Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lRibFY2NYBG6X5YlLTAmanDT4GY.cer
File: lRibFY2NYBG6X5YlLTAmanDT4GY.cer (raw, json)
Hash identifier: 1VjLEhAYCUktQvDAPxbpgPZi0W4cooqvtM1Q4bzPj1Q=
Subject key identifier: 95:18:9B:15:8D:8D:60:11:BA:5F:96:25:2D:30:26:6A:70:D3:E0:66
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B55435F5F141983F1E17FD1CCCDE75
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:49:42 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 204302
IP: 2001:678:640::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:54:35:f5:f1:41:98:3f:1e:17:fd:1c:cc:de:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=95189b158d8d6011ba5f96252d30266a70d3e066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:46:21:9d:be:9f:9f:5b:39:6e:38:50:21:f9:
68:72:3d:a9:db:9e:b3:9c:ed:02:28:b2:09:0e:24:
c6:fd:96:8a:4b:65:e1:e4:a0:72:e5:b1:ce:3f:e8:
4f:87:41:af:a7:bd:40:bc:ac:db:16:b1:5a:fc:5d:
6a:d9:1c:be:52:ea:22:59:14:40:08:11:dd:8e:d9:
3e:10:01:46:bf:9f:da:ca:83:e2:71:67:29:c1:a1:
a5:f4:cb:c3:b6:5a:8b:1c:5e:f6:f4:fd:9d:47:41:
b7:fd:8b:25:96:fe:b6:36:f3:c7:96:33:a4:c6:60:
e9:23:5c:b5:ea:d6:02:f5:83:a6:08:c8:0b:61:d1:
65:81:fb:a7:44:56:7f:d6:26:cd:84:82:8d:73:36:
bd:40:c0:22:3b:eb:b7:c4:3b:83:6f:87:23:33:ab:
86:8d:23:4d:b7:10:a2:86:0a:e2:3c:bd:03:80:29:
61:05:23:a5:90:1a:54:b2:13:2a:a0:ae:1b:71:57:
fe:50:55:e2:d4:82:73:3a:c0:30:27:59:f5:97:40:
e3:8a:d7:71:5b:6b:1e:88:37:60:ab:02:e1:c4:17:
da:b2:ef:4e:55:dc:4e:53:bb:1d:57:bc:23:4d:7b:
7e:83:cc:44:17:b5:d2:92:1c:05:47:f8:12:5f:02:
f5:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:18:9B:15:8D:8D:60:11:BA:5F:96:25:2D:30:26:6A:70:D3:E0:66
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d27ad0-55c2-4904-a8c5-ace180ff9b19/1/lRibFY2NYBG6X5YlLTAmanDT4GY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:640::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204302
Signature Algorithm: sha256WithRSAEncryption
42:ef:90:af:8c:18:dd:af:3a:85:a4:3e:95:9a:44:76:ef:b6:
f7:b0:ac:fb:0f:d3:fa:02:6d:e3:e4:4b:2b:10:41:b1:04:5c:
ea:98:58:cd:ad:b4:ef:3a:83:3c:ef:b2:a1:4b:ed:8a:6b:41:
0f:7c:af:f9:2d:b2:bb:c9:d5:69:30:cd:bf:63:9f:a3:31:91:
95:72:8b:77:99:af:99:53:e2:b6:cc:88:c0:8c:c9:5b:51:b7:
d0:f7:0c:07:a3:55:22:01:4e:dc:22:df:0d:11:00:92:2f:8d:
04:95:9a:a6:fa:bc:55:f5:a4:f2:63:2e:6d:07:2f:9a:9b:dd:
51:c5:0c:d3:ab:8b:64:e3:78:bf:12:47:17:c6:15:2a:05:99:
52:67:5d:b9:81:4d:94:a3:fa:ad:b0:63:75:38:a1:51:f2:57:
a6:00:00:89:69:94:3e:dc:fd:8a:f0:1b:0f:df:18:4a:2e:14:
48:4e:bf:d8:e1:41:a6:74:86:b0:a1:5d:fa:4e:6d:c0:b1:68:
01:4d:bc:22:71:9d:06:16:97:40:14:06:2e:c0:a3:fc:41:16:
77:e9:f6:fa:0a:63:6c:68:a0:15:c4:d7:98:24:16:f9:d8:d4:
75:64:d6:bf:ad:4b:fc:32:02:cf:f3:d4:fd:3d:58:8f:72:5a:
73:40:46:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:09:10 2025 by rpki-client