Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iNXgmvgqlpGMhqZHtO3Njrsjgg0.cer
File: iNXgmvgqlpGMhqZHtO3Njrsjgg0.cer (raw, json)
Hash identifier: SKJV4MgED+n497K8DCrDjAs8wsyBvyRC+y7Ymr2mBy0=
Subject key identifier: 88:D5:E0:9A:F8:2A:96:91:8C:86:A6:47:B4:ED:CD:8E:BB:23:82:0D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D6DF89AF2BF2D385FDC9AE3D6D799B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:47:52 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 30761
IP: 185.73.252.0/22
IP: 193.22.7.0/24
IP: 2a05:4780::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:df:89:af:2b:f2:d3:85:fd:c9:ae:3d:6d:79:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=88d5e09af82a96918c86a647b4edcd8ebb23820d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:28:56:89:31:09:d0:74:ad:3b:f2:6b:87:d3:
21:5f:4e:07:81:10:a5:fb:e8:7b:87:1c:78:d3:df:
1e:22:21:25:65:4c:01:25:ae:97:af:6e:9a:30:74:
af:75:64:24:b8:a6:3a:de:05:74:e3:ed:a8:a9:65:
46:92:01:16:20:90:91:93:1d:21:60:6d:d4:38:2c:
e1:3b:8e:d3:46:75:8b:14:09:1d:47:a2:6a:82:a2:
36:8c:83:35:f3:1a:11:14:5b:09:34:4c:95:80:0e:
21:4a:8d:53:25:a3:ef:da:a4:04:fe:8c:72:85:4f:
97:51:28:99:82:45:b7:64:6e:b9:15:7c:a8:97:37:
92:bd:62:c9:d9:01:1e:75:cc:d9:9d:03:f7:57:66:
73:5a:c5:92:91:e3:3e:24:71:bf:fd:eb:b4:e7:97:
4f:f4:79:3b:a0:42:74:58:47:65:b5:b5:26:79:56:
29:ba:b6:14:ca:96:f0:a3:3d:48:5a:33:60:49:22:
70:5d:1f:a7:71:0f:c8:da:f4:20:6b:44:40:1e:2b:
45:92:9e:b1:26:45:e5:1d:89:db:32:38:3e:18:e2:
9c:bb:d5:6c:83:3e:5b:5b:5b:56:9a:fb:d2:c9:29:
0d:71:c5:44:0a:d6:3e:cb:10:49:77:be:bc:91:b6:
34:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:D5:E0:9A:F8:2A:96:91:8C:86:A6:47:B4:ED:CD:8E:BB:23:82:0D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7dbe93-5df8-48a3-8613-293b62794850/1/iNXgmvgqlpGMhqZHtO3Njrsjgg0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.73.252.0/22
193.22.7.0/24
IPv6:
2a05:4780::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
30761
Signature Algorithm: sha256WithRSAEncryption
24:33:a3:95:6a:8b:b4:b5:c1:36:bd:a9:93:7c:26:30:4a:db:
1c:27:63:7c:f3:df:20:73:12:d9:5d:10:0f:27:f0:7c:64:95:
86:a8:b1:9b:0d:b0:dc:fb:be:92:99:e6:52:2e:b5:24:77:78:
5d:b7:4d:bc:38:74:d8:f9:bf:1a:91:7a:dd:b3:5e:de:17:8e:
26:d6:0c:10:3a:47:8b:3a:e3:2e:8a:5d:10:e4:fe:ab:78:1d:
87:01:d6:f6:9a:81:f6:ac:6b:a1:c9:d2:64:db:99:c8:53:ec:
ba:ac:b3:d0:5e:5e:5b:da:08:65:03:42:ba:72:f1:52:3b:a7:
09:f7:78:37:cb:16:d3:b6:2c:6a:0f:91:5d:82:5e:42:63:f1:
f8:62:9a:67:9c:67:12:f0:09:ca:e9:47:7f:f4:24:68:75:fb:
c1:1d:e3:86:12:dc:7c:25:a4:1a:25:96:2c:f5:85:9e:13:99:
44:94:f8:af:40:6d:53:7a:c6:e8:4c:b3:ca:f6:41:b4:3f:4a:
91:c4:35:28:99:e5:33:7d:72:de:15:8d:62:1e:1d:fe:50:60:
b8:8d:b4:c1:63:6a:d8:cf:80:6a:73:9c:93:db:69:a9:d3:68:
74:ac:45:fd:9a:46:fe:39:b5:ed:c8:64:4f:93:81:8b:fd:cf:
bc:f9:da:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:54:00 2025 by rpki-client