Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/is0usvBhi3LGRtmX08ld2Da90AY.cer
File: is0usvBhi3LGRtmX08ld2Da90AY.cer (raw, json)
Hash identifier: FAhI4GPc1Sy7NKq4jPwrh1dd3LY01N8MJfCQZNObwh4=
Subject key identifier: 8A:CD:2E:B2:F0:61:8B:72:C6:46:D9:97:D3:C9:5D:D8:36:BD:D0:06
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA244C4AC223AA14ED8E315C3D5221
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:47:54 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 51423
IP: 213.133.224.0/19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:24:4c:4a:c2:23:aa:14:ed:8e:31:5c:3d:52:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8acd2eb2f0618b72c646d997d3c95dd836bdd006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:56:23:70:54:18:ea:f0:09:80:2d:a7:33:40:
df:95:09:6d:a5:82:d3:3e:c8:9f:7d:86:5d:a7:14:
29:6d:97:80:fa:76:dc:2b:60:b7:26:67:f1:82:24:
0f:85:20:69:01:e5:bb:de:5f:de:dc:e3:94:ed:9c:
75:7e:b7:84:44:77:37:25:6f:a4:db:ec:18:ef:19:
d1:e9:fd:94:b3:7d:f8:fa:8a:15:3c:dd:66:8d:fc:
31:cb:fa:6f:24:b9:d9:65:64:68:9d:9c:bc:95:df:
58:74:2a:23:73:7d:f8:cc:92:d4:de:77:e2:11:c1:
6c:7c:e4:e2:92:d6:cb:09:c8:20:81:92:2d:3f:a7:
2b:d3:0e:eb:9e:9f:b6:9f:2c:b8:8c:06:53:d9:2b:
a7:20:8a:52:ef:23:8b:1d:0e:d0:c0:ce:d7:28:74:
15:a5:43:8d:53:92:69:44:b1:a1:82:05:6a:d6:8c:
e6:cf:04:c8:a3:d4:a3:74:79:23:98:83:57:33:23:
b4:37:61:d2:46:4e:32:88:72:ca:a8:5f:ee:2f:87:
e9:90:24:3d:26:df:4d:54:d7:b2:86:d8:75:57:07:
db:66:37:62:5f:7c:b7:92:27:5d:0b:9b:7b:f3:96:
44:6f:13:4d:76:db:4d:01:9b:a6:bd:8d:fb:85:ae:
17:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:CD:2E:B2:F0:61:8B:72:C6:46:D9:97:D3:C9:5D:D8:36:BD:D0:06
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0587c-31e8-4a9b-af69-794c9d928cdc/1/is0usvBhi3LGRtmX08ld2Da90AY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.133.224.0/19
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51423
Signature Algorithm: sha256WithRSAEncryption
8f:f8:19:3f:e5:37:33:7c:48:4f:5c:0e:84:c5:3b:56:29:f0:
54:37:0e:fd:6d:e8:81:b3:75:41:db:85:bf:29:12:93:4f:be:
fc:d9:e1:cb:25:43:a5:0f:c6:e4:1a:38:21:a5:b9:da:c9:87:
6c:8a:d3:58:b0:40:1e:6c:d6:c5:b3:f0:02:1a:09:f6:5a:56:
9d:fd:c4:15:e2:eb:38:9f:37:a8:d3:11:5e:17:26:60:ef:ab:
bb:b8:d0:6b:5b:e6:d9:5a:a4:e8:0e:c6:66:2b:19:a5:b9:ec:
6b:3c:1b:04:f4:84:29:bc:28:bc:2b:bf:1d:a4:8b:07:01:5f:
8c:e9:fa:60:ae:96:71:66:53:ff:36:46:9b:f4:48:8a:58:02:
44:a2:64:39:ad:dc:20:50:e0:d7:73:d3:3f:d1:f4:70:91:9d:
4e:58:29:36:76:20:35:31:97:b2:c0:4f:55:d0:93:ee:45:8c:
7d:7d:dc:b3:27:66:0d:3c:ae:42:74:93:c7:76:03:dd:cd:7d:
f9:c4:89:60:0d:2a:61:4a:9d:2b:ed:23:80:0f:7d:1b:d1:a0:
dd:1b:c0:6b:84:ec:ce:70:b5:14:6c:c4:d7:53:cc:e4:2d:7c:
75:88:39:ce:dc:a8:e9:46:5d:42:af:30:2e:5e:8a:07:8e:32:
ca:23:b4:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:28:34 2025 by rpki-client