Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/R5JYOrQ38LO9cjKmnAHHFqkRdps.cer
File: R5JYOrQ38LO9cjKmnAHHFqkRdps.cer (raw, json)
Hash identifier: Mv1o/l9UYUXqiGDb6EyIEypkBHv6lBFisLhsegRX6A4=
Subject key identifier: 47:92:58:3A:B4:37:F0:B3:BD:72:32:A6:9C:01:C7:16:A9:11:76:9B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9FF83F204F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/36/a35f2b-6f3b-46fc-89de-5d6c76759a0b/1/R5JYOrQ38LO9cjKmnAHHFqkRdps.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/36/a35f2b-6f3b-46fc-89de-5d6c76759a0b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 06:53:05 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 199086
IP: 91.193.72.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 687064686671 (0x9ff83f204f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 06:53:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4792583ab437f0b3bd7232a69c01c716a911769b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:f0:6a:9e:be:0c:14:c1:7e:e9:28:95:b9:3c:
47:fa:71:c3:e7:fa:f0:72:76:f4:a7:17:1c:1e:bb:
44:72:7b:56:70:4d:22:6e:0a:4d:0e:dd:41:da:30:
2c:f4:7d:f9:3c:9b:82:3b:0e:59:0e:c0:df:39:fc:
eb:ab:3e:d1:16:95:f0:78:40:04:fd:d0:1c:a4:33:
dc:11:22:74:86:52:62:21:31:56:4a:e2:45:5f:6b:
00:e4:88:69:e7:47:e4:96:06:3e:d2:11:be:26:9b:
a2:f4:31:dd:be:ba:6d:d0:1d:ef:c3:9a:ec:5a:a9:
52:34:e3:6a:f4:6f:15:33:6f:06:77:73:71:c0:cf:
36:50:b2:ff:23:2e:f6:d6:35:cf:c5:23:6c:b5:44:
e0:f5:8d:ab:bd:18:a1:00:ec:c4:bc:ff:ad:73:db:
83:92:24:13:d9:87:fb:1a:a2:44:63:dd:f2:11:06:
8c:6e:f3:4a:a6:b6:1c:97:e4:aa:be:7b:fb:26:82:
86:5a:a7:1b:a6:00:53:04:35:c1:02:69:8b:d9:76:
30:f4:60:f0:c1:aa:32:94:33:25:51:79:47:45:a8:
37:4d:9c:92:e0:92:39:04:21:a8:50:d1:23:e1:e9:
7f:e6:48:a3:f2:40:5b:36:63:4a:a0:5a:07:c3:30:
9b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:92:58:3A:B4:37:F0:B3:BD:72:32:A6:9C:01:C7:16:A9:11:76:9B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a35f2b-6f3b-46fc-89de-5d6c76759a0b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a35f2b-6f3b-46fc-89de-5d6c76759a0b/1/R5JYOrQ38LO9cjKmnAHHFqkRdps.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.72.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199086
Signature Algorithm: sha256WithRSAEncryption
8f:d9:54:ed:bf:b0:72:22:63:ac:cb:3e:90:05:5f:2b:c1:a3:
f2:ea:8a:64:69:e2:24:42:fa:ed:2e:6f:41:c4:15:c4:5a:be:
a9:dd:49:90:1a:40:9e:2b:ee:3f:fd:d9:78:51:c3:f4:09:12:
14:07:bd:2c:29:7e:f3:32:8d:ef:8a:89:37:c8:e6:de:6e:3e:
ab:f5:97:11:ab:ca:f4:af:20:0d:a3:21:78:02:6a:68:fc:a7:
36:53:12:dd:d5:9e:3b:80:26:bd:96:f1:05:98:3a:ef:33:42:
c0:a3:11:c1:c3:03:73:28:1d:58:83:99:a1:1a:3c:45:81:34:
cc:3f:29:fd:86:c9:c0:17:30:4b:05:27:14:a3:4e:de:94:f4:
e4:7f:d4:cb:8b:d9:de:fb:5d:3e:ca:0c:d5:26:c5:f2:a0:4d:
20:e9:e5:59:4a:96:0b:71:e8:9e:76:7f:55:1c:f7:aa:9c:ca:
a8:bf:33:dc:e3:34:2d:94:17:b7:f8:7e:17:7f:d9:b4:cd:6d:
11:a9:e8:ec:bc:17:ed:46:54:f9:95:42:2a:63:94:25:68:ea:
fb:f3:76:2d:19:c9:59:bd:8b:18:14:d1:ac:c5:c1:10:54:fe:
af:ed:64:fa:55:77:87:91:51:ed:d0:ed:a6:5e:6f:f8:d3:a9:
ab:6b:18:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:41:18 2025 by rpki-client