Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer
File: sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer (raw, json)
Hash identifier: ZN+L+O+Jeegpx001eSpr4Kc5eyq4DueVtydZ3jw34DY=
Subject key identifier: B1:94:F0:30:4E:ED:D3:63:C6:62:2F:D9:1C:59:B1:08:71:AA:30:44
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221F73F48C6A331D6BC08D3674094E3B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:47:54 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 30870
AS: 34710
AS: 57685
AS: 198058
IP: 87.101.8.0/21
IP: 91.199.219.0/24
IP: 171.25.179.0/24
IP: 185.40.56.0/22
IP: 185.108.116.0/22
IP: 194.30.160.0/24
IP: 2a01:4d60::/32
IP: 2a06:4a80::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:73:f4:8c:6a:33:1d:6b:c0:8d:36:74:09:4e:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b194f0304eedd363c6622fd91c59b10871aa3044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:37:78:9e:5e:3d:b1:48:20:7d:f8:1c:39:08:
1a:35:83:24:c4:d5:d4:cb:53:41:02:7f:41:f1:10:
e1:c0:43:a9:b9:4b:cc:7c:b4:20:2b:e3:16:96:98:
34:47:4a:98:cb:5e:f8:71:4a:06:0e:26:48:2e:ed:
f0:c3:88:25:e0:c3:58:60:b1:8a:8e:e1:21:f1:e1:
d1:2d:f2:84:6c:fa:e8:ac:ab:83:e2:16:a5:4b:5c:
ab:84:9c:59:50:db:58:2d:d9:12:25:09:00:31:f4:
4d:e9:dc:6c:8e:17:d5:44:3b:7e:8e:35:15:80:3d:
4d:d1:e7:54:4b:d1:7e:f8:65:40:2d:10:4b:f1:61:
f2:3e:d1:5f:93:c7:45:4c:c5:97:8e:6b:6b:44:04:
55:16:3d:c9:eb:ed:07:93:3e:4e:c2:c2:86:55:3d:
6d:55:7a:51:5c:37:55:7f:76:4f:cd:15:36:6d:ec:
04:9b:ad:7e:8d:6e:57:a0:52:b0:a7:40:65:96:ad:
18:f7:b7:45:dc:4a:16:ee:d4:37:d7:61:4d:a3:45:
d4:0f:21:48:8b:1e:5d:bb:79:21:20:a5:f0:1c:f1:
73:cb:1f:f5:12:c9:9d:98:86:4e:5c:2d:c6:b1:b8:
4c:83:35:7d:7b:a4:14:d4:a5:04:12:6a:f0:b8:5a:
70:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:94:F0:30:4E:ED:D3:63:C6:62:2F:D9:1C:59:B1:08:71:AA:30:44
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.101.8.0/21
91.199.219.0/24
171.25.179.0/24
185.40.56.0/22
185.108.116.0/22
194.30.160.0/24
IPv6:
2a01:4d60::/32
2a06:4a80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
30870
34710
57685
198058
Signature Algorithm: sha256WithRSAEncryption
95:4a:25:6a:4e:6d:37:62:7b:df:e9:1e:49:c6:3f:90:22:39:
0c:4b:87:41:62:25:3f:e1:f0:ec:6b:2f:19:56:d3:aa:15:24:
12:4c:e8:54:3e:fe:8d:34:9c:3e:16:db:43:69:32:30:af:a6:
ce:49:d6:e7:04:08:c6:a9:e8:3b:09:e4:70:11:e6:31:ed:44:
e6:c4:4c:04:d8:af:38:d7:66:77:35:dd:1a:cb:73:33:fd:29:
e4:d8:e0:cc:a5:2b:87:33:0c:91:41:64:14:a9:06:7b:82:29:
9c:93:0a:eb:72:67:2c:4f:c7:12:68:e3:39:34:f2:a9:16:23:
6f:33:ee:e2:8d:82:a3:73:6d:f0:b4:b5:f4:38:73:9e:ac:fd:
33:6b:7b:d3:b1:b2:65:7e:8a:26:2d:20:9a:98:c4:3b:8b:11:
c0:d2:71:15:40:22:4e:2a:09:4d:dd:36:bb:b6:c0:56:c1:ef:
5f:34:f8:6c:3f:37:4b:ae:80:4c:de:dd:ef:6e:88:5e:6b:9c:
69:a3:4b:9f:cb:cc:43:3e:16:4f:88:10:c8:7a:4c:a4:75:13:
4b:95:80:06:6c:b6:82:e5:0d:cf:c2:e9:43:37:75:1f:8d:36:
3e:f4:dd:17:5f:62:59:77:f3:53:f5:5d:d6:a0:47:9b:b2:2e:
c7:10:1d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:04:32 2025 by rpki-client