Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/kTxeovTqvz88Qt88Mx6cuhDJOgk.cer
File: kTxeovTqvz88Qt88Mx6cuhDJOgk.cer (raw, json)
Hash identifier: eHWvQYnM45/IoPiAvpkyIcyt4F/Janj+jHNDahDfKJ4=
Subject key identifier: 91:3C:5E:A2:F4:EA:BF:3F:3C:42:DF:3C:33:1E:9C:BA:10:C9:3A:09
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228E4434551C50A21783884A73AC371F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/kTxeovTqvz88Qt88Mx6cuhDJOgk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:56 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 59990
IP: 91.246.76.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:44:34:55:1c:50:a2:17:83:88:4a:73:ac:37:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=913c5ea2f4eabf3f3c42df3c331e9cba10c93a09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:e3:0e:77:71:22:dd:36:b5:1f:8f:b2:e5:20:
9b:4c:78:ef:a9:90:9a:c5:14:48:ff:0c:68:07:f6:
f2:7f:00:50:aa:f9:b4:b5:9b:f1:e3:27:5b:f9:f3:
51:6d:37:4e:fd:cd:d2:6a:21:07:33:53:97:91:e3:
b4:fd:ac:e7:8a:d6:02:69:bd:81:fb:d3:b3:b2:90:
16:56:4a:6b:47:f7:78:30:bf:02:ba:04:71:9b:b9:
53:90:74:f0:e1:8a:bc:0f:64:f7:f0:58:cf:c0:11:
88:b1:5b:a5:d4:d9:50:7e:b9:c4:90:f9:3a:ff:da:
81:69:46:2a:c7:d6:a0:75:11:4c:b4:81:fb:d5:fb:
fa:a9:5f:54:1d:5b:a9:d2:c7:09:e8:c1:e6:3e:a5:
7c:d6:78:ee:6f:99:d1:cd:e8:98:e3:42:27:ec:ad:
fd:b4:68:cd:4c:2e:98:49:5b:01:76:16:4f:5b:5f:
2e:49:eb:f0:10:49:ab:2a:f3:c3:c2:b6:19:b0:c7:
0f:12:1b:58:53:6a:3b:aa:34:1c:3a:c6:3f:d0:c7:
d2:a3:dd:48:88:c8:ea:37:c5:72:97:1a:e8:d0:01:
a0:e4:cd:60:36:6a:5f:9a:89:28:00:35:b1:a0:de:
49:1e:f7:d0:d9:09:22:84:c0:98:00:0e:7d:27:49:
69:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:3C:5E:A2:F4:EA:BF:3F:3C:42:DF:3C:33:1E:9C:BA:10:C9:3A:09
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b40d9-978e-42a3-831e-b108ad9e22c8/1/kTxeovTqvz88Qt88Mx6cuhDJOgk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.246.76.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59990
Signature Algorithm: sha256WithRSAEncryption
8f:d0:64:22:1d:fa:52:a0:28:93:92:9e:cf:f3:28:6a:71:dd:
c2:44:e5:b8:18:0b:78:ac:6c:fc:70:c6:be:f5:1d:30:f6:fe:
5a:b1:6d:dc:f4:25:6d:d1:d7:bf:e3:8f:0a:85:a1:27:8a:33:
24:d4:a6:43:f3:d0:cd:df:a8:df:78:96:ff:2f:e7:60:5f:7b:
3c:c6:c4:c5:77:1d:14:bf:af:5b:22:9e:5a:11:6e:ff:11:d9:
89:a5:c8:f3:9b:62:28:1a:28:61:22:51:05:6e:96:f7:b0:d3:
30:1d:f9:17:b6:6b:3a:92:a3:0d:67:5d:9b:d9:37:f4:e0:ae:
eb:62:44:8f:c8:5f:c8:19:fb:31:54:33:10:3a:f8:aa:61:19:
d0:94:08:40:ee:48:65:68:ab:09:8b:44:66:d5:c3:e1:49:bf:
d8:1d:39:19:4d:32:26:14:89:c8:6e:df:0a:fe:62:04:db:09:
f5:cf:1a:ae:35:38:26:f7:c7:08:5b:12:ce:11:fa:9d:09:da:
b4:e7:8e:cf:d0:d2:44:93:6a:92:1e:ec:8e:c7:cb:c3:48:de:
9e:64:0a:fa:46:1a:c0:e4:1b:a4:11:f2:00:63:14:5f:92:e8:
e3:8e:ad:0d:ab:a8:82:a7:44:cf:c5:ad:cc:7d:19:89:20:96:
1b:34:46:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:54:14 2025 by rpki-client