Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/m9o0FBNxKfo4psYcSWq4thQJzgI.cer
File: m9o0FBNxKfo4psYcSWq4thQJzgI.cer (raw, json)
Hash identifier: 6jJM3WSibgC730+F3PWeO3KAzb6v9cMHO2LhcdMMQXE=
Subject key identifier: 9B:DA:34:14:13:71:29:FA:38:A6:C6:1C:49:6A:B8:B6:14:09:CE:02
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194244492E2AF7A96232CEBB69C0A74761A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:47:41 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 34108
IP: 45.84.8.0/22
IP: 45.94.144.0/22
IP: 95.128.88.0/21
IP: 178.250.144.0/21
IP: 185.85.140.0/22
IP: 188.93.68.0/22
IP: 2a02:928::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:92:e2:af:7a:96:23:2c:eb:b6:9c:0a:74:76:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9bda3414137129fa38a6c61c496ab8b61409ce02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bf:a0:42:81:a9:a9:25:95:a0:71:08:03:b8:
5b:9f:6f:01:ec:ff:7b:8f:b1:d9:45:3f:91:28:3b:
76:92:ca:21:bc:18:64:98:26:40:1f:4c:bf:da:09:
a5:cf:c1:c5:79:56:06:2f:bd:0f:79:1d:ad:f8:18:
5c:1f:40:01:23:90:9b:b2:d4:e6:d8:05:9d:27:1b:
73:4d:0d:f6:37:34:4e:50:51:a0:a7:15:94:c5:e2:
1f:19:2a:bb:77:8e:1a:00:aa:79:20:7e:88:6b:87:
fd:5f:55:0d:11:e2:9d:67:28:a2:6d:6d:8e:9d:6d:
f3:dd:41:3e:cc:80:54:0b:aa:73:5f:ee:98:b7:5f:
68:58:e6:63:cd:bb:8f:7b:a7:82:86:20:b2:49:a4:
9a:da:f3:84:21:f4:19:22:65:94:b7:d0:09:bb:95:
a9:d1:c4:21:8a:7c:8c:13:d3:e6:d7:e2:b8:1c:f1:
b7:8e:86:e7:cf:21:54:95:7b:50:3d:70:e1:52:e6:
84:a3:32:3d:87:68:ff:84:cd:b0:1a:75:55:21:14:
19:8d:6d:a4:97:d5:2e:5d:85:2e:39:99:79:91:e3:
2d:d1:89:01:d2:41:37:6c:8f:d2:74:7e:03:24:83:
68:a4:83:84:11:bc:ba:27:4d:10:96:70:ee:b2:e4:
4a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:DA:34:14:13:71:29:FA:38:A6:C6:1C:49:6A:B8:B6:14:09:CE:02
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2995cd-465f-4b40-a455-16d3cd352f2e/1/m9o0FBNxKfo4psYcSWq4thQJzgI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.8.0/22
45.94.144.0/22
95.128.88.0/21
178.250.144.0/21
185.85.140.0/22
188.93.68.0/22
IPv6:
2a02:928::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34108
Signature Algorithm: sha256WithRSAEncryption
00:05:39:a4:0a:5d:66:3e:59:6b:98:3b:87:af:54:cf:d6:fe:
74:64:ce:fc:06:30:b1:63:e6:32:1c:47:85:2f:f2:c6:4f:32:
45:3b:51:e4:64:de:d3:e8:14:01:d0:55:fd:93:66:d9:ab:74:
b0:64:da:dd:15:13:6a:3c:b6:56:22:5f:34:b8:f1:65:d1:4a:
96:ef:18:3b:a1:e3:f0:e6:7f:40:31:98:39:83:ba:08:6a:30:
56:00:91:45:2c:e0:1d:af:db:50:ae:dc:39:43:7a:ff:4c:18:
09:5e:d4:99:af:f2:da:b8:14:41:10:1b:b4:79:89:be:8f:88:
c6:a4:7b:78:45:a1:fd:3a:27:70:d5:39:27:f4:a6:39:89:6f:
4d:cc:13:71:26:4e:e9:a5:7b:f2:e7:f7:e1:eb:6a:35:f7:d1:
2e:1f:1b:ef:82:70:b9:f8:2d:30:9b:d6:33:49:35:ce:24:7c:
a1:3c:ec:80:65:28:7b:dd:17:45:0c:77:27:b9:56:ac:bd:47:
69:d4:fc:41:9f:c0:e7:76:8d:ce:15:4e:9f:9a:9e:6d:a4:58:
fb:41:9a:eb:3f:e3:79:e6:d4:7d:cc:0e:ee:08:b7:b9:73:c1:
52:e2:d4:8f:a1:dc:90:78:b2:a3:5b:47:17:03:50:7e:c4:0c:
00:21:d2:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:35:25 2025 by rpki-client