Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
File: 7kOBzgO6piUBmYDzeP5BuytmIbk.cer (raw, json)
Hash identifier: 636grcfCUHZo08ER7KcC/hlDQMWf0EsHwF61hjf0JoE=
Subject key identifier: EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FDC8827906CC990228074810B7E75A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:49:36 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 15897
IP: 5.226.192.0/18
IP: 5.229.0.0/16
IP: 31.177.128.0/17
IP: 46.106.0.0/16
IP: 46.154.0.0/15
IP: 46.221.0.0/16
IP: 81.6.64.0/18
IP: 149.0.0.0/16
IP: 149.140.0.0/16
IP: 176.54.0.0/15
IP: 176.216.0.0/14
IP: 185.11.12.0/22
IP: 188.38.0.0/16
IP: 212.65.128.0/19
IP: 217.31.224.0/19
IP: 2a00:1880::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:c8:82:79:06:cc:99:02:28:07:48:10:b7:e7:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:49:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee4381ce03baa625019980f378fe41bb2b6621b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f9:ea:09:40:67:80:19:c6:bf:4e:aa:87:01:
b3:f5:79:ab:32:c0:cd:11:f6:b0:bd:bd:38:ed:95:
2d:16:cf:d5:89:62:82:34:ef:35:26:b5:94:2c:d3:
a0:20:5a:8f:09:23:97:23:98:86:ca:5a:dc:e9:da:
ee:83:9f:61:f7:75:7d:3d:d7:1e:18:d4:80:22:f3:
3e:69:4f:ed:d0:bb:76:eb:f5:8b:c9:86:ef:d7:25:
7e:85:3c:af:85:ba:7f:33:73:8f:9d:77:75:15:9a:
22:69:ff:3e:e1:1f:c2:54:13:cb:2d:60:6b:f8:f8:
f5:1c:db:fd:b4:8d:a0:38:73:0c:46:54:9a:d9:c1:
ce:ae:85:3c:b7:61:d8:89:aa:ef:c6:02:0f:5a:2b:
2c:df:6a:9c:67:ad:6b:38:d7:bd:a8:2e:cd:b4:63:
e6:f6:cd:79:85:89:ab:f6:90:fb:f1:d2:ad:d9:b9:
83:b5:38:21:86:a7:e1:76:3f:36:ba:ff:7a:e2:db:
23:82:58:f4:5c:e5:2d:f3:3a:02:a9:02:c6:85:1d:
20:75:0a:33:39:04:a3:1d:e4:2a:77:cc:db:ac:56:
23:bc:d5:3e:11:71:d1:3f:17:5f:0b:9a:3f:6e:11:
4e:1b:da:aa:4c:22:01:26:3c:6e:52:46:8c:dd:5d:
ea:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.192.0/18
5.229.0.0/16
31.177.128.0/17
46.106.0.0/16
46.154.0.0/15
46.221.0.0/16
81.6.64.0/18
149.0.0.0/16
149.140.0.0/16
176.54.0.0/15
176.216.0.0/14
185.11.12.0/22
188.38.0.0/16
212.65.128.0/19
217.31.224.0/19
IPv6:
2a00:1880::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
15897
Signature Algorithm: sha256WithRSAEncryption
92:ac:9a:b7:b7:42:22:fc:33:16:88:14:6d:00:dd:a4:0b:63:
6c:e9:0c:a4:07:87:7a:b8:53:9e:96:2a:99:99:b1:4b:16:f8:
88:3f:57:2b:58:29:c7:5e:06:16:2b:6b:79:22:5b:19:1f:5d:
ee:77:3c:84:c7:2a:c5:7c:25:57:ac:78:b6:9e:ef:c4:48:a6:
9c:62:f3:1f:76:99:bd:81:ec:9d:84:43:03:9b:2e:6f:aa:01:
08:14:c5:e4:02:01:4f:d8:00:b2:a7:91:d4:f1:73:5c:ed:4e:
00:03:48:2f:45:4f:a7:6b:d4:d2:d4:e4:59:8e:71:06:8a:0a:
ed:4c:d3:b4:23:39:50:11:55:5b:25:1e:b4:ac:49:6b:fd:be:
05:bb:46:fb:0e:79:b5:38:7f:42:bd:44:9a:74:22:8e:dc:c0:
87:58:93:b7:1d:93:ae:23:28:64:70:e5:e2:c9:04:ab:1e:51:
41:0d:d9:5a:99:4d:02:b7:2d:e8:7e:22:e7:9d:56:15:96:3a:
4f:65:29:af:0d:84:37:ad:08:4c:05:93:5d:e0:d8:a3:b6:42:
1d:45:1e:2a:af:72:62:1a:b1:e8:39:69:16:3d:3f:b9:c1:50:
08:22:3a:ec:f7:45:db:e2:ce:0b:22:1c:a3:00:1f:31:32:91:
a1:90:38:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:21:36 2025 by rpki-client