Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pcatcQWg6X4ZLw6I5mgYq2D33sg.cer
File: pcatcQWg6X4ZLw6I5mgYq2D33sg.cer (raw, json)
Hash identifier: mgN0EuZq/aK+3rCb/XP9qLlA1vjDEBslHQVQWUijMZ8=
Subject key identifier: A5:C6:AD:71:05:A0:E9:7E:19:2F:0E:88:E6:68:18:AB:60:F7:DE:C8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D96E435D005F953794849631C3E8C8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/pcatcQWg6X4ZLw6I5mgYq2D33sg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:31 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 196636
IP: 195.191.224.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:6e:43:5d:00:5f:95:37:94:84:96:31:c3:e8:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a5c6ad7105a0e97e192f0e88e66818ab60f7dec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:34:72:2f:cc:d6:5d:86:8a:f2:86:7c:dd:21:
37:83:af:fd:b7:d9:fb:f8:93:22:cb:66:4a:6c:fa:
f4:7c:ce:0b:d5:0a:b8:3a:6e:18:19:59:e9:ae:f8:
48:b3:f8:2b:ab:5d:84:c9:8b:81:b6:76:f4:4e:8b:
be:99:d4:d5:b0:10:c7:93:8a:8c:61:f7:bf:cc:d9:
51:5d:22:18:75:27:eb:db:89:71:85:20:a3:92:6c:
9c:98:28:89:90:83:2a:fc:7d:62:59:a6:8b:35:a7:
90:3b:37:66:6d:3c:19:f7:5d:3a:03:36:73:1d:7c:
33:b5:64:27:53:a3:cc:aa:02:42:cf:39:4b:ea:3a:
27:a1:94:20:c7:b2:cf:19:09:28:82:72:5d:62:55:
61:a8:ae:3d:d6:e9:72:e5:54:7b:5d:c8:12:37:8d:
f2:f5:ac:6e:4c:22:05:5d:88:b7:9a:8d:4a:4c:17:
e1:2d:a7:f1:5a:3e:61:57:c5:34:4f:a4:ac:e4:96:
a8:4a:4b:f1:ad:08:e6:85:d1:6a:30:73:68:19:a1:
7b:07:bf:77:5b:77:57:34:9f:f3:4d:4c:26:e1:96:
77:cc:34:a5:7c:36:10:f9:c6:e2:69:a5:6a:12:4e:
fe:1c:ff:c2:25:a6:1b:2c:4d:6b:33:27:33:68:0a:
19:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:C6:AD:71:05:A0:E9:7E:19:2F:0E:88:E6:68:18:AB:60:F7:DE:C8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/7a0aa2-f99b-4185-8f24-1646c67f4294/1/pcatcQWg6X4ZLw6I5mgYq2D33sg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.224.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
196636
Signature Algorithm: sha256WithRSAEncryption
90:da:80:52:c7:ac:db:8c:6b:3b:a3:2c:d6:f9:90:b8:2d:5b:
94:c8:bd:30:49:6b:12:73:cc:e9:a3:88:67:1e:d0:89:19:03:
88:41:72:38:c6:de:55:bd:1e:77:57:a9:cc:00:17:37:0a:33:
e8:ff:25:2f:e1:c7:8d:8d:02:1b:b8:49:f4:50:58:c8:9e:27:
d4:89:64:fb:b8:f9:e0:e5:64:77:fd:8f:d6:5e:1a:26:8b:b1:
f9:f4:13:38:63:6f:d7:0a:ed:e6:f4:71:83:d3:aa:9e:90:ff:
fb:62:af:1a:31:c9:7c:e9:10:45:37:31:ed:00:44:73:30:fb:
3e:f5:ca:0b:2b:0c:ed:74:9d:3a:dc:5c:43:bc:36:e9:75:81:
c0:68:e4:45:5c:a7:13:0c:74:a6:53:be:99:38:b7:2f:d4:47:
2a:1f:c0:a4:21:65:d1:f6:11:a5:65:a1:af:50:ad:01:0f:bf:
3f:71:f8:a9:50:2e:9a:cf:f4:6f:19:8b:02:91:79:9c:9e:ec:
a6:64:38:f4:c9:26:92:ef:f4:f6:23:91:46:17:8b:0f:f4:9c:
0d:7b:77:a8:5b:67:73:5c:a2:f7:bb:42:86:bd:6a:96:8c:5e:
be:d6:00:d5:bd:b1:2c:e9:fd:a2:1a:ae:41:8d:31:4d:d6:a1:
3c:dc:42:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:36:48 2025 by rpki-client