Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dbvImtBCDee1vC3TL-o7l5-t4Cc.cer
File: dbvImtBCDee1vC3TL-o7l5-t4Cc.cer (raw, json)
Hash identifier: gdi0c9wpLFAtHkfdOCJqTm0c73TuoCIKo8NJxPeJYOo=
Subject key identifier: 75:BB:C8:9A:D0:42:0D:E7:B5:BC:2D:D3:2F:EA:3B:97:9F:AD:E0:27
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942669D37F3307ACEEB0D77FD5B06FBF97
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:47:37 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 50883
IP: 91.216.6.0/24
IP: 178.216.112.0/21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:69:d3:7f:33:07:ac:ee:b0:d7:7f:d5:b0:6f:bf:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:47:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=75bbc89ad0420de7b5bc2dd32fea3b979fade027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c5:86:98:ad:3f:d1:a0:86:f6:58:76:3f:ad:
4a:83:bf:93:b8:7a:c5:42:25:2e:8e:75:9d:86:eb:
e4:5c:85:b1:31:34:e2:bc:4e:ad:b6:78:a1:03:a1:
1e:55:cf:1f:49:05:9e:1c:5c:3c:45:d5:0a:f3:12:
b7:7d:83:ce:c4:42:0d:1e:68:5d:c8:5d:bb:d9:c9:
c2:29:48:3a:b9:46:ee:23:6a:d9:00:60:d1:6d:41:
aa:72:e3:f3:59:fc:ac:8e:94:1e:3d:70:3d:28:1a:
55:ea:bf:ad:ff:bb:c6:9b:48:f7:8a:18:9c:b5:4a:
d4:ab:cf:79:c6:de:45:bd:2f:a9:23:89:46:cc:7e:
04:de:23:b6:13:4e:fb:86:67:4d:34:5e:58:81:f5:
7a:94:a9:40:2a:98:0c:b0:65:fe:2b:06:82:b3:92:
83:d2:42:3d:72:70:93:98:cf:f2:da:50:2c:6e:17:
39:ed:61:21:d1:03:33:8e:71:58:02:47:9b:1d:89:
7f:15:7c:99:f8:30:dd:53:32:09:7b:52:40:44:18:
30:bb:03:2c:1d:f3:28:29:34:22:fb:c5:e3:7e:7a:
32:07:e4:09:59:61:23:d1:eb:5f:df:b5:26:64:65:
fd:1f:15:1f:d7:14:7d:e4:2b:51:3d:c6:fe:f7:d9:
b5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:BB:C8:9A:D0:42:0D:E7:B5:BC:2D:D3:2F:EA:3B:97:9F:AD:E0:27
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0b87ee-1064-4137-8490-02fa218d14f8/1/dbvImtBCDee1vC3TL-o7l5-t4Cc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.6.0/24
178.216.112.0/21
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50883
Signature Algorithm: sha256WithRSAEncryption
ad:ef:3d:7a:f5:73:41:df:76:61:fd:07:9d:4a:9f:9b:01:21:
42:a3:7b:9c:3a:e1:cc:22:42:7f:8a:2a:43:3d:4e:cb:13:9d:
df:3d:75:94:ce:65:a7:5f:1c:b8:05:ea:66:41:c2:f2:a7:26:
8e:1f:9e:97:ec:8a:65:a4:98:d3:bd:4c:bc:e9:87:c9:ad:b1:
e7:f2:ff:1a:68:80:2a:7b:fd:8c:c6:d4:9f:f9:a2:c0:32:ca:
46:e9:d5:96:eb:7f:ed:99:58:8b:23:71:a4:f8:d4:de:12:2e:
c9:17:aa:e1:a3:02:82:6e:c4:a0:0c:5e:98:29:3a:dd:cc:f9:
c5:e2:23:33:75:52:03:cc:bf:df:b2:94:a2:b7:c1:2c:5c:c3:
3e:7f:96:ac:0d:57:74:22:f4:94:b5:bc:2a:2e:45:57:73:2c:
7f:7d:9b:13:71:e3:c1:72:2e:8d:91:73:41:4b:71:87:81:64:
fb:23:34:78:d1:c4:b0:84:dc:85:72:4f:db:9a:40:09:50:3d:
9c:d3:e0:7c:45:63:24:48:5b:a9:61:c8:fa:9f:ad:bd:4e:66:
4b:86:4d:4e:27:26:94:02:81:90:8f:e0:c9:5f:cf:7c:91:e1:
3b:9f:c7:7a:7a:b6:ec:3e:28:14:38:48:6a:93:de:84:4f:4b:
e1:f5:72:41
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:27:46 2025 by rpki-client