Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ze54rYV2B1I7ULYKzZ4iyloQeFQ.cer
File: ze54rYV2B1I7ULYKzZ4iyloQeFQ.cer (raw, json)
Hash identifier: phkcgKlUV7YaY/7KktSSyrPs/pz/tKDwV6wKRcH/vQk=
Subject key identifier: CD:EE:78:AD:85:76:07:52:3B:50:B6:0A:CD:9E:22:CA:5A:10:78:54
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421445CDC86B6C63C5972325F152224C8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:35 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 34350
AS: 48455
IP: 80.70.48.0/20
IP: 195.162.2.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:5c:dc:86:b6:c6:3c:59:72:32:5f:15:22:24:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cdee78ad857607523b50b60acd9e22ca5a107854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f2:7a:c3:e7:fb:78:b2:52:e8:cb:67:5a:71:
72:44:18:b8:90:53:70:b6:fe:c3:bb:cf:09:fd:35:
ef:a6:18:07:6e:b1:94:78:72:8f:70:da:51:19:67:
32:a4:83:63:df:d6:07:74:b9:18:51:75:dd:e0:25:
ef:a5:b9:35:24:04:30:cc:be:7b:1c:57:7b:03:db:
9d:91:5a:b1:19:e3:04:e0:6b:e8:f1:74:c6:42:a5:
dd:a3:f2:49:05:e4:cf:27:44:52:1f:58:40:14:4d:
40:72:95:ea:31:2e:6b:87:8d:02:5f:d7:f8:4b:44:
4b:00:37:2b:3f:64:08:83:4d:a7:0a:3c:73:88:98:
78:fd:e4:48:c1:78:c5:8a:32:27:f8:11:73:eb:b7:
da:1b:a8:e9:92:dd:cf:8c:fb:e1:3b:a4:f3:d7:cc:
c4:5e:7c:83:92:66:b3:30:1d:ca:f2:91:c4:04:17:
f5:ea:b7:c4:34:30:0c:25:29:4e:63:12:cd:4a:81:
8d:fc:10:82:47:28:9e:9d:7f:94:6c:dc:e2:07:3e:
44:86:a4:b1:3c:97:d1:1d:b8:c0:29:7c:60:44:35:
92:f6:9b:9c:7d:17:04:0c:41:42:3e:a2:7a:68:90:
c5:64:10:57:93:62:34:00:64:5c:13:d8:ec:f6:1c:
db:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:EE:78:AD:85:76:07:52:3B:50:B6:0A:CD:9E:22:CA:5A:10:78:54
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/5a49bf-c059-4bea-88d3-cf0124ced4d6/1/ze54rYV2B1I7ULYKzZ4iyloQeFQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.70.48.0/20
195.162.2.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34350
48455
Signature Algorithm: sha256WithRSAEncryption
8c:7c:7f:4e:e4:fb:97:85:d9:ea:30:fe:7d:cd:bd:d5:1d:a2:
1e:bd:46:48:8f:ed:87:a9:dd:95:7f:ff:82:4a:17:47:32:fa:
6f:9d:a6:5e:9c:28:d9:7b:ab:ad:92:41:59:35:92:d1:91:25:
93:96:fa:a4:b2:39:65:07:4e:80:56:62:c8:5f:30:57:ba:19:
ad:16:cd:91:73:95:f8:05:da:07:e0:b8:3b:e4:1f:f2:9b:a2:
00:f1:e9:fe:43:69:4f:86:0a:2b:89:53:7f:73:8c:94:ca:ae:
70:d3:da:da:6c:40:5e:38:6b:23:09:0b:d8:32:ff:44:30:81:
03:c0:e8:df:6f:c5:14:7f:1a:aa:bf:3a:c9:c8:20:18:ef:fa:
55:ac:c2:ac:bd:42:e2:4b:02:92:56:e3:e2:92:68:68:ef:59:
80:a9:14:ef:e6:1d:a7:7a:ce:75:51:c0:fc:8c:28:82:01:40:
e5:71:19:6f:60:c9:c0:ec:19:3c:60:38:f4:bc:60:68:eb:3f:
06:32:57:ea:c2:41:c4:cc:a3:26:0f:8f:e1:93:8e:06:f0:97:
14:ed:42:4f:44:c1:1e:a4:40:40:2f:77:43:ef:f5:be:19:2a:
73:f7:c7:ca:c3:2c:ba:93:97:9f:94:31:c1:0a:1d:89:69:91:
8f:68:4b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:04:29 2025 by rpki-client