Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.cer
File: nUMDoKmZ2BGLvH6WrTjvuxRJbqI.cer (raw, json)
Hash identifier: msHbcnhDgCMHoT6NQp6/xXX5sI6ZSOAICHeIK2x8kfk=
Subject key identifier: 9D:43:03:A0:A9:99:D8:11:8B:BC:7E:96:AD:38:EF:BB:14:49:6E:A2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D71C2D695E0C1C643E3783EBCF291D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/12/bd9e02-c424-4e14-aab7-39461aaa5be7/1/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/12/bd9e02-c424-4e14-aab7-39461aaa5be7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:48:07 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 212401
IP: 185.209.241.0/24
IP: 2a10:ee00::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:1c:2d:69:5e:0c:1c:64:3e:37:83:eb:cf:29:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d4303a0a999d8118bbc7e96ad38efbb14496ea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5b:4e:db:3a:3a:4e:8c:9f:17:c0:2d:fe:1d:
0a:2d:22:bd:40:e1:0e:71:02:8b:6e:d3:64:41:11:
25:be:d9:4a:a0:aa:71:f7:bf:47:f1:f0:9c:fe:21:
b1:17:d3:24:7e:59:8a:32:38:0f:45:51:89:7f:09:
a2:e6:e4:cf:3b:a8:84:b4:cd:f7:c1:09:c0:fb:3a:
2d:93:ae:43:0b:39:45:79:b9:58:95:c0:b2:e5:a4:
78:8b:47:da:8d:f7:05:39:f1:58:c5:3c:ce:11:ca:
49:80:16:44:2c:63:76:b8:af:12:62:c9:18:5b:5d:
e0:52:ee:ba:33:4d:e4:d6:67:3e:5d:a8:d4:7d:4b:
2a:92:8e:6a:a7:60:fe:31:62:7f:97:8b:cc:be:ef:
2c:54:8e:55:50:c2:e8:cb:d8:90:89:6d:27:d3:b9:
82:c9:ad:8a:56:24:5f:9c:62:f7:b9:7d:84:b6:0b:
db:10:86:ee:03:52:ee:91:2e:f0:a8:09:c1:54:59:
7d:5e:2f:52:81:3d:b2:be:3f:2c:d4:ad:70:c6:4e:
39:72:11:79:01:bf:e9:7a:f0:57:9f:be:0f:57:78:
21:04:85:b5:00:b9:80:0e:7d:95:7c:83:4c:9f:ed:
c0:06:a7:bf:80:ba:89:8a:d6:7a:45:f0:59:77:2e:
72:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:43:03:A0:A9:99:D8:11:8B:BC:7E:96:AD:38:EF:BB:14:49:6E:A2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bd9e02-c424-4e14-aab7-39461aaa5be7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bd9e02-c424-4e14-aab7-39461aaa5be7/1/nUMDoKmZ2BGLvH6WrTjvuxRJbqI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.209.241.0/24
IPv6:
2a10:ee00::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212401
Signature Algorithm: sha256WithRSAEncryption
5a:a2:93:1b:52:24:55:10:d5:c1:86:d6:ad:07:d9:4f:bf:d2:
87:8a:97:08:7d:04:de:99:a9:fc:4d:06:93:47:49:73:cb:d6:
5e:34:65:66:36:5d:4a:83:68:ee:dc:c3:91:f8:cd:f2:fc:1a:
e6:da:ad:74:8c:aa:8b:b6:83:53:15:16:30:8a:f3:20:f7:11:
00:ee:d8:bd:65:d5:e4:32:65:3a:d3:90:a7:26:bc:89:88:3a:
76:e4:37:ff:bc:d3:93:0b:cd:f0:ab:e1:c5:68:23:30:f0:21:
2b:fa:c9:3b:b8:84:a8:39:96:75:69:92:4f:62:e3:47:7f:12:
0c:cc:d9:5e:fa:0b:cb:35:15:50:86:d5:b2:21:78:6c:3f:be:
e5:ba:bf:01:59:16:2e:30:b4:e0:bb:a0:c4:1a:6e:b2:46:96:
5f:4c:79:1f:a5:9c:1b:da:5d:43:98:fc:0a:21:1a:0d:f9:b3:
c7:54:da:fa:b0:1f:8a:9b:ba:dd:be:b6:31:fb:32:05:ad:72:
2b:db:2d:41:f1:82:b2:c1:59:1e:ec:f1:30:70:4a:7c:8c:32:
f6:93:44:b2:52:00:51:5a:bb:56:cd:dd:98:f8:b7:b9:12:07:
e0:87:5d:81:8d:c9:9e:90:54:27:b2:1c:7e:b8:a1:b2:ab:54:
2b:02:5d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:41:39 2025 by rpki-client