Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xN29nyMJGTIb9WcG8QaTd5JhGfk.cer
File: xN29nyMJGTIb9WcG8QaTd5JhGfk.cer (raw, json)
Hash identifier: hnwhA9Bt02uBYri2Zx2AZmS92GfjKhglkIA2HO4zFOo=
Subject key identifier: C4:DD:BD:9F:23:09:19:32:1B:F5:67:06:F1:06:93:77:92:61:19:F9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B59A9F53C32FA6E523B0A5CF4E4DCA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bc/e9c8fe-a687-4952-9d88-bfac928bf658/1/xN29nyMJGTIb9WcG8QaTd5JhGfk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bc/e9c8fe-a687-4952-9d88-bfac928bf658/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:50:00 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 199041
IP: 193.32.65.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:9a:9f:53:c3:2f:a6:e5:23:b0:a5:cf:4e:4d:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:50:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c4ddbd9f230919321bf56706f1069377926119f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2a:f5:dc:08:8a:f3:59:77:a1:9d:96:89:6c:
74:2e:2a:ae:6d:0c:02:bf:7f:29:ea:15:b4:24:04:
b9:9b:cc:8b:5d:d8:5d:5f:ff:90:13:f6:ae:a4:87:
b9:a5:0a:e6:3e:de:30:b6:c5:23:b1:6b:7c:60:77:
1b:6c:e1:15:3d:75:35:5b:71:a8:c6:e2:97:79:7a:
a1:d5:f7:aa:1c:b7:87:a1:aa:b5:96:ad:d9:35:6a:
79:b8:d8:30:76:67:94:95:0f:01:8e:c9:44:93:07:
24:75:b6:5e:11:b6:b7:69:ad:9d:3c:65:ec:24:06:
da:7a:52:12:78:f6:dc:a6:11:b1:4b:f8:ca:c6:38:
72:4c:84:dc:3b:fd:3a:65:9c:59:89:dd:f0:69:fa:
a6:fd:fe:4a:31:64:46:af:c4:ca:da:b9:dd:ff:03:
c3:4b:bb:5c:5b:d4:28:d4:14:70:e4:02:22:36:2f:
38:d1:44:5c:dd:c2:86:eb:50:bb:15:84:6a:20:2d:
bc:02:78:6c:46:b8:3f:59:00:d9:3f:36:a5:62:17:
d4:82:e4:f0:46:81:e9:9e:88:09:20:e6:7d:a7:48:
0c:bf:41:22:c5:b8:ae:f7:49:9b:e4:ea:e4:53:c5:
a8:97:f1:c7:ab:9a:c9:b1:fe:11:0f:3c:8a:1a:ec:
57:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:DD:BD:9F:23:09:19:32:1B:F5:67:06:F1:06:93:77:92:61:19:F9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e9c8fe-a687-4952-9d88-bfac928bf658/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/e9c8fe-a687-4952-9d88-bfac928bf658/1/xN29nyMJGTIb9WcG8QaTd5JhGfk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.32.65.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199041
Signature Algorithm: sha256WithRSAEncryption
9e:00:88:31:a8:02:05:5a:16:00:c3:3d:e9:20:09:c9:1a:06:
8a:40:47:9f:1d:06:bc:cd:3b:ad:2b:d2:1e:86:db:8e:1b:bd:
95:27:26:81:ef:ea:68:0d:32:3e:9e:3f:4f:50:aa:f6:51:68:
08:59:6d:97:62:4e:e9:07:32:09:d9:37:bb:46:21:84:dc:ea:
77:56:fe:18:b8:b8:94:3f:36:ba:76:fd:1a:de:57:ba:d5:3f:
b4:55:47:25:2a:22:78:c8:c0:3d:4a:92:ee:ad:b2:58:1c:11:
55:73:d1:1e:fe:31:5d:2e:78:8e:2b:d6:cc:b4:bc:ff:f3:42:
52:4f:01:e9:d4:aa:40:b5:24:20:60:46:e2:69:58:e6:5e:05:
e5:0d:13:80:14:cc:49:54:62:cc:f5:e1:d5:35:a0:ec:07:11:
08:d6:29:e4:9f:c1:b8:bf:c7:06:77:78:5c:34:fa:31:d1:84:
59:0e:78:52:e1:07:c9:22:90:63:aa:73:8b:37:dd:b8:53:e5:
a0:37:67:71:f0:26:30:91:5e:eb:a4:fb:f3:b5:5e:72:f8:5b:
c4:fa:40:12:2e:30:89:e1:a6:d2:46:2b:b9:7a:78:57:35:e5:
a1:d4:af:be:35:1f:9b:f7:95:6c:47:08:2c:59:ee:6e:7c:c8:
ff:0e:93:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:58:41 2025 by rpki-client