Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yvF4APGUOvHFFChMw754Dpwh3Xg.cer
File: yvF4APGUOvHFFChMw754Dpwh3Xg.cer (raw, json)
Hash identifier: AUSHBdkEg6LPIjQOlCGig9MlGaeFNEGPwCOGkzTcNK4=
Subject key identifier: CA:F1:78:00:F1:94:3A:F1:C5:14:28:4C:C3:BE:78:0E:9C:21:DD:78
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942067F64F21302CDF34F10B1032D52699
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:47:51 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 39658
IP: 185.178.124.0/22
IP: 194.50.107.0/24
IP: 2a01:9080::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:f6:4f:21:30:2c:df:34:f1:0b:10:32:d5:26:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=caf17800f1943af1c514284cc3be780e9c21dd78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:55:d0:27:72:b9:04:f5:15:77:c5:00:48:60:
d5:d0:43:d5:1a:de:89:7e:17:05:6f:df:af:8b:01:
48:11:83:5c:ce:84:e0:82:12:f4:f6:e3:29:c0:b0:
66:d0:f4:6e:72:57:51:9f:9a:a3:92:c5:6a:f5:ea:
8e:74:8e:c0:da:45:33:c4:24:19:8d:4e:78:0a:c6:
27:f8:82:31:63:23:4b:1f:3e:05:f7:d6:d4:de:f8:
79:b5:bf:ae:e5:29:52:14:6d:d9:a4:b6:2b:b6:cc:
96:e0:2e:3f:08:58:9d:25:11:4d:81:25:fe:c5:16:
3f:16:7f:07:60:5f:cd:5c:8f:95:0d:ca:42:c6:ba:
8f:4c:54:17:b9:20:d4:47:98:02:48:f2:84:59:ed:
8b:57:9d:3a:57:8b:e3:0e:f4:b3:e5:74:39:37:0f:
a6:c3:4f:05:61:af:ce:12:82:21:4e:b2:08:d5:17:
8d:ad:b4:01:0d:d0:95:a3:c9:c2:71:5d:34:8f:40:
f1:35:20:ff:c1:43:b4:75:14:81:0c:82:12:15:7b:
47:51:19:c3:cd:73:17:9f:79:4f:8f:ad:63:81:41:
91:fc:0c:4c:f7:6d:e6:7e:20:45:38:4a:28:27:a6:
f4:6c:28:a2:64:fb:e9:4a:82:40:8e:f2:21:01:6d:
cf:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:F1:78:00:F1:94:3A:F1:C5:14:28:4C:C3:BE:78:0E:9C:21:DD:78
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/669ace-f864-44d7-a07e-80597eb44426/1/yvF4APGUOvHFFChMw754Dpwh3Xg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.178.124.0/22
194.50.107.0/24
IPv6:
2a01:9080::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39658
Signature Algorithm: sha256WithRSAEncryption
7c:b3:bb:83:c9:a2:17:3e:f2:d8:2a:22:10:71:59:e2:58:0f:
32:22:10:ea:77:a0:9d:23:4b:8b:86:51:48:53:96:55:e5:13:
5c:a4:ed:a7:64:a2:bd:df:99:b7:6d:02:bf:62:e1:86:33:7f:
2a:60:90:a6:e4:0e:b3:e2:e2:40:15:85:54:08:5c:4c:65:80:
9f:cc:42:8d:a3:0d:cf:3e:f0:c0:e6:eb:cd:8d:93:25:49:6e:
6d:bc:d7:35:09:2b:54:04:23:9a:e9:2f:52:e2:87:db:36:ab:
1c:91:df:ff:8c:ef:c8:98:44:19:d2:fb:3f:57:a6:2c:54:e4:
25:8a:13:37:4d:49:58:45:f0:1a:dd:d3:d8:a7:32:0c:2c:57:
ce:60:91:41:42:16:a4:13:24:b3:6a:cb:af:85:60:2b:a1:7d:
e5:05:e7:02:d8:fb:9d:d0:a3:78:e1:fb:9a:2c:f4:9c:a6:90:
a4:94:9e:55:63:71:69:e8:50:d3:0a:5c:01:f5:03:10:2f:fa:
0f:01:19:4d:e6:a5:39:d5:c5:c4:92:51:78:00:21:98:fb:87:
6e:69:6e:cd:da:f6:d2:4a:83:50:00:9a:7c:bd:87:4b:5c:da:
b3:f7:a4:c2:7c:7b:b0:cb:b1:5d:f1:47:ed:cf:30:3c:dd:d8:
d8:2a:e7:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:36:52 2025 by rpki-client