Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xzic6Ca8jSaGm0UvPNk2kCxVL78.cer
File: xzic6Ca8jSaGm0UvPNk2kCxVL78.cer (raw, json)
Hash identifier: ZQpEboxYs7POhx6/hnN5EQQoIHcQOovfcZzHKemY6Wo=
Subject key identifier: C7:38:9C:E8:26:BC:8D:26:86:9B:45:2F:3C:D9:36:90:2C:55:2F:BF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA4F87F97038F816E75A3229D1343A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:48:05 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 34563
IP: 91.216.70.0/24
IP: 193.42.222.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:4f:87:f9:70:38:f8:16:e7:5a:32:29:d1:34:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c7389ce826bc8d26869b452f3cd936902c552fbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:56:bd:0e:27:3f:4e:ec:11:68:0a:cd:41:dc:
df:e9:be:16:24:5d:12:19:bf:8c:45:26:8e:b4:f9:
7f:51:2b:6e:72:16:21:84:37:02:64:ee:b8:7b:4d:
2e:e5:f0:b1:b8:42:33:b1:1c:35:94:94:10:fe:44:
17:fc:15:2c:77:08:13:63:63:46:21:a0:3c:6a:65:
ed:03:66:6e:00:07:78:79:8d:e5:36:7d:08:aa:19:
3b:b8:7d:df:2f:15:3f:00:38:22:fb:d6:9b:9b:66:
3f:fc:af:9c:e1:71:bc:b9:cf:9c:0c:86:83:64:91:
8f:34:bb:43:dc:f8:22:c5:f9:9a:cb:60:a9:ec:bd:
93:90:74:f5:a0:66:0c:f0:46:e9:c5:4a:9c:55:e5:
e4:71:6f:94:76:50:77:db:12:0d:86:07:7a:21:51:
d5:d5:a0:b9:8f:47:d1:d8:f0:fa:78:8b:5c:4d:53:
4d:70:4e:d8:8c:b8:84:8e:a7:7b:98:24:52:d4:1a:
4b:34:1d:fb:e0:e0:f6:2e:7f:b5:a4:9b:c9:3d:f6:
29:5f:5f:6a:02:97:58:76:6e:c9:98:c7:37:ca:7d:
f5:cb:8a:e4:b3:7e:2c:bd:0c:44:98:4c:60:b5:f9:
a1:13:26:53:52:20:5e:93:5a:1a:8a:cd:cc:9f:22:
bf:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:38:9C:E8:26:BC:8D:26:86:9B:45:2F:3C:D9:36:90:2C:55:2F:BF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/dc1d09-9f69-471b-be7a-52008d1cb9b6/1/xzic6Ca8jSaGm0UvPNk2kCxVL78.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.70.0/24
193.42.222.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34563
Signature Algorithm: sha256WithRSAEncryption
98:f0:e6:87:59:0b:72:6b:6a:70:cc:80:71:b8:a3:8e:fd:8c:
38:45:e7:5a:b4:ee:04:55:70:e4:f1:f5:f8:80:2e:8f:a1:1c:
94:27:e0:09:5d:ec:d9:2a:f4:0d:e7:4a:41:13:fc:d0:5a:30:
f0:4a:6b:4a:85:1a:63:50:28:33:36:ed:f0:7d:91:e3:55:5d:
d9:c9:13:1b:ef:1c:c1:fd:f2:f4:22:71:db:96:68:f3:9b:5d:
23:f2:2f:5d:bd:27:59:3c:54:a2:b1:b8:3c:fa:2a:0e:e5:f8:
41:8a:d3:15:8d:b7:33:f1:23:1b:37:74:0f:cf:9b:c2:c5:75:
17:0d:73:dd:6f:27:17:9a:35:15:b6:3b:3d:64:75:f6:2a:9e:
ed:d5:d1:52:8c:88:05:e5:bf:51:a5:6d:79:e3:90:30:28:7e:
5f:b8:1e:2c:9b:53:d4:f4:d5:04:9e:45:77:27:e3:ad:39:28:
f1:56:50:32:a1:8e:83:5a:86:fc:7a:93:12:16:43:83:5b:ce:
2a:e5:da:02:02:7e:f8:21:64:6c:11:58:2a:aa:98:c5:48:40:
24:72:1c:fe:0b:eb:4a:fd:a3:a5:1c:a6:28:76:a3:64:31:12:
66:77:d9:62:43:b4:a5:e3:97:c1:7e:9e:72:8b:0e:bb:3d:55:
cd:1f:db:94
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:57:47 2025 by rpki-client