Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uTYoo2ME473CH4U7s_rUPkhhpcU.cer
File: uTYoo2ME473CH4U7s_rUPkhhpcU.cer (raw, json)
Hash identifier: pFNaggseAwRGmicRdbdBMEEMvqHmpppeyEFkyc42Dwk=
Subject key identifier: B9:36:28:A3:63:04:E3:BD:C2:1F:85:3B:B3:FA:D4:3E:48:61:A5:C5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942827D3AD5952215ADB3AA14367CE3DEB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 17:54:46 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 204560
IP: 185.246.140.0/22
IP: 193.194.102.0 -- 193.194.104.255
IP: 2a0d:8380::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:d3:ad:59:52:21:5a:db:3a:a1:43:67:ce:3d:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 17:54:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b93628a36304e3bdc21f853bb3fad43e4861a5c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:93:95:39:b7:b3:18:55:19:04:db:a0:83:46:
52:df:62:49:3d:d7:e5:61:69:3d:40:19:a7:8c:47:
03:8e:44:a7:df:c5:56:39:2a:56:32:88:3b:f2:10:
43:9a:27:e2:51:1e:f0:f6:25:0c:75:49:6c:46:03:
7e:7a:c1:0c:74:22:98:48:e2:05:cc:07:78:b0:53:
9a:a7:c9:28:de:d0:4c:be:3a:bd:da:b9:ce:e4:e8:
d0:ac:ed:ae:16:c7:c7:bb:97:47:bb:7f:cd:a3:d6:
c6:03:56:00:f8:d5:b9:51:d0:16:54:68:3e:d1:bd:
43:53:39:a9:dd:cb:0a:c6:86:af:74:69:71:10:fe:
19:f4:34:78:27:79:a6:47:3e:0e:39:5c:84:e2:87:
f9:c7:ba:67:30:b5:87:17:a0:63:50:2b:4a:c4:1e:
25:10:9a:f6:96:b3:fa:b9:c3:59:95:d9:6c:e0:47:
f2:d8:76:c0:d0:23:e4:56:60:67:55:a6:da:f5:59:
a4:8b:ca:88:8b:f6:59:7f:8e:6b:d6:9e:28:4c:91:
ee:66:93:3c:70:6f:eb:7b:83:23:b6:49:30:ef:09:
c4:c9:78:2a:ec:35:6a:40:e9:f1:82:1b:2b:8f:73:
58:29:5a:47:1e:4f:61:d7:b3:34:21:ec:3c:7e:60:
db:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:36:28:A3:63:04:E3:BD:C2:1F:85:3B:B3:FA:D4:3E:48:61:A5:C5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a9bbce-d3c7-4221-9f6b-87d3ec7f0410/1/uTYoo2ME473CH4U7s_rUPkhhpcU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.246.140.0/22
193.194.102.0-193.194.104.255
IPv6:
2a0d:8380::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204560
Signature Algorithm: sha256WithRSAEncryption
31:09:f5:33:42:15:1f:95:7e:7c:7a:74:42:76:2c:a3:2d:39:
5b:1b:0d:f6:df:03:84:4e:c3:3c:c4:51:f4:54:84:10:5d:88:
34:d2:ac:86:9f:9d:18:bf:fa:8a:ff:2e:c2:23:59:09:0e:5d:
5e:13:c5:fa:6f:4b:96:8e:63:ff:41:a6:1a:b8:16:af:90:09:
74:15:07:1d:d7:44:09:37:fc:49:4c:c2:f9:ab:44:e6:2f:97:
b5:87:c5:fb:d5:7f:86:db:b4:76:ea:8d:35:f6:69:53:48:66:
30:53:28:8b:2d:bc:9e:f7:98:a9:49:c0:a8:bc:f4:0d:a5:75:
0b:45:e1:49:65:f2:02:78:52:7b:2b:8f:53:88:b3:9f:04:76:
33:9d:8e:e1:0e:51:29:ab:eb:28:06:c8:c4:b8:fe:a2:be:93:
89:85:8c:67:d4:a3:67:19:c7:29:ae:af:ad:aa:e8:65:a3:3a:
2e:94:14:d1:57:68:dd:ae:3e:e3:19:cc:94:1e:e3:f4:54:67:
49:9e:7d:77:f3:9d:f0:68:ea:1a:c0:1f:da:2a:d7:30:a6:dd:
b6:c1:c1:54:82:fd:a7:81:f0:cf:b3:ca:33:fe:4e:a0:a0:c3:
b2:df:0c:38:5d:40:21:c1:84:53:ac:da:c7:65:90:65:a8:25:
9b:04:d8:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:36:25 2025 by rpki-client