Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer
File: s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer (raw, json)
Hash identifier: Y7bm0mqxIQEa2y1iPIbRYfWWjuqzqH/23xJo8DQDbHM=
Subject key identifier: B3:93:DF:87:7B:F2:F0:CF:01:A9:71:89:73:EA:EE:E8:7B:06:97:D9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D99443CB066F77E491C821BC8DF63E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:41 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 43139
AS: 213724
IP: 80.71.158.0/24
IP: 88.135.69.0/24
IP: 91.196.148.0/22
IP: 91.247.182.0/24
IP: 94.158.80.0/20
IP: 109.207.192.0/20
IP: 178.158.192.0/18
IP: 185.199.96.0/22
IP: 195.128.24.0/22
IP: 213.109.148.0/24
IP: 2001:67c:738::/48
IP: 2a0a:9b40::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:94:43:cb:06:6f:77:e4:91:c8:21:bc:8d:f6:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b393df877bf2f0cf01a9718973eaeee87b0697d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:55:f6:4c:df:ba:3b:59:b1:01:a0:9e:f7:6a:
e9:ce:c4:77:40:9a:1e:0f:7f:c7:40:7b:c9:bb:61:
25:bf:f3:17:d9:06:62:b3:3e:76:95:29:99:d6:e2:
0a:08:c6:a6:01:3e:32:b5:78:da:12:a7:67:f4:f0:
ad:d7:4f:26:5a:65:da:67:15:ee:ca:f7:b7:32:55:
a1:2e:42:b1:2f:19:90:13:8e:29:ba:3d:c8:39:5a:
bf:76:68:6b:5b:cc:18:27:ba:a4:ae:9c:5f:b4:99:
80:ca:bb:21:f5:94:4e:c0:70:72:f7:46:bd:bc:ec:
59:a0:eb:42:eb:83:f0:1d:d5:dc:cc:ac:d1:de:c5:
44:03:f6:52:e7:df:d7:5a:fa:42:46:d8:81:76:70:
27:7f:1c:2f:0d:bd:7a:cd:8c:34:e8:0b:88:f4:e5:
ab:0a:2d:7a:d8:72:f0:78:e4:9e:9b:16:97:bc:c2:
f8:b9:de:bc:c9:41:0d:fe:38:8f:96:4c:0c:03:1c:
9c:35:6e:42:71:44:50:a0:98:10:43:5b:f9:25:85:
78:b3:ee:04:13:c4:b5:62:7e:7b:ef:90:13:8c:96:
04:98:09:de:56:05:92:f4:7e:a3:1f:1d:ab:d1:ae:
9d:3e:f7:c7:81:57:e0:9f:9c:d6:be:57:04:70:66:
20:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:93:DF:87:7B:F2:F0:CF:01:A9:71:89:73:EA:EE:E8:7B:06:97:D9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.158.0/24
88.135.69.0/24
91.196.148.0/22
91.247.182.0/24
94.158.80.0/20
109.207.192.0/20
178.158.192.0/18
185.199.96.0/22
195.128.24.0/22
213.109.148.0/24
IPv6:
2001:67c:738::/48
2a0a:9b40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43139
213724
Signature Algorithm: sha256WithRSAEncryption
8d:8c:21:44:42:87:98:08:9f:0a:8f:85:cb:af:8b:e6:4b:5c:
2a:ff:b9:08:33:89:00:48:62:e0:d3:ac:b9:16:d4:2a:81:76:
fc:a1:3e:b3:16:9b:99:a9:b4:7a:1e:0d:f3:05:98:77:71:66:
76:a7:9a:6a:8a:ce:94:97:48:b4:27:ab:5c:ad:68:f2:fb:68:
1b:29:36:bd:a0:68:e1:ff:15:88:36:26:cc:dd:e4:1f:89:9a:
a4:54:40:a0:64:64:4c:8f:c5:5a:f6:6e:f2:18:2e:e6:ae:0e:
d2:de:86:60:9e:b5:10:fd:10:2d:3e:23:53:10:d9:89:bc:ab:
60:4d:2d:60:d4:80:d0:f1:7f:27:55:d5:91:65:ad:bd:3c:33:
8d:0a:71:b7:a6:31:5a:8c:32:42:5e:9e:f6:9c:89:b7:a1:98:
7f:b2:b9:8b:5a:e2:e7:02:51:c7:42:61:92:92:f7:eb:49:c8:
55:47:93:d3:ec:74:21:5b:95:81:ec:0d:a0:ee:19:9d:13:f2:
ef:3e:e7:cb:7a:64:cc:03:6d:61:a5:5f:6c:00:e2:78:c8:5f:
d3:3c:7a:97:bc:e2:c6:4a:0e:8d:6d:8c:9e:5c:2c:ac:f8:04:
92:2b:ff:bf:3f:36:a6:c5:8b:2c:c1:d3:96:69:c6:b8:7c:8b:
d7:08:5e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:30:43 2025 by rpki-client