Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/x7996xihKSBrrXc8-CId5UTj_YE.cer
File: x7996xihKSBrrXc8-CId5UTj_YE.cer (raw, json)
Hash identifier: +mJhKwuoMt8WzDz8jX4tvPkO/7QXJG50RREkjHSWAzE=
Subject key identifier: C7:BF:7D:EB:18:A1:29:20:6B:AD:77:3C:F8:22:1D:E5:44:E3:FD:81
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942369AF84D75C5769AA79701EC5BADB53
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ec/750eaf-b03c-46d2-bfc6-018fc9c028b0/1/x7996xihKSBrrXc8-CId5UTj_YE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ec/750eaf-b03c-46d2-bfc6-018fc9c028b0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:48:36 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 207844
IP: 2001:67c:968::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:af:84:d7:5c:57:69:aa:79:70:1e:c5:ba:db:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c7bf7deb18a129206bad773cf8221de544e3fd81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ac:52:75:47:02:a7:fd:a0:b8:c1:62:cb:5d:
5c:a0:8d:47:70:89:eb:de:01:0d:38:10:fd:66:4f:
ba:af:e3:93:d2:54:5d:45:33:37:fc:3d:67:1b:6f:
c6:76:b2:39:f2:6f:c8:fd:71:d4:c5:05:b4:e3:9b:
88:0c:df:6e:87:b5:39:16:67:38:64:4b:0f:aa:7b:
e7:69:1d:7a:98:30:54:bc:cd:03:0b:6f:36:08:54:
f4:1f:f5:1a:6b:16:7d:75:19:6f:ed:8b:83:40:42:
62:ba:a7:df:2e:d6:5b:e2:b0:49:d2:4b:59:df:f0:
9c:2b:35:3d:98:a5:9b:8f:08:f7:41:87:8e:49:c8:
ba:f9:fb:00:a4:3f:2c:cb:2b:92:1e:98:32:df:bc:
6e:4b:2e:80:50:1f:73:34:cf:59:00:ba:64:21:a8:
e0:e5:89:a6:0b:cc:73:89:61:81:47:1e:67:dd:19:
12:0b:28:c3:77:01:e9:ef:db:ed:9c:af:20:a4:d6:
a3:62:4b:fe:d0:e0:e5:77:4d:82:82:bc:06:e9:3c:
a0:a8:f8:18:0d:02:2c:64:fe:dc:c4:04:f8:59:c7:
e8:c6:5f:ff:b3:18:df:46:ca:2f:b5:69:a7:4c:ad:
79:45:0e:fe:f7:66:d1:81:9d:fa:86:aa:cb:30:c9:
f0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:BF:7D:EB:18:A1:29:20:6B:AD:77:3C:F8:22:1D:E5:44:E3:FD:81
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/750eaf-b03c-46d2-bfc6-018fc9c028b0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/750eaf-b03c-46d2-bfc6-018fc9c028b0/1/x7996xihKSBrrXc8-CId5UTj_YE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:968::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207844
Signature Algorithm: sha256WithRSAEncryption
16:bf:06:f4:9f:dd:e3:f0:82:9f:ea:7d:71:e7:d2:f1:d9:1c:
1e:cd:63:26:eb:48:b6:85:8a:20:22:3e:82:c5:df:27:03:81:
8b:c4:c4:b5:47:c9:84:28:0f:af:15:8e:c4:53:58:7e:2c:f1:
3e:df:54:d6:06:02:b6:9b:40:6d:a3:e6:7c:90:3c:21:c4:01:
d2:03:ba:ae:27:60:6c:a1:f2:15:2d:d0:51:41:6e:3a:af:7f:
cf:e1:2d:58:e3:e6:33:f7:d1:05:16:45:69:90:1d:9a:76:80:
3c:1e:f5:ac:c0:c8:a0:f6:45:6a:9f:4d:ae:f3:ec:9d:b5:f8:
3c:67:4e:a1:da:d0:7d:98:ae:e5:29:a7:8b:c7:85:d5:05:8c:
06:41:c8:0f:3e:be:c1:be:60:ab:52:a7:20:f2:3d:29:8a:fd:
99:42:56:50:f8:7d:1e:2f:e3:7f:c5:42:9e:4a:9f:75:2c:18:
d3:59:15:19:33:78:c6:b4:e9:54:96:59:33:f3:4b:52:25:58:
4b:43:5c:d0:0f:67:99:a2:4a:81:de:93:21:6a:84:2b:5b:7d:
d4:93:c0:3d:65:20:38:37:10:5f:dd:c0:c6:88:02:8d:0c:ac:
87:d7:48:a3:75:5a:5b:82:d3:bc:68:19:ee:cd:46:5c:70:18:
c7:7f:ac:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:56:28 2025 by rpki-client