Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yYfQn9P8K3BMZhELsCUu4Maxuko.cer
File: yYfQn9P8K3BMZhELsCUu4Maxuko.cer (raw, json)
Hash identifier: WQtck35athJv9pUcUnaoyIuzBd6cN2sZiVs0Irzc4ys=
Subject key identifier: C9:87:D0:9F:D3:FC:2B:70:4C:66:11:0B:B0:25:2E:E0:C6:B1:BA:4A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258F0F8B6CB73B559D8B945ABD1E010C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/84/3e4f6b-2235-432e-a69a-07dac7b92d44/1/yYfQn9P8K3BMZhELsCUu4Maxuko.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/84/3e4f6b-2235-432e-a69a-07dac7b92d44/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:48:40 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 34915
IP: 194.5.208.0/22
IP: 2a0c:ca80::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:0f:8b:6c:b7:3b:55:9d:8b:94:5a:bd:1e:01:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c987d09fd3fc2b704c66110bb0252ee0c6b1ba4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a4:38:7a:09:1e:d2:b0:e7:10:dc:8d:d9:c5:
c0:ba:10:36:d4:00:89:e5:08:05:26:f8:a8:25:d0:
7a:16:55:17:ff:90:09:be:2e:b2:2a:1f:a4:bd:46:
75:4d:30:d7:aa:e9:b4:08:dd:00:60:0e:a6:2e:5e:
70:62:b9:80:57:5b:04:4a:d6:ef:07:3c:99:5a:e4:
93:3a:92:f5:8d:74:ea:16:d3:18:25:a0:45:3c:0f:
89:67:1e:84:89:f3:81:1b:76:53:1a:2b:0d:19:4a:
00:70:f0:f3:8b:b0:d2:1a:c2:8c:fd:17:4b:35:32:
90:bc:d2:03:0e:76:d3:fa:ed:67:7a:60:90:08:47:
e1:9f:7b:15:42:62:4b:7b:c3:a2:aa:a8:d1:37:80:
d8:ba:54:95:c7:d7:6f:ee:77:e8:9a:34:02:3a:9d:
fa:e4:7b:84:ba:7d:4d:8d:10:f1:9b:df:30:8d:a3:
5e:d6:ee:2b:4e:f8:37:69:37:c0:a0:63:42:58:fd:
6c:49:d7:d7:ff:98:24:30:03:b9:9c:d4:8e:4e:d7:
90:a2:8e:96:31:ca:20:a7:42:c6:ff:dc:4d:9a:fd:
94:90:c9:cc:66:47:2b:fe:7f:6f:28:44:8b:10:a8:
57:83:93:60:91:55:e7:78:7d:93:33:13:31:a3:69:
6a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:87:D0:9F:D3:FC:2B:70:4C:66:11:0B:B0:25:2E:E0:C6:B1:BA:4A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3e4f6b-2235-432e-a69a-07dac7b92d44/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/3e4f6b-2235-432e-a69a-07dac7b92d44/1/yYfQn9P8K3BMZhELsCUu4Maxuko.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.5.208.0/22
IPv6:
2a0c:ca80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34915
Signature Algorithm: sha256WithRSAEncryption
5f:6e:cd:44:b4:7f:41:f8:a9:00:f7:bb:6e:09:10:92:b0:05:
a9:04:1e:22:1e:27:b7:81:b8:d6:d3:88:b5:b0:3d:d6:7c:ea:
e6:6c:5e:e3:b2:24:cb:50:6e:e6:8c:71:a6:69:47:80:3a:d1:
44:81:eb:37:ca:a0:72:20:a8:61:13:d0:f8:94:fc:a8:c7:22:
c0:fc:3b:b4:e7:ce:ab:3d:09:e4:04:16:d7:46:d6:5b:07:71:
60:f5:d0:04:c5:4e:19:dd:71:89:0a:5a:22:cc:26:00:b6:34:
c7:2f:08:03:ec:09:05:a8:cc:80:7c:99:b5:c7:49:64:f4:79:
32:59:21:2f:f8:1f:f0:52:62:e8:75:f6:00:77:ed:e2:8c:9a:
7a:fa:a6:d9:92:51:d4:f7:b1:9f:84:f1:34:e9:d4:63:60:dc:
d8:ca:12:d9:84:09:06:b5:95:8b:ae:a8:ea:c1:54:ea:a0:fa:
44:92:ab:48:ae:a6:89:29:e4:f0:1f:5a:06:de:c4:43:35:c5:
f6:f8:aa:86:54:da:86:b0:cc:e8:ce:81:d9:c4:db:09:66:79:
09:39:e7:b1:8c:03:4d:45:f6:52:59:2d:80:af:74:b1:c9:63:
43:e9:b5:7a:3a:74:9a:cb:79:85:e2:68:0a:5a:6b:df:8f:df:
a2:65:57:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:30:00 2025 by rpki-client