Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer
File: tcfYHsTEBVxnP_VxzK0Hw6aZEF4.cer (raw, json)
Hash identifier: 3UAes6HPpZJM9V/pmxjMUxlR03GFqqgsd4y3dTvmpGM=
Subject key identifier: B5:C7:D8:1E:C4:C4:05:5C:67:3F:F5:71:CC:AD:07:C3:A6:99:10:5E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421439C2041CC53E7EF78B70D10635652
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:47:46 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 35781
IP: 194.88.150.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:9c:20:41:cc:53:e7:ef:78:b7:0d:10:63:56:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b5c7d81ec4c4055c673ff571ccad07c3a699105e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:68:88:fd:2b:ff:d7:e8:d0:cf:2a:60:00:0f:
d5:71:45:c9:80:cd:1f:70:c7:e7:d4:13:99:cb:c7:
15:60:45:3e:ec:6d:54:30:0a:c0:af:f4:35:a3:a7:
88:4f:34:a9:3b:21:0b:11:8a:cd:89:69:dc:18:a7:
a4:be:41:7d:ed:69:6b:21:fc:f5:bd:3e:5b:24:cf:
84:00:cb:7f:1e:1d:e1:a1:9a:67:b5:1e:d5:d2:94:
64:66:b2:00:0b:21:fe:a4:3d:a7:0f:05:fb:69:39:
8e:a8:2b:b3:ba:ed:8e:d7:31:3d:bc:de:b8:20:af:
b4:dc:cf:c6:f8:24:77:d4:19:57:19:4b:5c:cb:b8:
0e:dd:a5:08:6c:83:18:d6:c6:1f:39:45:49:f7:9b:
60:a5:6e:53:5b:ca:c5:32:5e:1c:28:74:ea:c6:d0:
90:2d:ed:d6:a7:f3:bf:71:fd:6c:d3:0b:de:81:ce:
e8:a4:ca:04:b0:4d:c7:32:77:64:e6:30:c2:d8:59:
76:2d:83:ee:a5:0f:86:bd:ad:95:79:ff:10:f7:38:
fb:02:a7:87:5e:77:72:a1:2f:06:d5:a3:af:95:82:
af:b2:74:5d:1c:d7:45:1f:c2:09:d6:71:a8:39:f2:
66:ed:29:45:bf:ef:3a:ba:7f:bf:45:7e:5a:d0:e9:
ed:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:C7:D8:1E:C4:C4:05:5C:67:3F:F5:71:CC:AD:07:C3:A6:99:10:5E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/672a2f-ac2b-4631-ab3d-c2bc1451f271/1/tcfYHsTEBVxnP_VxzK0Hw6aZEF4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.88.150.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35781
Signature Algorithm: sha256WithRSAEncryption
6c:46:48:d7:99:35:bf:c5:60:29:c8:b3:0e:70:9a:32:cd:f5:
8c:d6:65:6d:6b:0d:b0:a5:29:67:70:73:d9:d1:e7:9c:b3:16:
b5:2f:c9:58:34:33:1f:9c:c5:a1:6b:6d:c0:c1:62:b3:36:98:
83:dc:dc:af:23:69:5e:3f:2d:fd:b5:f4:ac:c3:32:2b:37:09:
44:87:6b:bb:1e:ad:36:87:e1:0c:cb:83:81:61:ca:01:56:4b:
ba:1b:50:31:5d:c5:fd:58:2f:0e:9d:75:42:70:4a:2b:f5:50:
96:a8:2d:46:5c:9b:73:e7:2f:3c:d4:11:cc:45:62:12:da:7a:
2b:df:31:b0:f2:e4:a9:21:c6:ab:5d:7e:c2:cd:e4:b0:59:2a:
20:61:da:0a:8b:ef:fd:c1:e6:98:9f:db:b3:10:55:11:ed:88:
72:62:be:8e:e9:43:06:7f:97:64:bb:d1:30:36:61:b4:c3:07:
df:71:73:7b:18:ba:e7:46:60:db:b3:31:d5:a0:e0:f0:b9:ad:
63:7c:4d:ee:f8:20:b0:ff:86:e5:be:46:3e:9f:6a:3e:0b:2f:
5a:c7:59:b2:1c:d5:06:95:a7:b9:f4:59:56:40:23:38:85:c2:
7e:77:86:50:00:72:b4:21:6b:8b:dc:3a:93:09:df:c3:c3:ac:
98:4a:91:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:50:33 2025 by rpki-client