Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/qcGHvHqeiFM1p-ubCkOP6BHAOEc.cer
File: qcGHvHqeiFM1p-ubCkOP6BHAOEc.cer (raw, json)
Hash identifier: Unh0ncwXxQmXVKSneoK7+wfucs1iBuAjGx82pNzYO+g=
Subject key identifier: A9:C1:87:BC:7A:9E:88:53:35:A7:EB:9B:0A:43:8F:E8:11:C0:38:47
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B61D557D7199DD46A386D92ED4F877
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:50:34 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 51979
IP: 91.222.88.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:1d:55:7d:71:99:dd:46:a3:86:d9:2e:d4:f8:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:50:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a9c187bc7a9e885335a7eb9b0a438fe811c03847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:04:19:11:90:0b:7b:bd:5a:ba:77:ef:39:ad:
c3:b9:57:be:ee:18:f2:51:61:54:f6:ac:67:c3:e5:
31:69:c9:7d:00:98:a0:81:af:2f:3e:1c:4a:2e:58:
f0:3c:ce:05:31:2c:44:64:f3:f6:ef:48:2b:6f:91:
1c:fe:ac:c9:fe:ad:b8:47:f3:c1:56:6a:f5:ba:20:
48:8c:c9:f7:b3:a9:56:17:13:d6:8f:ea:5b:9b:2a:
31:ae:6d:12:91:9b:80:48:b8:68:22:74:50:85:10:
64:70:2c:ba:bc:75:ac:f6:8e:0f:bc:24:ca:09:cc:
2a:16:ef:c7:61:33:49:83:48:21:9a:5a:4f:7e:3d:
61:6e:15:22:54:b5:1f:b5:6c:48:86:42:d1:6c:a6:
f7:eb:0e:1d:e6:ca:04:27:67:e1:9b:cb:76:26:3f:
71:28:31:b1:58:eb:aa:19:fe:8d:29:7b:e3:43:49:
69:05:96:23:dc:ee:c0:29:f8:e6:b9:12:aa:02:3a:
43:55:54:7d:93:9b:cb:a6:62:45:9e:66:35:ec:4b:
db:84:6a:4e:a1:06:3f:ef:70:7c:6c:8c:29:90:67:
b0:f3:a5:ce:b4:0e:9d:e8:2e:92:3f:4d:b3:98:a4:
e8:7a:5f:15:be:9c:33:94:76:38:e5:c2:47:6d:42:
4b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:C1:87:BC:7A:9E:88:53:35:A7:EB:9B:0A:43:8F:E8:11:C0:38:47
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1b814a-d388-4c64-8302-370d1fd4254b/1/qcGHvHqeiFM1p-ubCkOP6BHAOEc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.222.88.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51979
Signature Algorithm: sha256WithRSAEncryption
0b:82:6d:c1:7d:ef:79:b1:f3:56:65:98:33:4f:c5:5f:f7:0c:
9e:3b:0e:4c:9d:ce:98:25:cb:5c:2d:81:9e:3a:e5:3f:0b:e8:
46:95:cf:ac:f2:a9:c2:e9:96:70:a7:fc:78:8d:fd:af:3d:69:
b0:71:98:8c:33:1e:c9:a3:ac:c0:3b:b5:45:11:fb:dd:25:a7:
97:9b:e7:38:3e:ad:e2:eb:e7:78:5b:ef:65:72:f2:90:0f:41:
14:fb:16:c1:71:7f:f0:9f:cd:27:e2:3a:fb:b3:2c:24:35:80:
b7:f0:10:e1:b8:30:e2:98:aa:a7:bf:6d:fb:4f:f1:dc:8e:6e:
0d:b6:1a:82:19:e3:95:eb:03:54:34:b0:0b:ee:01:61:b2:a9:
ac:fb:1c:b0:39:ee:46:80:cb:37:b4:f4:7e:a8:15:1b:28:43:
1f:d4:b3:12:a7:17:38:05:f0:40:8b:43:85:da:d9:5a:2e:4c:
6e:38:79:06:9e:42:29:90:06:c8:9e:19:74:37:90:52:f0:b6:
8c:0e:4f:00:fc:e5:80:3d:eb:98:9b:b5:ff:93:09:7d:63:ec:
8a:e9:d7:21:aa:33:3a:b9:6c:52:c5:6c:4c:e7:49:e8:94:26:
44:f7:d6:8c:61:4f:92:c4:aa:17:a1:4b:da:1c:ab:e9:12:9b:
7a:7a:64:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:35:23 2025 by rpki-client