Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sffQCUrcmNmwMnIOgePbWqdYHHQ.cer
File: sffQCUrcmNmwMnIOgePbWqdYHHQ.cer (raw, json)
Hash identifier: RqAymbhTX+zF6s+Z0oIlaEg7kiAW3vD4jZT+gjkxqBY=
Subject key identifier: B1:F7:D0:09:4A:DC:98:D9:B0:32:72:0E:81:E3:DB:5A:A7:58:1C:74
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D5A712831D8DF5A0C8F10F06AC95A0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b8/e8dd6b-4627-4a3c-ba73-a54b869dcd27/1/sffQCUrcmNmwMnIOgePbWqdYHHQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b8/e8dd6b-4627-4a3c-ba73-a54b869dcd27/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:47:40 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 205313
IP: 185.222.72.0/22
IP: 2a0c:e00::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:a7:12:83:1d:8d:f5:a0:c8:f1:0f:06:ac:95:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b1f7d0094adc98d9b032720e81e3db5aa7581c74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f0:27:1d:c9:3d:d0:a9:c7:00:b6:2f:18:a6:
0b:3f:17:0d:2c:d3:57:76:c5:4c:c6:1e:cb:45:31:
70:54:74:55:ae:ba:84:80:3e:67:ff:c9:c9:ff:6d:
76:68:79:bd:3c:7e:d9:d4:07:19:63:4b:f8:3d:4b:
da:f7:3b:8a:7d:a3:67:3b:30:7c:d6:7b:78:03:8e:
d4:d0:44:a3:6d:20:c1:8b:4d:8c:d2:3d:33:0b:9a:
35:04:b2:a1:0a:b7:7c:b9:eb:eb:bb:33:5a:16:fe:
ff:09:4a:5b:e2:8f:6a:6c:24:b0:4e:07:96:3d:5e:
f3:47:61:dd:d9:27:db:9f:3d:f3:95:90:ad:7e:54:
f4:50:8c:19:b5:ef:c0:9d:b6:73:35:f5:d8:96:9f:
fd:45:69:63:86:07:89:b8:02:ef:61:53:86:09:49:
87:3e:78:1a:56:20:3a:cd:b5:56:15:d6:27:59:33:
f1:53:40:b8:49:c0:53:6d:5b:24:c7:df:50:a3:9a:
63:fb:bd:38:ad:dd:15:74:85:99:3e:5f:7d:38:67:
24:88:0c:59:25:51:36:86:24:d9:d6:bc:ef:74:1f:
e0:ff:95:c1:7a:6a:00:b3:82:2a:12:4e:2c:80:9e:
9b:a7:ae:a6:d9:69:3b:7d:ee:5d:db:2d:28:01:e6:
c3:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:F7:D0:09:4A:DC:98:D9:B0:32:72:0E:81:E3:DB:5A:A7:58:1C:74
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e8dd6b-4627-4a3c-ba73-a54b869dcd27/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e8dd6b-4627-4a3c-ba73-a54b869dcd27/1/sffQCUrcmNmwMnIOgePbWqdYHHQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.72.0/22
IPv6:
2a0c:e00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205313
Signature Algorithm: sha256WithRSAEncryption
0a:8b:f0:81:69:2f:ae:b8:aa:42:a8:b0:8a:c1:94:ed:40:47:
8d:db:d8:49:6a:32:f6:86:68:21:d7:4f:96:24:76:83:8a:26:
7f:15:c9:93:4d:c5:b9:40:8c:4d:4b:53:a8:fe:e0:40:87:a1:
c4:7b:9d:fa:89:ac:2a:1e:a0:b1:02:ff:8e:6d:4c:f0:e6:0d:
2f:31:67:f0:d0:51:e8:5a:4b:fb:ad:83:aa:1c:83:28:b7:4d:
85:73:1f:d3:d4:78:a7:15:6c:5d:fc:19:b1:f6:db:87:ed:3b:
85:e9:8b:ad:66:b1:8b:75:60:72:c6:91:da:0a:30:25:7e:7c:
66:48:e6:a8:cb:a3:12:17:b1:8b:66:57:78:68:ae:24:7e:70:
a9:95:fe:cd:cd:28:e1:39:81:a0:44:d8:f0:e7:35:1e:13:40:
bd:03:2c:de:33:01:ea:0d:9d:07:2b:b5:9c:69:3f:90:6d:94:
20:b5:6c:4f:81:72:50:2c:35:11:80:77:8b:b0:63:5b:14:e0:
6f:81:42:20:23:89:64:ff:ea:c4:cb:51:da:e9:6b:05:8a:12:
35:65:a5:6a:ce:d4:e0:35:72:6b:ef:80:6c:ff:92:b6:6f:55:
99:a7:33:6a:d5:84:c5:71:fc:1d:2c:77:98:a4:cc:bb:ec:97:
a1:64:90:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:41:47 2025 by rpki-client