
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76cMuEnjg3RRvXmvfcfgNZY-YEM.cer
File: 76cMuEnjg3RRvXmvfcfgNZY-YEM.cer (raw, json)
Hash identifier: xCnrG4fdJe2cqX0wkDCPxGTpyBWygaLOB3XP2R91DgM=
Subject key identifier: EF:A7:0C:B8:49:E3:83:74:51:BD:79:AF:7D:C7:E0:35:96:3E:60:43
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942143835162808724EFC82D9E9DD13A27
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:47:40 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 34916
IP: 85.204.193.0/24
IP: 86.104.231.0/24
IP: 86.105.204.0/23
IP: 86.105.226.0/24
IP: 86.106.27.0/24
IP: 89.35.250.0/23
IP: 89.42.118.0/23
IP: 89.44.238.0/23
IP: 193.202.126.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:83:51:62:80:87:24:ef:c8:2d:9e:9d:d1:3a:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=efa70cb849e3837451bd79af7dc7e035963e6043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:92:f9:31:02:be:a4:c1:37:68:6e:a1:35:5e:
1c:04:c1:a4:c0:5b:cd:0c:d8:04:e7:c6:7c:c9:98:
9e:31:fe:74:51:db:86:cb:c7:79:f8:a0:d7:40:b4:
dc:c4:04:fc:ad:3d:07:23:c1:96:d5:f4:62:6f:ce:
8e:34:cd:91:7f:62:e6:c7:35:5e:47:79:75:5a:47:
29:9a:92:79:0c:29:68:be:c6:19:74:22:01:4f:1f:
2e:fe:16:60:c4:bb:81:3a:e8:3a:5c:c2:5b:c4:09:
7d:10:03:7e:b7:12:04:1b:e6:72:a1:d5:04:49:36:
52:a5:07:80:1c:ac:c2:3d:7b:62:a7:82:99:9c:2c:
f3:7e:09:16:fa:35:c4:91:e5:60:d3:79:3a:43:8d:
e9:8b:2d:7f:8c:b8:bd:bb:f2:bc:6e:29:fb:51:07:
40:ad:75:d7:39:90:59:b0:c8:11:c5:07:43:32:db:
04:8c:58:88:d3:72:72:cb:35:57:8a:d9:cb:78:67:
93:56:04:75:3e:23:e2:f0:70:fa:4b:57:76:47:ed:
cc:4d:20:2c:67:81:5f:f4:49:99:e6:6b:f2:dd:6d:
08:da:06:55:81:8a:91:45:41:5f:9e:2a:05:c1:52:
06:0e:ce:3c:3f:44:5d:37:5a:1e:ec:62:0d:08:70:
67:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A7:0C:B8:49:E3:83:74:51:BD:79:AF:7D:C7:E0:35:96:3E:60:43
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.193.0/24
86.104.231.0/24
86.105.204.0/23
86.105.226.0/24
86.106.27.0/24
89.35.250.0/23
89.42.118.0/23
89.44.238.0/23
193.202.126.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34916
Signature Algorithm: sha256WithRSAEncryption
97:bd:84:48:00:d6:c6:f5:7e:46:ea:90:4a:c1:c6:cd:f3:af:
91:94:04:e2:de:0c:64:51:74:9b:cf:ed:4e:9d:2c:4e:c8:4e:
d2:74:99:da:c6:3f:c4:53:10:9c:0e:15:3a:2d:6f:f1:92:75:
10:b6:b8:db:df:f5:48:ad:01:d3:70:82:3b:0b:45:ff:38:f2:
e5:0a:07:28:c3:6e:cf:33:8c:ea:15:76:11:1e:4b:5f:de:a6:
d0:f0:7e:81:c5:a9:e8:44:83:ab:58:ae:40:c8:0c:90:d2:c0:
cf:a1:81:b0:71:83:ab:3c:9e:48:28:09:39:03:6c:ec:fe:83:
3e:cc:52:01:81:1c:51:be:46:15:0e:d2:6c:1a:c1:b6:bf:10:
80:1a:67:e5:2b:80:4f:d4:c1:95:8d:f9:5c:45:2f:b5:66:de:
0d:90:8f:4e:7f:31:bf:cb:5a:52:44:a2:8e:55:d5:44:95:81:
5d:cc:20:c3:0d:53:cc:70:bb:75:27:6c:57:16:ae:8e:52:5f:
3b:0f:04:12:0d:14:5a:6d:24:f4:17:ed:f1:c0:4c:64:3a:b1:
72:a6:a4:8c:18:48:4e:60:b4:57:2f:c4:63:df:dc:6e:a5:cb:
45:0a:ba:21:bd:3b:82:88:58:e9:f4:f1:cd:82:a6:28:5b:d7:
d0:a0:17:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:48:26 2025 by rpki-client