Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FZFv8Lt4zOSjfEK8FrPuusePYlA.cer
File: FZFv8Lt4zOSjfEK8FrPuusePYlA.cer (raw, json)
Hash identifier: bnNbRZAiExxU6MzXcd1rnnlg1Cj4znam0u1mpncuNMk=
Subject key identifier: 15:91:6F:F0:BB:78:CC:E4:A3:7C:42:BC:16:B3:EE:BA:C7:8F:62:50
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018BD3EEB990E9A38E243673E5FDB461B7B9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/83/1c8b45-829b-49fb-ba5b-eb30da51dcb7/1/FZFv8Lt4zOSjfEK8FrPuusePYlA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/83/1c8b45-829b-49fb-ba5b-eb30da51dcb7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 15 Nov 2023 17:01:59 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 35153
IP: 185.212.136.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d3:ee:b9:90:e9:a3:8e:24:36:73:e5:fd:b4:61:b7:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Nov 15 17:01:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=15916ff0bb78cce4a37c42bc16b3eebac78f6250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c7:52:80:48:f9:97:44:5f:ed:a9:4a:5c:0b:
15:07:72:a3:fd:c6:02:62:64:ef:9b:0d:e1:99:74:
db:7e:74:59:4a:4d:3a:fa:25:d5:50:06:72:96:c4:
be:b2:37:d1:ab:c5:ab:39:e2:fe:a3:3d:92:1e:34:
0a:87:95:20:20:c1:36:2e:32:b8:7d:ad:49:68:0f:
0d:51:fb:7f:43:70:bd:cb:c0:44:7f:62:a9:a6:c1:
a9:17:61:3f:6f:a9:2d:0f:32:53:8b:76:92:aa:ab:
e9:c6:5b:a2:70:51:74:a7:e7:68:7f:9c:ad:4e:89:
9a:d2:22:82:3f:ee:ea:f3:c3:dc:f3:a9:c5:dc:2a:
0c:c3:20:56:f3:5b:0a:84:ee:e7:e0:64:de:1c:6f:
e1:fd:28:a6:94:64:be:af:82:47:89:ec:41:d3:3d:
b1:fb:4f:0e:00:ac:fc:61:5e:50:32:ee:d1:42:79:
77:60:15:7a:cb:b9:07:38:97:a0:5d:67:61:83:0c:
37:9c:0d:24:0b:78:7d:2f:fe:e3:1a:20:be:a4:97:
be:7f:bf:01:f0:1e:39:b1:38:53:b3:cd:70:e3:4c:
ff:4d:08:d9:fe:5c:f0:2f:1d:7f:a2:f7:37:7b:bd:
a0:af:54:30:d0:1f:6b:eb:6f:26:44:90:c2:92:f9:
3d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:91:6F:F0:BB:78:CC:E4:A3:7C:42:BC:16:B3:EE:BA:C7:8F:62:50
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/1c8b45-829b-49fb-ba5b-eb30da51dcb7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/1c8b45-829b-49fb-ba5b-eb30da51dcb7/1/FZFv8Lt4zOSjfEK8FrPuusePYlA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.136.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35153
Signature Algorithm: sha256WithRSAEncryption
94:6c:3e:3e:d4:85:3b:a2:da:8d:a6:2a:85:03:1a:c5:5a:87:
7e:45:9e:cd:21:13:0b:e6:b5:4d:48:e2:f7:44:8b:8c:14:f5:
3c:9c:37:c2:05:7a:8b:80:a8:85:55:50:5f:85:ff:91:a5:36:
4a:28:69:67:08:cf:90:dd:d0:69:e7:77:bb:6d:31:e5:98:dc:
b7:32:e4:e9:94:1a:66:a6:0d:a3:51:3d:5b:c6:6a:45:3c:e3:
31:e2:8b:d9:cd:45:bc:9a:ff:59:f2:c0:ea:71:0e:69:2d:63:
f1:75:e6:38:3b:7c:9a:58:29:b1:91:bb:01:53:45:fc:0c:3c:
cd:d8:11:24:25:e3:c9:21:59:76:2f:ce:4b:53:cb:7c:1f:48:
29:31:ca:f9:a2:69:2d:bd:ec:05:e5:02:a9:43:5a:03:16:dd:
00:d0:2e:15:9e:72:30:53:e8:fc:31:62:26:53:59:d2:ab:4a:
a2:af:d2:04:e9:3c:90:cf:95:76:47:86:09:30:a1:e4:07:86:
06:4c:4a:06:e7:f6:95:76:14:81:5a:19:74:0e:74:1b:71:50:
52:49:4d:bc:62:7d:0e:4e:ea:00:2a:eb:7f:91:d8:68:cc:e8:
85:ba:4b:40:2b:02:a8:61:4c:a9:46:a9:36:7a:32:89:f9:c1:
a6:08:b6:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:48 2025 by rpki-client