Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/pnQBXVCbXU85bqNjNp6ddP-tdZM.cer
File: pnQBXVCbXU85bqNjNp6ddP-tdZM.cer (raw, json)
Hash identifier: GqMzg0dEVB4eLB5mCdsIBKhji9rSh80Dx8y+m39TD4Q=
Subject key identifier: A6:74:01:5D:50:9B:5D:4F:39:6E:A3:63:36:9E:9D:74:FF:AD:75:93
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D7E9585F4EB84FB301CFDB6A627E2C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/54/689e70-e38d-4ff1-a972-4113d686dd66/1/pnQBXVCbXU85bqNjNp6ddP-tdZM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/54/689e70-e38d-4ff1-a972-4113d686dd66/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:49:00 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 200804
IP: 185.94.112.0/22
IP: 2a04:c280::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:e9:58:5f:4e:b8:4f:b3:01:cf:db:6a:62:7e:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a674015d509b5d4f396ea363369e9d74ffad7593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:04:f9:35:b0:c3:1c:ba:16:fa:60:0a:88:7a:
73:21:d1:63:65:c2:99:5d:e6:08:da:a4:c6:09:17:
21:92:46:7e:ea:8a:b7:b5:c4:de:56:bc:58:a9:b7:
97:7c:b3:23:d8:dd:05:07:ae:96:8f:09:b8:f1:ab:
b5:0f:6e:e3:70:ea:a4:d8:2a:e4:d2:a6:84:f5:12:
f6:2f:78:d6:ee:0b:f8:9c:c7:34:23:a6:a7:63:b9:
fb:ff:8a:a7:a2:58:6e:8a:bc:e6:33:e9:72:3a:11:
a2:38:9b:03:74:52:10:41:a0:60:31:ec:7d:75:8d:
25:64:53:33:60:1b:ec:a6:ac:d9:46:d5:ba:fa:80:
bf:fb:8e:60:52:d5:22:82:b2:51:11:86:f4:e5:d9:
31:42:ae:7f:10:17:69:b5:ed:bf:8a:1f:87:b7:76:
78:e4:f6:67:41:ea:c9:bf:2a:a8:c7:cb:82:41:20:
c3:45:7a:c2:16:9e:2d:90:ae:b9:61:5f:97:f8:e8:
9b:e6:6b:84:70:b0:b6:4e:5b:1b:9b:c6:e5:7f:52:
4e:34:e8:54:ac:6d:5c:17:dc:9f:b0:a7:af:74:a5:
d0:96:78:ba:69:ec:be:1a:17:80:b8:4e:86:6b:68:
bb:52:6e:57:ea:90:43:b0:15:bd:08:ba:de:12:98:
7b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:74:01:5D:50:9B:5D:4F:39:6E:A3:63:36:9E:9D:74:FF:AD:75:93
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/689e70-e38d-4ff1-a972-4113d686dd66/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/689e70-e38d-4ff1-a972-4113d686dd66/1/pnQBXVCbXU85bqNjNp6ddP-tdZM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.94.112.0/22
IPv6:
2a04:c280::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200804
Signature Algorithm: sha256WithRSAEncryption
88:fc:4f:e5:29:09:7c:90:56:5f:34:23:4a:66:e2:0d:5b:66:
42:b2:49:5d:87:9d:72:5a:23:65:42:82:a6:15:5b:2f:87:7a:
04:c1:51:b0:c2:a8:41:ac:de:5b:e6:af:3e:d2:e9:a0:20:2e:
58:5a:c6:48:ad:e0:bd:ad:b1:bf:1a:ba:a4:b3:13:64:c1:75:
ad:30:e0:a7:95:be:de:72:fb:34:fb:15:b2:b4:18:95:77:ef:
d6:fc:61:7d:e4:54:3d:cd:d7:05:05:64:0a:21:dd:dc:18:57:
26:5b:06:3b:8d:5e:72:e1:67:23:01:ff:a6:dc:64:b5:16:49:
a6:f3:b9:ac:de:38:5a:ef:40:fd:1c:e3:6f:5e:01:f3:a1:a2:
0c:de:07:0c:09:53:6f:7e:73:94:bc:76:af:49:aa:2f:07:b1:
ba:84:d1:29:2e:ac:68:97:64:e7:e6:15:44:e8:84:b5:1d:73:
62:f0:3a:85:c1:08:b0:76:ec:21:5d:51:40:04:df:ef:41:69:
81:a7:a5:ce:cb:f6:0b:71:91:84:3e:11:50:9c:c8:52:27:49:
ca:ce:a2:5e:c7:d7:19:20:29:d2:47:30:b5:92:5a:3d:cf:24:
9b:9d:dc:9d:56:0d:c4:98:ac:e7:ae:f2:df:93:7e:54:d2:32:
a0:9b:72:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:07:31 2025 by rpki-client