Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dZ0nzgcsozbTr6q4h5-U7GNFVmk.cer
File: dZ0nzgcsozbTr6q4h5-U7GNFVmk.cer (raw, json)
Hash identifier: yq5CJHn+qRDYbRjH8+/f2b8q+uBqInmpZ9VDZFDwKOs=
Subject key identifier: 75:9D:27:CE:07:2C:A3:36:D3:AF:AA:B8:87:9F:94:EC:63:45:56:69
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C364FB93F778059CCB242FD1AD5DC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:47:50 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 199342
IP: 185.11.152.0/22
IP: 2a03:7640::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:36:4f:b9:3f:77:80:59:cc:b2:42:fd:1a:d5:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=759d27ce072ca336d3afaab8879f94ec63455669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:db:1d:c6:dc:2e:07:22:89:4e:1c:5a:92:6a:
cb:cc:99:33:22:2c:d9:d9:56:e3:7d:40:50:ac:d0:
89:5c:e9:d6:ff:85:54:15:ab:24:1d:02:a5:33:1f:
2a:25:03:d7:4c:8a:ba:e7:33:10:99:c9:3a:ca:fb:
a0:ba:d2:d0:40:07:f7:9a:f3:6a:cb:01:9a:a6:9f:
c2:83:4c:7f:6e:7b:78:33:53:e9:b5:7e:53:8b:71:
eb:c2:34:e2:7e:d3:06:43:f1:91:ea:c7:b6:1e:c4:
cb:08:08:90:9f:e6:dc:60:1a:84:88:1f:42:24:fc:
c3:cb:33:d2:75:56:64:57:cc:a7:66:36:ec:8b:0b:
9a:a3:54:d3:27:ba:88:ff:ba:d2:3b:58:6b:df:99:
3b:3a:08:32:c3:a3:a7:c7:63:af:c6:02:0d:90:e1:
28:58:f1:04:3f:5a:b2:b0:5c:c6:7d:1b:56:b0:f8:
ae:29:b4:46:5a:1f:4a:4c:db:77:f2:08:99:f8:e7:
8f:c6:bc:85:49:aa:1d:b1:a9:4b:7f:d1:45:6e:fb:
e3:31:3e:83:1e:dc:57:3b:33:83:dc:bc:d6:e4:52:
6d:7b:82:15:3d:e3:c6:e7:ef:2e:be:ca:ee:98:f4:
13:7c:ec:36:ad:5a:f8:1b:a6:f4:6e:bf:f5:2d:97:
ad:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:9D:27:CE:07:2C:A3:36:D3:AF:AA:B8:87:9F:94:EC:63:45:56:69
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.11.152.0/22
IPv6:
2a03:7640::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199342
Signature Algorithm: sha256WithRSAEncryption
90:5b:6d:7f:66:1a:00:0a:00:40:c1:8b:16:0d:ae:5b:c2:b8:
91:43:52:e2:4e:a0:a9:62:41:e7:fa:ca:4d:66:67:18:7f:d1:
de:dc:4a:45:d8:bc:78:08:16:71:a6:67:15:39:b9:6e:43:58:
5a:bc:f3:f6:22:f8:cf:04:74:56:50:cb:60:50:b6:02:36:14:
e4:fe:99:58:d0:79:aa:7b:13:d0:fa:06:f2:0e:8b:ef:88:e0:
af:ef:e6:87:0b:2a:78:af:8f:42:22:7b:b2:b1:e8:22:be:9f:
04:4c:8d:49:29:3f:98:a4:31:9f:e8:9d:a0:f4:a0:99:2c:a7:
63:c5:09:0c:bf:b9:3a:ad:4e:f0:93:79:32:d0:23:ce:c5:fd:
0d:aa:a7:b3:f1:dc:4a:59:2c:ff:82:58:35:f1:83:44:67:dd:
36:9b:ad:5f:19:75:77:d3:18:b7:e7:14:3f:1a:94:d5:20:50:
d7:e2:04:ed:07:ed:4e:bb:d9:ed:59:5b:f6:0a:1f:2c:05:97:
c5:31:2a:e9:a5:c2:48:29:01:f6:ff:22:88:13:52:59:3f:87:
42:df:d6:19:dd:15:51:7c:57:41:22:d0:e6:41:dd:ec:14:40:
e1:f4:39:02:65:ab:fa:96:99:3b:46:fe:84:ea:b6:5e:9a:1a:
fa:ea:36:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:26:00 2025 by rpki-client