Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/m1iV5_am1KupyWH3E7LnlxXwIfA.cer
File: m1iV5_am1KupyWH3E7LnlxXwIfA.cer (raw, json)
Hash identifier: o3Lzk55QSLjWOLqIBy6uhoRmC8wfcB3MnLafZhlkeuE=
Subject key identifier: 9B:58:95:E7:F6:A6:D4:AB:A9:C9:61:F7:13:B2:E7:97:15:F0:21:F0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228E1870DE962540C0879F19FA556A35
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7b/134b82-bcfb-445c-bd42-fc2a97b7d53e/1/m1iV5_am1KupyWH3E7LnlxXwIfA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7b/134b82-bcfb-445c-bd42-fc2a97b7d53e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:45 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 51825
IP: 46.31.96.0/21
IP: 147.234.92.0 -- 147.234.103.255
IP: 185.24.204.0/22
IP: 213.137.64.0/20
IP: 2a02:5080::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:18:70:de:96:25:40:c0:87:9f:19:fa:55:6a:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b5895e7f6a6d4aba9c961f713b2e79715f021f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f7:2e:53:9a:c5:b1:09:fc:ab:57:81:2a:fa:
85:fe:ae:09:76:04:97:cd:2d:d5:bf:71:5c:3c:4f:
8a:14:27:47:ac:a6:3d:77:ca:2f:10:86:11:0a:32:
93:df:ae:00:8e:6d:f9:00:37:ff:15:ca:95:7a:b5:
da:ab:48:ca:61:4b:2f:54:7d:6e:fb:8f:87:1a:8b:
fd:76:5a:5a:18:81:5b:aa:0d:a4:ae:2f:cd:20:60:
9a:da:9b:59:9a:b8:15:a9:2b:df:7a:44:bc:ed:ab:
1f:ab:d1:b4:21:fa:2e:33:d6:1e:a3:b1:f8:39:47:
63:ce:d8:e6:d6:79:68:06:f0:2d:eb:8d:3c:f4:c7:
6a:7d:d1:77:a9:ab:db:f2:4d:d8:9b:b7:39:5e:85:
35:a6:02:8b:66:69:3c:e0:5c:10:be:e3:70:85:50:
be:3f:66:2e:61:87:d1:b6:f2:46:3c:7f:0c:fd:77:
93:54:23:7c:4e:90:46:4f:7d:fb:bd:1e:d7:95:f1:
b3:83:3b:88:9f:90:45:26:ec:6c:27:15:e0:b3:d8:
12:dc:94:7b:a7:18:ff:8d:c8:65:02:d2:59:fd:8f:
d5:51:1d:1f:fb:eb:fc:9b:be:5b:43:12:3b:b0:fd:
62:cd:fd:55:5a:ec:7a:ff:e7:57:dd:f9:74:08:e5:
e6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:58:95:E7:F6:A6:D4:AB:A9:C9:61:F7:13:B2:E7:97:15:F0:21:F0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/134b82-bcfb-445c-bd42-fc2a97b7d53e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/134b82-bcfb-445c-bd42-fc2a97b7d53e/1/m1iV5_am1KupyWH3E7LnlxXwIfA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.96.0/21
147.234.92.0-147.234.103.255
185.24.204.0/22
213.137.64.0/20
IPv6:
2a02:5080::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51825
Signature Algorithm: sha256WithRSAEncryption
1d:76:25:16:fb:88:9e:3c:69:6e:8d:1f:2e:2a:36:b0:a4:ed:
3c:82:e5:47:14:21:93:10:21:6d:1f:bb:c3:48:4d:9e:8b:81:
ca:6d:f3:08:e7:3a:73:80:16:be:c2:0f:05:c4:3d:d8:83:25:
07:d2:c0:0f:49:61:9c:eb:d0:6f:be:2f:97:bc:9e:0d:b0:22:
0f:3c:db:dd:90:61:76:58:87:bd:9c:34:88:e3:4e:d6:42:2e:
7b:1d:33:68:a8:91:36:e5:84:3e:42:ba:70:d3:b8:6a:e6:46:
2d:dc:e6:71:84:cf:ea:50:1e:ad:14:dd:43:e6:43:4a:6d:55:
fc:bd:45:98:9f:07:5c:d4:53:d2:f2:20:d7:92:34:eb:d8:e8:
3a:11:a2:de:ce:3b:8a:40:2a:a7:9f:48:d0:ee:06:80:5e:6f:
33:5f:1a:69:fe:f9:3f:3a:d8:89:56:1f:2e:88:f3:00:a7:8f:
14:7d:e1:1c:d7:79:ba:90:67:90:7e:18:5e:63:0d:5a:35:13:
27:63:12:75:44:5b:61:93:fd:70:68:10:56:a4:1f:3c:6c:db:
a6:86:65:cf:47:29:92:d8:08:2a:8e:79:db:2d:34:29:77:4e:
da:9e:66:37:82:1e:ca:f6:19:f6:1c:e7:9a:1a:f1:52:29:f5:
45:ac:e3:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:21:04 2025 by rpki-client