:5D:62
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.234.120.0/23
IPv6:
2001:67c:11e8::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205384
Signature Algorithm: sha256WithRSAEncryption
51:87:2d:24:71:b6:09:0d:ec:ce:95:00:92:19:cf:f6:3e:65:
cd:25:db:f4:ad:04:ca:94:5a:3c:0a:9b:6a:43:65:a3:4f:3e:
25:32:e8:f5:df:4f:4d:3f:28:97:7d:b1:67:12:ed:d6:8a:26:
8a:18:ec:d6:48:6f:02:d7:d7:ef:3f:5d:21:38:70:7c:31:53:
ea:d9:a8:ef:d3:51:d4:d3:f7:f8:79:cc:9e:c5:76:0e:07:7a:
02:ce:5c:41:76:3d:27:1a:a4:b2:10:b3:80:8a:a2:46:3a:b9:
51:3c:0a:d1:6a:95:11:6e:ca:d4:c9:e9:61:b3:33:37:a2:8b:
4e:8e:33:d1:a7:c7:40:69:69:c2:e6:b5:52:02:e2:8d:4c:6f:
3b:95:fb:71:e1:19:f6:31:e1:b2:69:c9:be:03:58:70:c8:f6:
bf:be:ed:f6:a7:3f:c8:55:50:c1:d8:f7:4f:5b:f1:d9:4f:7e:
3d:9d:4f:51:42:44:a8:0d:bf:c8:8d:53:9a:1c:d5:7c:b3:d7:
53:a9:db:f2:12:62:b9:65:22:da:d3:69:4d:b0:89:09:53:11:
cc:54:32:91:eb:ef:89:cc:d7:0b:63:aa:16:0d:ec:c8:58:2a:
87:9b:c7:4e:d6:2f:72:e7:2c:0f:c9:f8:22:f9:c8:55:65:14:
6f:f2:ef:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:58:54 2025 by rpki-client