Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e_es5VMOXVCQfS3bQ1vym03x1uQ.cer
File: e_es5VMOXVCQfS3bQ1vym03x1uQ.cer (raw, json)
Hash identifier: PJoe7W+4XaDgyjcM97NNQCk4swHKyVtq/dSZU6hHqR4=
Subject key identifier: 7B:F7:AC:E5:53:0E:5D:50:90:7D:2D:DB:43:5B:F2:9B:4D:F1:D6:E4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B1AF72F2DDF3CC9535702C3BDC40D5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:00 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 199969
IP: 195.88.122.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:af:72:f2:dd:f3:cc:95:35:70:2c:3b:dc:40:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7bf7ace5530e5d50907d2ddb435bf29b4df1d6e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:91:24:9b:be:96:a5:5c:fb:bb:15:99:d6:89:
c9:d8:9f:ce:1d:77:c5:7b:7f:d2:1e:8a:49:f8:50:
37:e3:ef:98:57:99:3a:87:af:51:93:42:72:d5:10:
a3:1f:db:0d:cb:1a:f0:33:cc:d7:4e:ad:4a:e5:f6:
1f:82:c1:ce:6e:d1:ef:e7:7d:5a:c9:74:c6:98:20:
20:37:b0:42:59:be:16:99:38:7d:1f:53:43:74:d8:
1a:48:94:6a:91:83:1e:06:f1:4d:8c:5d:5d:f1:98:
3e:87:3e:4b:40:79:3b:00:e9:99:3c:6e:83:51:e6:
eb:dc:cf:1a:f9:3f:01:e1:79:39:26:ce:e2:a8:96:
7f:4a:d5:d5:ce:6d:c2:bb:72:6c:59:44:fc:9f:18:
f5:b3:60:6c:39:5d:16:a6:08:fb:c8:33:68:c1:6d:
b5:c1:b1:2e:7d:04:99:51:80:a0:81:e4:cc:9d:1b:
d0:3a:0c:81:fc:85:02:80:7b:da:e3:b1:43:10:9f:
85:f9:39:2f:da:0a:0c:d6:8c:db:da:32:62:bf:07:
95:19:bb:1f:9a:05:57:12:f2:70:5f:26:f6:dd:88:
96:b5:f7:30:63:3c:13:63:f3:90:53:60:89:9c:79:
35:29:25:f1:09:df:58:dc:d2:ac:dd:b2:f6:e5:45:
f2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F7:AC:E5:53:0E:5D:50:90:7D:2D:DB:43:5B:F2:9B:4D:F1:D6:E4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/5171c7-8dfc-4d11-ae22-c28be483878a/1/e_es5VMOXVCQfS3bQ1vym03x1uQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.88.122.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199969
Signature Algorithm: sha256WithRSAEncryption
5c:19:80:a5:21:55:a9:58:ec:0d:79:6d:1d:d6:1f:41:d3:15:
c2:c4:17:07:17:df:80:75:68:09:54:a1:ac:36:e0:1f:c1:af:
67:b0:49:cb:96:44:93:24:15:8d:7b:92:9b:c0:9b:c0:3b:5c:
93:e3:c3:08:08:0b:34:b1:64:3e:63:c1:e7:e5:5c:09:38:a8:
44:b3:15:4d:62:ca:1f:48:1e:58:96:ee:6d:59:29:54:09:92:
28:50:ba:f2:d4:5e:c7:d8:4d:05:d7:05:4c:01:53:7c:b5:93:
61:91:df:b3:8e:50:96:f9:40:8b:f1:6e:fd:33:a3:41:2d:24:
4d:10:c9:89:e6:18:95:bd:f1:12:e4:0b:c6:b9:2b:a2:03:ae:
14:74:76:41:6f:9f:44:df:19:f1:3d:54:24:16:a6:c8:f4:1a:
a4:63:5f:2f:12:73:53:4b:25:86:f2:66:df:5d:c9:ab:84:3c:
db:29:67:bd:a3:f3:28:cd:36:ca:41:a0:e0:32:92:12:96:92:
73:69:9f:3b:29:2a:5d:33:30:2e:42:5c:19:ed:be:7b:0d:54:
92:63:fc:08:4f:e7:dc:a4:0c:6a:92:b8:ee:27:0a:1f:d2:75:
cc:af:bf:ab:7c:6c:fe:d7:c1:f4:76:36:86:b7:5a:a7:28:f3:
33:cc:e9:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 23:08:19 2025 by rpki-client