Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.cer
File: iVmuP0F3o83ZZo0MW4qJ-RhrW_w.cer (raw, json)
Hash identifier: +HKr2aUlA8+f27ooAj9H7m/lN5D+bQb+KeEzO6r8JKo=
Subject key identifier: 89:59:AE:3F:41:77:A3:CD:D9:66:8D:0C:5B:8A:89:F9:18:6B:5B:FC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266C1AC25DA7986351A39AEE7367EC77
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:50:06 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 47835
IP: 91.206.198.0/23
IP: 91.230.235.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:1a:c2:5d:a7:98:63:51:a3:9a:ee:73:67:ec:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:50:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8959ae3f4177a3cdd9668d0c5b8a89f9186b5bfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fb:d9:e1:de:40:3c:35:6d:73:8c:eb:d4:e3:
d0:78:32:13:62:9a:cd:e9:f0:de:2d:a9:1e:e6:71:
1e:b1:05:4e:4f:94:72:e6:90:76:04:5b:d7:6c:d5:
0e:e5:ff:75:23:c5:97:5d:ec:78:f5:e5:90:ac:99:
2d:f7:29:f3:ef:0a:3d:33:fc:ec:6b:e3:77:67:c9:
bf:58:3e:e8:05:30:3d:fb:6f:af:50:44:df:20:b1:
6a:0d:98:9a:c8:44:22:66:49:fe:eb:7a:d7:d5:fb:
78:e4:21:3b:60:d9:c3:c1:34:a0:5b:66:32:c5:6f:
a8:88:83:56:91:2e:76:50:3c:76:e1:4e:b7:4e:9d:
f9:ad:34:bb:cb:c7:3a:99:3b:3e:4c:ab:76:7b:f0:
a5:5e:0e:8d:f5:8f:95:d8:1b:bd:f5:5a:88:f1:06:
6b:03:94:30:6c:c8:b5:ba:38:d7:cd:f1:82:61:a4:
04:d8:ba:b5:9e:6c:5f:97:3f:af:de:4c:3e:1a:2c:
c4:92:c3:cc:1b:4a:9e:5b:55:22:25:33:93:f7:ee:
65:9b:c6:34:4c:74:b4:ad:6a:93:cd:42:cf:74:7d:
fc:58:58:34:be:b5:ac:7f:25:34:4d:04:86:97:28:
33:f1:e6:74:e5:9a:57:90:ed:5c:f7:25:f8:2c:63:
5b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:59:AE:3F:41:77:A3:CD:D9:66:8D:0C:5B:8A:89:F9:18:6B:5B:FC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.198.0/23
91.230.235.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47835
Signature Algorithm: sha256WithRSAEncryption
a9:ba:4e:23:1b:35:27:7c:45:7a:28:0f:b8:29:66:07:5c:ba:
3e:2c:87:91:a3:c4:85:d5:11:df:92:92:10:22:e3:7d:60:64:
a4:b7:a3:1e:cb:23:7c:ec:5c:0c:2b:02:c6:78:84:52:92:05:
4e:cf:ab:46:34:34:84:5d:e7:f4:09:bc:f4:a0:62:a6:88:0a:
e1:8d:3d:74:94:ec:40:06:c8:c8:8c:62:cb:78:89:5f:c8:fc:
da:40:bd:c5:cf:3d:72:64:96:de:50:08:7f:7b:0c:8b:b3:0b:
66:52:4a:9a:7a:f9:09:d0:ad:7d:7b:67:47:eb:fb:a4:24:5a:
b2:64:0d:a1:d2:92:8f:f7:99:ca:a4:09:53:90:42:e3:c8:da:
82:64:46:48:8a:30:ef:24:eb:99:4c:30:6e:4a:4b:1c:71:c0:
a2:a0:91:5c:6b:07:c3:0d:07:9d:f5:90:2e:b0:51:5a:ed:30:
8d:2c:0d:5f:5d:51:3e:c1:a5:d7:bc:1d:75:89:2b:95:a9:72:
d3:98:00:20:3c:18:d9:0f:43:fe:4b:92:30:d7:6d:bf:14:c1:
40:2e:60:17:34:89:c5:7c:18:30:cf:e1:b5:68:a4:58:83:e7:
7c:3c:a1:58:90:bc:a2:ac:22:e5:40:eb:bb:ae:f2:fa:4f:a9:
8e:c3:e2:8c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:36:44 2025 by rpki-client