Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lRTfn9w6CxKMIO6MBmKMQ8lYu_A.cer
File: lRTfn9w6CxKMIO6MBmKMQ8lYu_A.cer (raw, json)
Hash identifier: yNOW7DwlUcS/H+Y9NFV/zHI+t24SnTXPPFHC9WTMsCE=
Subject key identifier: 95:14:DF:9F:DC:3A:0B:12:8C:20:EE:8C:06:62:8C:43:C9:58:BB:F0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D8B48000BD53522337494EE1DE47C4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/lRTfn9w6CxKMIO6MBmKMQ8lYu_A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:48:43 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 42199
AS: 42402
IP: 91.189.56.0/21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:b4:80:00:bd:53:52:23:37:49:4e:e1:de:47:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9514df9fdc3a0b128c20ee8c06628c43c958bbf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:58:a8:9e:ba:8b:e8:a5:5c:dc:a8:d0:75:d4:
da:5b:ea:9e:20:fc:34:c4:c7:17:cc:57:f8:0b:69:
0f:5f:de:0b:af:42:fe:5d:73:5e:cc:4d:30:f5:f4:
20:13:0e:19:38:57:1e:d7:12:79:d1:7c:c0:34:47:
2a:1c:bf:2f:be:85:8b:08:d6:af:c7:1a:18:b7:65:
95:93:15:08:94:c9:2f:26:81:47:9d:aa:97:b8:02:
f2:41:42:75:f8:26:36:e0:9d:27:38:94:ae:7e:e9:
31:2d:11:3a:fc:e3:8b:f8:d1:2b:b5:41:40:ae:8d:
d8:42:b0:b0:d8:5d:1c:13:fb:71:cb:9d:1d:7c:5a:
57:26:cf:71:bf:99:7c:c5:2a:11:e1:ae:ae:ef:a3:
3a:8f:58:37:a6:72:46:53:32:36:ef:71:ea:84:71:
35:b6:e2:65:92:2b:6f:55:9b:f2:ae:f3:19:e3:5b:
6d:52:20:b0:47:4d:6d:92:4c:f7:f0:19:68:e5:f1:
67:2b:f2:a2:65:ed:69:a6:5a:a1:98:92:34:ee:6f:
7e:7c:c5:c5:f9:4e:06:fe:ab:d2:21:74:4d:f2:7b:
6f:05:30:f3:9d:12:ec:f5:64:8e:f7:f1:e0:07:fa:
bc:3c:78:b5:a3:94:50:78:ef:7c:00:ac:01:ac:db:
95:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:14:DF:9F:DC:3A:0B:12:8C:20:EE:8C:06:62:8C:43:C9:58:BB:F0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/97fb0d-d77f-4467-8627-e222bf8529b8/1/lRTfn9w6CxKMIO6MBmKMQ8lYu_A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.189.56.0/21
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42199
42402
Signature Algorithm: sha256WithRSAEncryption
1c:db:5a:f2:a1:6d:81:17:7a:c2:71:fc:e8:af:1d:3d:40:f7:
e6:9c:3b:41:49:94:d8:94:03:e5:11:6d:9e:09:00:b2:56:0e:
09:83:b7:d4:c1:f8:c1:40:12:3f:01:56:b8:3a:74:f9:8d:09:
f5:73:42:e1:ad:7a:bb:3e:e9:c6:58:6a:24:b4:2a:cb:8b:01:
39:f7:b5:e5:79:e6:74:f6:25:bb:1e:fb:7f:b9:e8:47:10:f4:
a7:c3:53:46:37:7e:e0:c0:02:68:9a:76:3a:4e:fd:91:6e:4e:
8c:b3:f6:ae:03:c8:9f:d7:a5:72:57:ad:13:5b:58:f4:57:15:
93:24:3d:58:8f:ce:3b:04:97:c5:7c:d3:49:b6:73:37:b6:3a:
f4:fc:a2:e4:46:36:a4:93:93:72:59:ea:33:13:27:1b:b9:7f:
e6:5e:38:20:15:1b:83:64:9d:c2:e7:f4:b6:fc:5a:75:41:d9:
d5:a2:4b:10:cf:38:18:59:07:76:de:93:4e:f0:66:4f:14:51:
fa:76:a9:f4:0e:e3:d5:fe:a2:36:26:b9:80:39:16:51:d5:44:
85:b3:27:f1:7c:d8:f1:d7:23:54:01:b6:2e:ef:8d:f1:9d:30:
30:1b:71:40:6b:ee:53:d7:45:f5:27:fe:13:cc:1b:db:4f:64:
dc:fa:5f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:19:48 2025 by rpki-client