Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.cer
File: rCEZF4v9kjpLXsQG2f4UUrJ3bvo.cer (raw, json)
Hash identifier: l7kTVMGr6xpdkOTnh9t6VZXoUrzyQPaCBV9j8wLnAL8=
Subject key identifier: AC:21:19:17:8B:FD:92:3A:4B:5E:C4:06:D9:FE:14:52:B2:77:6E:FA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942067FFE83C5F3A6319E27066C3CC5F12
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:47:54 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 39790
IP: 81.91.80.0/20
IP: 185.14.224.0/22
IP: 2001:1568::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:ff:e8:3c:5f:3a:63:19:e2:70:66:c3:cc:5f:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ac2119178bfd923a4b5ec406d9fe1452b2776efa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:01:38:84:ee:ad:66:5b:1c:8b:bb:ef:98:5c:
ba:5f:93:51:cf:e8:ad:ec:59:a2:1e:72:19:14:dd:
2a:fa:1d:b1:11:7f:35:72:52:91:e7:1f:2c:b9:73:
97:80:44:f3:68:c0:53:55:8e:f8:a4:85:05:7d:93:
69:f0:98:62:98:18:ed:16:9f:1e:63:4e:64:4c:4e:
83:b5:f3:bd:cf:eb:bb:e6:6e:fe:54:08:fe:f9:12:
52:ed:c4:80:00:16:9c:f9:48:55:42:0b:36:d1:58:
f3:d4:a1:ac:bb:e1:2b:50:02:3d:b2:2f:b4:54:d6:
22:ab:45:a9:f0:18:8f:f6:e7:e8:52:62:ac:d7:67:
8b:10:1d:2e:6a:a9:53:a6:5a:11:c2:06:1a:8a:57:
f7:9e:81:12:2c:af:87:cd:7b:db:28:8d:fd:54:bc:
32:69:a1:59:9f:1b:09:ac:08:b3:75:31:51:3f:8d:
e4:04:1a:6d:b2:a2:20:2c:67:db:76:55:e7:e8:a4:
1d:c2:48:9a:f6:af:9e:8a:f3:9c:20:73:3d:ae:37:
37:1d:70:97:a8:d8:b2:a9:e2:ba:e1:f4:47:f3:d6:
cb:e1:b1:0c:48:24:26:c9:30:43:c7:78:6b:9b:13:
be:08:07:4e:23:99:48:d6:29:8f:50:3b:53:b9:85:
65:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:21:19:17:8B:FD:92:3A:4B:5E:C4:06:D9:FE:14:52:B2:77:6E:FA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/2a8f7e-e605-4114-90e8-f600d0fd03ce/1/rCEZF4v9kjpLXsQG2f4UUrJ3bvo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.91.80.0/20
185.14.224.0/22
IPv6:
2001:1568::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39790
Signature Algorithm: sha256WithRSAEncryption
5e:8f:d6:ad:96:df:ba:0a:44:8c:23:38:72:7b:8d:63:fa:07:
f3:54:21:5b:a6:bb:59:2b:08:95:d7:4c:71:d6:e1:71:36:52:
fb:5a:8b:f1:1c:d5:97:5f:a2:9a:dd:90:66:a3:5d:c3:4a:64:
fb:25:5a:d6:e6:78:7a:f8:d2:1b:62:22:ad:58:f0:0d:08:d9:
94:83:dc:5b:b9:bf:6a:26:a7:da:65:7f:41:10:62:cb:a2:06:
e7:65:ab:92:31:63:c0:4a:be:03:a9:8f:9e:c0:4d:f1:ea:dd:
e3:66:88:d4:cd:bf:fd:cc:a7:5f:10:19:61:b8:96:97:00:29:
00:a1:8f:73:8f:95:54:8e:7e:9c:df:3f:30:87:97:9d:78:cc:
e4:64:04:a0:35:ae:64:bf:c7:8d:79:2a:d0:fb:93:f7:41:a7:
07:45:af:eb:99:65:ca:da:95:20:7a:66:e2:d7:4e:00:c9:90:
a9:9d:3d:b7:3c:b4:57:1f:18:bd:33:7d:6c:56:cf:80:f2:17:
1b:a9:73:07:8a:23:80:d3:37:cb:32:81:a1:d1:0a:69:1b:63:
ef:5a:34:c8:96:0f:03:1f:93:d3:10:83:bb:34:a0:7b:a9:ee:
09:63:e4:2a:25:4b:73:f3:27:f4:83:5b:f7:49:14:e7:01:e3:
56:94:83:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:31:44 2025 by rpki-client