Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/n73cYxPvxLZyp-KzKuPESE_l9jA.cer
File: n73cYxPvxLZyp-KzKuPESE_l9jA.cer (raw, json)
Hash identifier: N8K4+e3v40WbLHxy8nzKSf1X76cyCwyjU6N2OqKB7DM=
Subject key identifier: 9F:BD:DC:63:13:EF:C4:B6:72:A7:E2:B3:2A:E3:C4:48:4F:E5:F6:30
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942143B6CCD7153DED9437E985516FE088
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:47:53 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 48748
IP: 195.88.26.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:b6:cc:d7:15:3d:ed:94:37:e9:85:51:6f:e0:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9fbddc6313efc4b672a7e2b32ae3c4484fe5f630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:88:89:3e:44:d0:25:fa:6a:20:c6:50:59:1a:
7f:44:c0:f8:f0:68:d6:3d:ec:9a:8f:fd:8e:34:44:
45:2d:89:8b:0e:22:71:90:1d:84:ce:a7:55:dd:f5:
a7:c0:2c:73:c2:4c:c3:32:b1:a4:02:45:1a:f5:9e:
8a:e7:2a:17:29:30:4b:1d:78:12:d3:70:d9:ff:ef:
08:e2:72:e5:ab:dd:66:26:a3:0b:68:56:89:ab:ba:
70:d3:56:8d:af:f7:e4:e3:98:64:59:4e:f9:8a:aa:
c1:94:b8:30:26:4b:50:4d:26:4e:c0:52:8e:1d:7b:
90:38:fd:2a:a7:81:9a:63:91:81:58:fc:40:32:ca:
54:07:68:2e:1a:9b:77:79:d0:60:4d:5a:56:bc:a8:
80:22:b4:71:b6:8a:1d:94:9b:0f:7c:d2:a8:56:1b:
7c:97:ff:4f:c7:a1:41:ef:89:f8:cf:14:aa:c4:8f:
8a:89:81:5a:ce:3a:a4:94:50:d6:81:1c:49:7f:0e:
12:34:1b:24:58:75:28:56:04:43:4a:f4:be:88:5a:
27:55:51:e4:da:a5:93:2f:ab:ab:2d:de:4b:83:be:
ef:5a:32:27:38:5d:43:07:c5:49:b7:75:9f:2a:53:
dc:14:2d:e1:bd:80:f7:d0:aa:08:a6:b6:4d:4a:86:
34:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:BD:DC:63:13:EF:C4:B6:72:A7:E2:B3:2A:E3:C4:48:4F:E5:F6:30
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.88.26.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48748
Signature Algorithm: sha256WithRSAEncryption
5c:36:c3:d5:e7:48:3e:0a:02:ce:3a:c6:70:9f:76:4d:ab:93:
ae:ec:53:1f:ad:16:b6:82:4a:b6:67:b7:08:51:b9:2c:93:90:
8c:89:85:10:ff:af:9c:0f:4f:69:cd:02:c2:3d:e5:62:75:94:
69:b2:f2:f8:12:80:3c:78:65:a3:28:12:df:40:c6:2d:4a:33:
2e:3a:da:95:d1:e9:98:b2:b7:81:67:c2:fe:dc:15:ac:b4:50:
b6:0f:65:d9:82:b1:1e:7f:ba:f9:0f:27:9d:31:bd:85:26:99:
b9:0c:9e:5d:a9:ab:21:cd:85:ba:ab:8b:e6:93:c4:2f:ba:e6:
8c:db:9c:7a:42:9d:1b:13:5f:c0:db:da:8f:97:29:f4:f1:56:
82:2b:5f:0f:83:38:cc:b5:93:07:e6:ec:22:7b:72:01:e6:8e:
65:a2:96:df:6a:8b:bf:9c:c2:cf:b0:10:55:a1:be:fc:22:2f:
fe:f5:48:88:56:6e:b1:bb:85:f8:50:04:a7:d2:ac:d6:58:17:
65:6d:49:93:b7:5e:df:5f:07:92:77:d0:f9:1b:83:29:55:bf:
a2:a7:1e:fd:03:5b:43:ad:02:60:be:90:f1:77:41:7c:29:82:
c6:ba:6b:51:ce:65:b9:92:42:83:fe:23:e4:20:63:b8:92:ab:
93:9e:f4:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:39:50 2025 by rpki-client