Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.cer
File: rHvpLb_jhWFWQG-nJeFd9ZiOXBA.cer (raw, json)
Hash identifier: B89/CRNc8IWtmHWbjThYJ0mFbLqcEPjwfxNNUsx/+tM=
Subject key identifier: AC:7B:E9:2D:BF:E3:85:61:56:40:6F:A7:25:E1:5D:F5:98:8E:5C:10
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D62EA0D1AE209A55AC150BAB035EB1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:48:15 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 60999
IP: 185.90.168.0/22
IP: 2a03:8760::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:2e:a0:d1:ae:20:9a:55:ac:15:0b:ab:03:5e:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ac7be92dbfe3856156406fa725e15df5988e5c10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:83:cf:0d:0e:90:d6:7a:8a:0a:1c:71:a4:7e:
bb:7c:e5:7b:c3:de:cc:66:a9:03:e4:63:f7:ac:d9:
81:64:aa:e7:b5:63:f0:ed:1a:31:8e:28:82:c4:72:
68:95:99:dc:69:3d:03:e6:88:2e:b7:54:35:35:42:
2a:ba:8c:c5:6f:a5:8e:32:90:5a:18:2a:87:7c:8c:
b2:6f:ad:c8:f4:9c:94:d7:02:04:d6:66:73:64:29:
10:04:ec:80:4a:8a:8c:51:e2:e9:92:a1:1c:df:63:
a7:76:e3:42:8a:a7:05:12:3e:13:f0:94:2b:c1:dd:
61:e6:07:33:db:5f:4d:30:c8:3b:5e:f3:36:d7:38:
e4:10:fe:76:58:31:ef:d3:5d:ce:b5:e0:e7:04:a4:
dd:c3:d0:a8:c8:62:70:98:d4:7c:4d:bf:da:c3:59:
f6:ab:ae:c1:6d:06:89:1b:fc:d2:3e:a7:cf:cd:fd:
22:14:f4:d7:3a:0a:98:fc:57:65:30:a5:51:4f:62:
0e:ea:96:d6:ff:9d:ef:5f:f9:19:5c:27:2d:76:50:
bd:d5:02:f3:35:4d:92:4e:8d:74:2c:b2:1d:71:e8:
1f:99:a9:5e:b3:42:88:b4:2c:78:b3:fa:f9:8b:37:
51:b1:f8:f0:bb:86:07:00:c3:74:be:7a:63:e5:2f:
ca:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:7B:E9:2D:BF:E3:85:61:56:40:6F:A7:25:E1:5D:F5:98:8E:5C:10
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/0fae2f-2691-4c7e-a018-99d7252f5be0/1/rHvpLb_jhWFWQG-nJeFd9ZiOXBA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.90.168.0/22
IPv6:
2a03:8760::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60999
Signature Algorithm: sha256WithRSAEncryption
7f:fc:db:a3:2d:de:7b:93:91:c2:57:28:d5:55:ee:06:b6:52:
a0:50:af:9a:d9:2f:e7:62:f5:36:b5:e3:c2:85:47:f6:1e:00:
e0:f6:5e:8f:5a:ac:55:c2:80:0c:c6:ac:8b:23:b3:04:43:84:
99:5b:d9:fa:e4:e7:5d:ea:8c:c9:b5:8a:22:aa:86:c8:4b:42:
15:0c:bf:fe:12:f8:12:61:f8:64:e4:4c:73:11:38:7d:a3:42:
ee:52:6f:8c:b3:bf:b8:d6:2b:23:c5:c7:be:d6:c4:a7:4e:a0:
9a:e3:1a:81:da:29:83:b9:5d:fc:a8:51:06:c4:a7:40:7c:93:
f1:c6:d8:de:e9:9c:f4:1f:56:85:a9:ef:17:53:9f:2b:97:ff:
0e:71:55:2a:a3:ef:5b:d4:d0:2c:48:2e:ca:6d:15:3c:bc:35:
bf:19:28:6b:1a:13:df:85:0d:33:f5:04:00:db:a1:5b:46:60:
29:ed:81:24:7b:95:c8:64:23:56:ca:7e:3f:33:ee:22:e2:75:
7c:09:6c:da:75:d9:42:87:a8:c3:fa:2d:92:5e:ba:71:85:54:
15:4c:69:bf:47:db:a3:aa:eb:bd:f3:6f:46:8c:62:a1:67:5b:
27:bc:3a:f9:28:23:9d:0f:49:19:15:87:c2:d1:25:e1:c3:24:
de:b0:d2:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:42:11 2025 by rpki-client