Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yCnhDha8eb_FbFNVflsapVnMdDU.cer
File: yCnhDha8eb_FbFNVflsapVnMdDU.cer (raw, json)
Hash identifier: 4mmrm12lrpt588FWJwVGMR7txPmgyoy8mSF1CFjxqjw=
Subject key identifier: C8:29:E1:0E:16:BC:79:BF:C5:6C:53:55:7E:5B:1A:A5:59:CC:74:35
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425222DD4DB017331B4CA062C8B88FC42
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:49:44 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 206081
IP: 2001:67c:c64::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:2d:d4:db:01:73:31:b4:ca:06:2c:8b:88:fc:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c829e10e16bc79bfc56c53557e5b1aa559cc7435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:28:06:6c:d4:1e:88:9e:04:c0:b9:de:60:fc:
71:50:6f:5a:af:cc:68:7f:35:6c:8b:d2:a6:6c:6e:
ca:62:16:d6:39:4b:bb:21:bc:a3:18:cb:e4:88:7e:
16:9a:8c:8d:84:da:61:ad:40:03:1f:10:e2:c6:75:
a0:83:88:9e:60:8a:8f:bc:3e:c3:93:3a:2c:52:bb:
81:96:47:a0:4e:d4:96:1c:73:0f:9a:e1:27:43:d6:
07:0d:8c:51:6e:5a:c7:a4:2e:20:9e:1e:e0:b5:ce:
ea:05:76:f8:a7:11:bd:a1:cd:6c:61:56:bd:48:21:
d4:90:43:6d:30:ef:4e:6f:ba:c4:af:79:bf:9a:14:
cd:c7:bc:3f:8a:c7:8c:90:2a:39:4d:94:84:1f:1f:
1b:56:3b:8a:dc:d2:fd:39:31:28:e3:de:c2:70:25:
c7:6f:0c:78:7f:24:0b:30:ab:3b:3c:5a:e9:48:da:
c1:af:26:17:bb:c4:5a:1d:44:4f:d9:a4:4e:55:e3:
32:ed:33:fe:73:cf:66:f7:8f:1f:0e:9a:63:65:fe:
3d:f5:1d:46:30:4c:70:c2:7c:f7:d0:2d:50:14:60:
18:e6:72:06:6c:ed:d6:fc:09:57:7f:2c:76:ad:14:
76:82:40:d0:90:fe:11:ff:39:2a:03:56:ff:b7:c7:
fe:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:29:E1:0E:16:BC:79:BF:C5:6C:53:55:7E:5B:1A:A5:59:CC:74:35
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/667a4d-4a3a-48f5-a26a-b8453eebb267/1/yCnhDha8eb_FbFNVflsapVnMdDU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:c64::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206081
Signature Algorithm: sha256WithRSAEncryption
70:ea:63:a0:af:3e:43:a6:73:ae:55:a5:17:cd:6e:4b:8f:03:
0c:90:c8:e4:ca:a1:0e:1f:ce:23:1e:1c:5f:53:1e:9b:36:31:
96:2a:01:45:e6:ef:54:15:96:ce:bd:7b:e0:5e:49:4c:cb:28:
57:70:26:ab:f4:6a:98:4e:5f:24:33:b8:64:9a:ed:53:ed:f1:
4c:72:53:6f:86:f5:b3:bd:e2:27:66:de:0f:f3:f7:67:47:d4:
49:54:2d:cd:36:8d:bd:36:11:b9:ed:57:a9:2e:6d:b8:13:30:
33:5d:39:f5:60:10:30:a4:d1:13:01:7f:f9:cf:b7:48:b2:da:
88:96:a3:6d:af:a7:f4:47:f9:a5:36:e9:78:bb:f1:7d:c0:c0:
57:91:4f:4c:da:ae:7d:c6:48:b3:e8:bc:50:5e:71:b6:af:b1:
0b:19:86:04:78:9c:a1:b0:11:09:41:14:f9:eb:32:ac:0b:49:
ac:bd:87:37:00:4d:bc:f7:ac:ba:8b:5a:94:49:b3:22:80:27:
e5:a5:9a:08:d7:fb:d0:d4:f5:fb:68:a1:ef:96:a5:6d:45:37:
ff:8c:2c:a5:d2:b7:3a:97:19:6b:fa:df:20:67:9e:db:79:47:
10:29:93:3e:c7:2d:99:78:80:33:07:cd:23:c9:1b:89:44:6d:
5a:61:be:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:16:28 2025 by rpki-client