Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yDxMnS_OYWZRZcBaEB6BUEe2T2o.cer
File: yDxMnS_OYWZRZcBaEB6BUEe2T2o.cer (raw, json)
Hash identifier: tU6+ea762OmuGtaXvlqWK323065IpunNfpvlp5fhIOk=
Subject key identifier: C8:3C:4C:9D:2F:CE:61:66:51:65:C0:5A:10:1E:81:50:47:B6:4F:6A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942444DB1493A26EB7C8C054FCFB67D32A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/31/674408-4163-4e7e-aab9-42ef33a26e66/1/yDxMnS_OYWZRZcBaEB6BUEe2T2o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/31/674408-4163-4e7e-aab9-42ef33a26e66/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:47:59 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 197717
IP: 193.200.54.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:db:14:93:a2:6e:b7:c8:c0:54:fc:fb:67:d3:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c83c4c9d2fce61665165c05a101e815047b64f6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a4:28:e9:0d:4c:25:26:fc:7e:74:e5:21:e8:
c4:40:b7:80:60:d5:98:d1:ca:89:7e:10:6c:13:30:
78:97:33:9f:18:a2:3d:17:6b:a6:6b:1b:63:36:17:
aa:30:e0:31:ae:27:42:f8:11:21:7a:d5:dd:f6:ab:
6f:ce:1c:7e:8c:16:2f:d9:22:e3:c3:d9:82:18:82:
63:50:c6:f7:83:ed:89:2b:46:42:35:72:af:64:21:
a0:81:e9:34:d5:c4:87:b0:4c:3b:c7:fa:22:05:63:
db:52:dd:5e:52:3c:a2:b3:c8:36:94:24:4f:1b:b0:
37:15:22:4f:94:62:83:24:36:37:92:b3:59:34:d1:
85:b1:01:27:8a:1a:51:cb:dc:2d:03:b8:7b:4f:b6:
7b:67:9c:4f:17:19:cb:a6:71:6b:7b:d7:c3:e4:d6:
5c:07:c7:8e:5a:7e:40:2b:89:11:6b:c1:8a:0a:59:
54:10:e6:51:41:d1:5a:ed:f9:55:0c:01:fa:0e:03:
ab:87:ce:95:29:22:70:df:3d:b3:30:fa:05:7e:ce:
35:e5:d0:cd:7d:a7:e2:80:84:e7:f0:dd:a9:0b:76:
96:79:84:b7:fd:6b:50:21:c6:3a:be:66:16:0b:41:
e2:9b:bd:ff:89:53:82:b7:b6:9e:69:ab:ae:b6:f3:
16:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:3C:4C:9D:2F:CE:61:66:51:65:C0:5A:10:1E:81:50:47:B6:4F:6A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/674408-4163-4e7e-aab9-42ef33a26e66/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/674408-4163-4e7e-aab9-42ef33a26e66/1/yDxMnS_OYWZRZcBaEB6BUEe2T2o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.54.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197717
Signature Algorithm: sha256WithRSAEncryption
7e:e1:9d:06:b1:b6:e2:0b:d7:76:81:29:6c:86:41:21:6a:c9:
d2:26:1c:c8:e8:f7:5c:3b:4b:34:60:49:7c:b9:26:5d:72:da:
b5:ce:f4:6d:2f:12:29:4f:53:d7:64:88:f3:de:e9:f5:c4:bb:
54:0c:67:8d:e8:e1:96:49:a8:a2:a4:3b:bb:61:f8:17:c7:f1:
20:23:99:be:eb:d5:f7:73:9c:e1:51:ad:a8:f7:6d:a0:5c:15:
e8:63:ee:98:3f:7c:fb:12:8a:ad:2c:bc:9d:87:89:99:57:5e:
ae:8f:44:fb:cc:1b:31:51:a0:ea:c9:23:ea:b7:61:c6:35:50:
8e:1f:26:c2:6b:8d:05:cf:d1:2f:b4:2f:eb:c5:cb:d0:76:3f:
3c:f9:29:b4:65:44:72:53:53:98:94:94:64:e7:d9:67:4e:08:
a7:fb:64:74:7b:fb:bb:66:4c:b4:2d:82:02:20:47:7c:9a:db:
9a:d9:a8:75:81:be:da:69:62:b4:f3:8a:c4:a6:48:47:75:e3:
6f:19:ef:90:08:99:86:c2:c8:93:9c:c5:21:38:0c:7f:bc:c4:
cb:70:75:9d:80:1d:1e:f6:6e:13:a9:02:b7:b4:fa:a8:6c:ff:
da:bd:e5:d1:68:e7:37:79:d9:f2:d8:6c:a6:c0:0a:54:7c:f7:
6b:5e:77:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:52:17 2025 by rpki-client