Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer
File: Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.cer (raw, json)
Hash identifier: axD0a4zfHrdvC/QMDkqTvvL29e3a+U8cQYY/SJQNzmY=
Subject key identifier: 36:18:BE:04:41:7A:6B:CB:9F:33:94:2A:63:15:18:BE:53:3F:FA:F4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B3CA809788077929DEA54D27AE6667
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:49:10 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 42346
IP: 83.137.24.0/21
IP: 109.106.32.0 -- 109.106.43.255
IP: 185.93.216.0/22
IP: 185.127.172.0/22
IP: 194.63.148.0/22
IP: 195.60.192.0/22
IP: 212.120.32.0/19
IP: 213.213.160.0/19
IP: 2a00:5480::/29
IP: 2a02:ab0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:ca:80:97:88:07:79:29:de:a5:4d:27:ae:66:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3618be04417a6bcb9f33942a631518be533ffaf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c0:1b:64:8f:8c:29:43:39:5a:9a:45:d3:95:
80:99:ce:10:6c:d4:04:46:28:04:93:88:39:a1:a9:
fa:01:70:98:cc:e6:9f:1f:4e:81:bd:db:d1:44:7a:
18:f3:4c:d2:3d:a7:a5:9a:d7:6b:53:1e:bc:c5:ed:
c8:7b:41:68:d6:e9:5d:b5:02:b5:a9:e8:a4:1f:d7:
d1:4b:74:58:01:3b:99:a0:a5:13:99:34:49:c4:a9:
a8:19:e8:95:2b:c1:fb:f9:1d:1e:bd:06:0e:fa:e9:
7a:44:72:66:b3:bc:c4:41:8c:8e:36:08:90:74:56:
06:a7:a4:1e:de:98:13:3d:02:c3:42:a7:a5:46:aa:
c4:bf:95:33:dd:c9:fb:f8:b0:b1:cd:ba:c7:a9:a2:
d4:89:1a:d0:42:7c:1c:a9:a9:dd:46:9e:1c:90:43:
54:c9:be:40:95:51:77:98:17:b3:f7:b5:49:62:d7:
d9:6f:3a:0a:af:50:c2:f1:88:ea:e2:33:15:79:30:
53:bc:34:6f:d0:d1:88:49:69:a0:a9:a9:65:fa:c7:
d0:88:86:3a:c5:45:6c:cc:4a:bc:2f:87:73:36:df:
25:f7:9e:2b:55:f5:22:bc:ba:46:65:de:93:96:87:
54:cc:4f:81:6e:a6:0f:57:08:59:84:90:a8:53:e3:
43:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:18:BE:04:41:7A:6B:CB:9F:33:94:2A:63:15:18:BE:53:3F:FA:F4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/2061d9-649a-4136-8c93-2268e97a8bc1/1/Nhi-BEF6a8ufM5QqYxUYvlM_-vQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.137.24.0/21
109.106.32.0-109.106.43.255
185.93.216.0/22
185.127.172.0/22
194.63.148.0/22
195.60.192.0/22
212.120.32.0/19
213.213.160.0/19
IPv6:
2a00:5480::/29
2a02:ab0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42346
Signature Algorithm: sha256WithRSAEncryption
89:aa:f7:ad:a7:33:49:9d:e9:36:37:68:a4:a6:6c:0b:9e:e3:
6e:ee:b7:29:1e:ad:a1:35:72:c0:ef:50:48:59:bd:3f:a2:7c:
f5:53:e6:c6:23:0b:74:f8:c2:9e:16:06:53:df:47:e9:71:b5:
b2:a8:43:2c:be:68:da:e8:64:39:ee:25:98:ca:34:4c:83:75:
b8:6e:8e:d6:21:cf:f5:19:6e:08:30:4b:6f:44:69:da:f5:c8:
db:ec:5e:6e:6e:98:9d:1e:ef:e8:37:f4:ce:af:fd:31:73:d0:
a5:93:80:d8:9a:31:52:5a:ab:64:96:ad:59:71:85:02:d9:07:
fc:37:65:41:4f:c3:50:80:3a:91:f4:cc:b1:93:f9:e1:52:ff:
c0:70:38:38:5a:e1:1c:3d:c1:64:e9:54:d5:1a:43:a9:4d:03:
f3:94:24:94:79:41:c6:74:0f:df:5e:a2:ef:9e:a4:8e:38:dc:
61:67:e3:b5:6c:8e:af:d7:f0:76:db:7d:91:62:a3:1b:87:c4:
de:3a:6f:f7:83:00:ca:26:e7:74:f1:3e:8a:c1:2f:f0:8d:b7:
d1:7f:94:bd:35:ef:cc:32:13:a1:f8:44:f3:e8:ac:1f:d4:9d:
0c:86:4a:f4:47:66:f2:85:1f:fa:7f:f5:1a:d9:dd:55:79:ad:
8f:78:48:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:37:35 2025 by rpki-client