Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/S-iWpBlThdS5S3KVmIzPv6ismcU.cer
File: S-iWpBlThdS5S3KVmIzPv6ismcU.cer (raw, json)
Hash identifier: +YjQSfxIjwZSk0B/NL7M5svQZxK25Q2X4tJucAiW0Uo=
Subject key identifier: 4B:E8:96:A4:19:53:85:D4:B9:4B:72:95:98:8C:CF:BF:A8:AC:99:C5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B1BCCA43919093A5A726A4911537BE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:03 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 205052
IP: 185.231.196.0/22
IP: 2a0c:7900::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:bc:ca:43:91:90:93:a5:a7:26:a4:91:15:37:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4be896a4195385d4b94b7295988ccfbfa8ac99c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:07:70:7a:02:73:39:91:45:9a:c8:10:a5:fc:
35:cc:16:32:42:68:76:10:f4:81:16:ed:8e:a9:e1:
ca:e2:e9:d0:70:62:2a:fb:ee:52:48:4e:dd:a5:8f:
28:f3:c7:ae:14:34:01:5c:6d:e9:b2:36:14:1f:9a:
10:c9:4c:3e:76:33:bd:8c:3a:57:3c:61:c8:88:1d:
e5:18:8d:d6:14:5a:6d:d1:d8:29:b2:e2:ff:28:8e:
f3:bb:63:df:c0:5b:9e:e7:f8:d3:88:a2:2f:bd:15:
e6:89:f5:b4:77:cf:c0:ec:11:fc:95:26:1c:bb:82:
d7:f2:4c:3f:ea:09:17:59:a4:e4:de:8e:26:a7:2d:
c1:44:2e:20:c8:c5:f8:40:0e:64:c4:da:8a:72:f4:
50:ff:95:71:bd:74:b4:81:88:6f:e6:55:ed:dc:61:
ea:38:e4:b5:c9:28:98:e0:9b:9f:3c:99:0c:e9:0d:
1b:59:f2:14:1d:b1:b6:cf:51:21:e9:9d:d4:a7:9a:
79:f7:c3:75:50:2b:97:0c:6d:1a:3e:24:63:92:49:
bb:e0:b7:6b:9a:ad:cf:b3:52:61:15:b7:37:e4:bf:
e6:53:50:7b:50:c3:cc:55:0e:60:9d:d7:e7:06:23:
27:20:aa:79:4d:e6:28:29:6f:88:a3:f2:8f:be:e3:
0d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E8:96:A4:19:53:85:D4:B9:4B:72:95:98:8C:CF:BF:A8:AC:99:C5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.196.0/22
IPv6:
2a0c:7900::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205052
Signature Algorithm: sha256WithRSAEncryption
6c:4c:7a:93:cc:e1:a7:07:34:5f:c8:b1:4e:cc:bb:f5:97:01:
90:2d:a3:9a:00:fe:37:5d:9f:cf:42:03:9f:12:13:3c:91:1e:
91:c7:48:63:67:f8:95:58:75:79:77:78:50:51:b8:d2:76:ea:
98:d6:e6:dc:9f:c7:48:24:99:a9:ee:17:5f:15:21:e1:4d:2b:
4c:2e:48:27:0d:bc:4d:4d:ff:14:19:17:c1:0d:92:3f:65:15:
87:dc:4b:3f:ce:82:f8:a2:a4:28:5a:b0:e2:b3:fa:b2:0a:01:
55:90:fc:b8:8c:6d:58:17:53:21:8f:d3:73:3f:ae:0e:a2:31:
3d:87:dd:b6:b9:da:63:9f:8e:a9:b2:1b:12:d7:fa:1b:fb:30:
b1:93:5b:a8:37:7e:d7:14:be:38:40:4a:27:f9:4c:1a:84:2f:
8d:14:cc:4e:3a:f8:b9:42:31:71:36:b7:ec:55:d8:de:8c:32:
48:10:8a:9e:29:d4:89:21:05:07:4b:6c:d7:53:b8:c9:e2:d9:
c4:90:a4:6e:4d:58:47:78:62:b5:99:03:97:68:cb:94:d3:97:
04:c5:c5:2b:7d:20:96:c5:91:80:6a:2a:b5:4a:b9:6a:5f:bc:
cb:3b:42:4f:60:12:83:57:24:ea:9b:0e:0c:ef:c8:06:40:6c:
ae:d9:c7:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 06:52:06 2025 by rpki-client