Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ddDr2PVm4_q34jVLcUBgxvpH4lQ.cer
File: ddDr2PVm4_q34jVLcUBgxvpH4lQ.cer (raw, json)
Hash identifier: dHn4OMLyNpKJG0n2Nclk2Dy2TEUwsvMFW43rBvO/4K4=
Subject key identifier: 75:D0:EB:D8:F5:66:E3:FA:B7:E2:35:4B:71:40:60:C6:FA:47:E2:54
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C3AFCFB9EA898CF6DBF0BE9C80830
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:47:51 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 60510
IP: 91.238.34.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:3a:fc:fb:9e:a8:98:cf:6d:bf:0b:e9:c8:08:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=75d0ebd8f566e3fab7e2354b714060c6fa47e254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bd:ae:d4:42:45:4a:c7:f3:b1:32:fa:3c:ff:
71:ad:b9:bf:d2:9e:12:65:de:04:8b:28:d5:69:e4:
86:78:e7:b0:fc:f4:70:76:e3:8f:97:b4:d2:d5:95:
b8:f0:b1:14:77:ae:02:34:ff:0d:7d:88:11:62:2b:
c0:84:ed:86:6c:e9:b4:16:13:b7:26:e9:fc:f1:c3:
74:c0:39:b7:cf:8f:e2:51:55:91:4c:01:f8:2c:92:
18:a9:91:1b:d0:83:29:7f:8e:69:ea:38:d9:40:5d:
bb:1c:ae:6b:9e:24:56:72:29:84:49:e8:04:a1:e8:
8f:a8:b6:7e:ac:55:be:06:7e:d0:94:36:e5:80:4f:
1b:58:60:98:5a:a8:ba:81:d8:5e:d1:56:b0:a8:3c:
cd:93:0a:19:1e:1b:3b:07:08:2e:5d:e0:8c:85:e3:
d4:77:97:77:98:09:61:82:ee:88:d2:cc:5a:99:77:
b3:c6:9b:59:c7:91:5c:19:75:ee:07:71:a9:f3:8f:
86:ff:35:f9:44:bb:5d:89:65:4c:30:90:be:e6:e0:
d3:ba:67:c7:bc:31:0f:8e:fc:e1:c8:23:6e:80:6e:
c0:77:e3:dd:6b:f7:c4:bd:47:c0:61:6a:75:f5:6d:
b4:94:65:11:75:ac:56:80:29:d2:34:4d:32:32:e0:
9c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:D0:EB:D8:F5:66:E3:FA:B7:E2:35:4B:71:40:60:C6:FA:47:E2:54
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/483241-3dba-4392-aab0-39765a3f9dbc/1/ddDr2PVm4_q34jVLcUBgxvpH4lQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.34.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60510
Signature Algorithm: sha256WithRSAEncryption
74:7e:a3:bb:aa:60:2e:37:b0:82:28:a3:30:97:77:10:f9:ce:
67:a2:f7:14:3e:d8:6a:25:5b:50:b8:a1:1c:64:be:3d:44:14:
01:72:fa:ff:80:d4:f8:57:c1:45:c5:20:20:24:68:fa:5e:9a:
0b:4d:de:95:ad:b3:f0:1b:17:8c:fc:fd:c3:fd:9c:3f:57:af:
c5:b0:c9:b5:42:69:d5:43:a3:12:5b:2d:a9:b4:e8:26:80:61:
75:08:5b:02:4a:4d:54:0a:ca:1e:66:f8:8b:16:28:2c:7f:26:
c5:79:1b:ed:65:ed:d5:ab:8f:83:f6:29:26:62:e2:32:55:20:
82:e5:51:62:34:14:2a:38:bd:f9:4d:e2:28:9a:6c:4a:e3:b3:
a2:af:ee:08:96:e3:b0:25:e5:ff:75:f9:9c:c2:ef:5c:4e:fa:
34:bd:18:7d:15:5b:fe:77:bf:25:36:22:c0:18:ea:19:1f:3b:
51:96:0a:cd:75:00:3b:e9:06:49:df:1b:8b:7c:14:66:13:17:
04:e4:fd:29:7f:1e:ac:52:92:d4:f5:74:77:41:76:2a:3f:17:
88:a2:c4:9a:8c:e0:b0:ed:1d:7b:78:ec:0e:dd:17:5d:fa:16:
68:e6:44:ef:7a:6a:9a:57:81:ef:8d:54:06:58:73:a9:57:ea:
aa:00:e5:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:56:12 2025 by rpki-client