Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rM-ri4kwEKG14lBy4dRWkEST9S0.cer
File: rM-ri4kwEKG14lBy4dRWkEST9S0.cer (raw, json)
Hash identifier: 4SGPb8QKE/Zrg7c9meEj8xfgxqhix3PbGthuY3pNRCk=
Subject key identifier: AC:CF:AB:8B:89:30:10:A1:B5:E2:50:72:E1:D4:56:90:44:93:F5:2D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D6B337F92F3335C8FE44169F8E59DE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:47:40 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 211586
IP: 2001:678:f18::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:b3:37:f9:2f:33:35:c8:fe:44:16:9f:8e:59:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=accfab8b893010a1b5e25072e1d456904493f52d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:35:cd:4a:2e:2d:56:28:ec:da:4c:a9:1f:9a:
4a:0b:44:c0:d8:51:67:ad:a3:da:a8:0d:ff:69:ec:
b5:0e:d0:35:2d:7f:d0:79:48:28:3b:4e:c2:20:f4:
69:3c:dc:e2:0d:27:c9:1c:63:58:12:41:0f:26:fc:
3b:a2:68:ac:52:1a:80:f8:e6:60:9d:0d:c9:72:71:
8e:77:6a:b5:9f:06:e2:67:51:41:c4:7c:c2:69:8a:
d0:ff:cb:ca:aa:1a:c5:c5:69:4e:94:0b:29:4c:0f:
a4:be:40:51:5f:d1:66:eb:42:13:61:a0:c0:65:59:
c9:44:4a:af:46:2c:9d:bc:89:1b:85:ce:98:16:56:
11:46:f5:e5:8a:26:0d:41:c6:a7:f5:bf:fb:94:02:
e2:2c:ca:83:8a:94:87:4a:31:b5:3b:4b:87:03:88:
01:5d:20:1d:f9:7c:fb:5a:5e:5f:e2:28:80:46:08:
1a:68:78:a2:87:f4:8c:96:1c:96:f6:87:e7:e2:ae:
cb:ee:57:d6:7b:cb:4f:48:83:07:df:86:4e:f0:03:
ad:fd:23:98:ac:c0:75:e0:4e:1f:48:74:e1:4e:85:
56:72:b5:f0:b6:03:35:d6:ac:49:ba:eb:b1:21:e2:
57:a9:c9:7f:38:ec:89:ce:e1:61:ce:bf:d1:18:ac:
70:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:CF:AB:8B:89:30:10:A1:B5:E2:50:72:E1:D4:56:90:44:93:F5:2D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/428911-8816-4f11-97a6-4882e6b568b2/1/rM-ri4kwEKG14lBy4dRWkEST9S0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:f18::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211586
Signature Algorithm: sha256WithRSAEncryption
31:40:c3:44:07:92:12:32:58:48:05:e2:45:25:16:0c:c9:12:
0e:42:78:2b:e0:ce:42:61:18:82:6e:10:5f:22:74:ff:28:69:
3f:ea:11:ee:ed:94:36:ce:41:36:2e:0a:79:2b:f5:1b:8a:da:
3f:c6:bf:14:ae:66:53:ae:d4:0e:4f:e9:83:3a:3e:86:00:e5:
5d:0f:a3:99:76:8b:91:ce:65:22:5c:c7:68:b6:d0:d4:7e:76:
6b:9f:f1:cb:71:e0:13:80:d0:a5:fa:90:18:46:3d:0a:a3:4d:
9c:3d:55:80:f4:9f:1c:85:7b:e1:d2:2f:5d:ce:f4:d9:53:fa:
d8:0c:45:59:b8:f3:b4:dd:cc:d1:80:50:da:b5:40:64:f5:ff:
51:24:b4:59:39:41:9c:f1:82:cb:67:b4:c7:9b:90:39:49:ed:
68:75:08:eb:3c:5b:c5:2a:03:c5:82:d1:f4:a7:5e:78:c9:3e:
04:86:ba:46:03:89:25:c9:ed:3e:fa:18:cf:49:91:5b:80:84:
67:3d:a4:b6:18:27:ac:fc:d3:98:9a:ac:ab:0b:8c:2d:bc:dd:
a3:d7:15:92:f7:05:9f:30:fd:66:b4:d5:9f:b0:13:35:6d:46:
ec:5d:bd:6d:76:1c:45:7c:1e:21:ad:16:f4:6d:3c:70:cd:f9:
78:9b:17:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:53:31 2025 by rpki-client