Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nNZ9EDPKRytbuA_VlruDbRLiImE.cer
File: nNZ9EDPKRytbuA_VlruDbRLiImE.cer (raw, json)
Hash identifier: 4Ywh/+xMZR7WnHlaTdmQDzTRanwNVuKS98VgeVxg8Yo=
Subject key identifier: 9C:D6:7D:10:33:CA:47:2B:5B:B8:0F:D5:96:BB:83:6D:12:E2:22:61
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221FD705D415E149F8B83E0F7172ABDB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:19 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 208710
IP: 45.66.0.0/22
IP: 2a0e:2480::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:d7:05:d4:15:e1:49:f8:b8:3e:0f:71:72:ab:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9cd67d1033ca472b5bb80fd596bb836d12e22261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8f:d7:99:b6:0c:b0:88:70:da:1b:d5:64:a3:
c3:a4:03:f0:76:4a:43:c7:4e:ef:23:38:d1:ff:61:
09:d3:03:cd:d9:18:1c:05:40:c4:21:c5:83:bb:42:
8c:2c:cb:3b:2f:50:bb:b8:6b:ae:9e:c0:7f:1f:ca:
6a:bf:6a:f8:dc:bb:94:ad:75:dc:6f:31:e9:0b:13:
35:a2:a5:74:18:d6:9b:88:28:30:59:31:4d:79:bc:
00:17:75:2e:bb:09:80:1e:45:cd:95:87:9b:7f:ad:
ed:02:92:81:d1:ba:25:c0:f2:c4:28:68:7f:e2:01:
f4:5a:ac:10:02:b0:57:6b:a7:d2:02:03:8e:24:a5:
21:88:9e:24:b6:7b:de:f4:91:4e:ce:89:32:e2:6d:
53:a4:86:ae:63:1a:c6:2b:01:2c:77:4c:da:eb:a3:
1d:c2:17:0a:f1:bd:44:f5:5e:2b:d3:d8:e1:9b:9b:
73:4a:78:f6:9b:6a:e7:1b:d6:39:a9:db:b3:e9:39:
ee:b8:7c:42:30:09:76:e0:40:3b:96:e2:69:b3:c6:
6a:ee:aa:f7:47:03:fe:40:84:18:7c:29:5d:4b:e9:
2f:86:6c:96:2f:33:d0:bf:f5:4f:73:33:99:3e:30:
d8:c6:f5:05:dd:10:cd:4a:8c:21:93:33:79:ec:2b:
cf:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:D6:7D:10:33:CA:47:2B:5B:B8:0F:D5:96:BB:83:6D:12:E2:22:61
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.0.0/22
IPv6:
2a0e:2480::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208710
Signature Algorithm: sha256WithRSAEncryption
a5:16:26:0c:87:38:00:2c:b6:22:12:15:36:0d:ef:14:96:d7:
78:4d:f8:85:aa:a4:0f:b1:f4:66:15:8d:24:d9:7f:18:22:29:
20:89:f9:59:84:72:d2:42:10:c7:95:26:24:4f:fc:32:f6:65:
fe:ee:95:24:e7:bc:37:4f:94:8b:67:25:aa:eb:5e:94:2e:15:
3f:73:64:cc:64:ad:fe:20:bd:ea:bc:b0:57:04:ba:cd:b1:a9:
b0:a9:59:ef:8e:f4:99:66:61:27:3e:5b:66:37:a9:b9:fc:a4:
8f:a7:7a:33:56:96:24:ad:ae:d3:f2:66:57:45:95:46:48:8c:
3b:8a:ca:1e:38:06:c6:c4:40:e8:50:4f:55:26:ce:aa:de:c9:
9b:c7:67:48:64:73:e9:8c:f3:9d:9f:b0:17:fa:a9:c5:4f:17:
d0:21:9d:c0:6f:70:b8:31:7d:9d:e8:39:37:52:4c:bf:5d:19:
d3:2b:ce:74:0e:0f:b1:54:b6:12:44:58:37:1a:f6:e6:f4:10:
c3:07:14:56:06:67:fb:df:e5:50:0f:fa:a5:83:ad:67:9a:3e:
33:f8:d5:47:1f:34:34:04:3c:1b:65:0d:93:92:ab:55:c3:07:
d6:cd:db:09:45:a9:a5:66:4b:2a:64:f1:80:e1:6b:3d:cc:fd:
60:30:67:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:20:49 2025 by rpki-client