Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer
File: UqXJDKkoMTvHDSaDuw9k1jKyc6E.cer (raw, json)
Hash identifier: iRFsosYutv80qExXH+3SEcuBh2366Sa6+mwSv92o/qE=
Subject key identifier: 52:A5:C9:0C:A9:28:31:3B:C7:0D:26:83:BB:0F:64:D6:32:B2:73:A1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B551DE48328FFBB31DA8EC9BECF8DC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:49:41 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 20902
IP: 46.229.0.0/20
IP: 80.73.96.0/19
IP: 80.88.64.0/20
IP: 109.239.160.0/20
IP: 185.76.40.0/22
IP: 194.0.184.0/24
IP: 2001:67c:2088::/48
IP: 2a00:1230::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:51:de:48:32:8f:fb:b3:1d:a8:ec:9b:ec:f8:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:49:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=52a5c90ca928313bc70d2683bb0f64d632b273a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f0:8a:7b:9c:17:66:55:03:50:bf:34:32:bc:
2b:72:65:e0:59:8c:8f:d1:f8:de:2c:cf:e1:ef:ed:
ba:b0:d1:5e:e3:0a:57:e6:2b:f4:e4:9f:87:af:bc:
fd:55:44:46:7b:c1:65:0a:3f:4f:1d:be:25:45:07:
01:91:3a:f9:43:44:15:9a:dd:cc:22:f4:3c:b6:43:
ef:50:b5:c5:1a:2f:22:9a:2e:89:f7:81:f0:5b:99:
5c:ba:de:bc:ad:3b:aa:74:1c:dc:1c:8b:ea:2a:03:
09:a3:a7:ef:d8:4b:94:0a:9a:d9:3a:e5:43:6f:ff:
59:06:5f:85:c7:02:1b:75:53:1a:74:f0:99:69:1c:
45:63:a3:46:d1:c7:6a:7b:eb:a1:9b:93:62:13:33:
12:78:b8:5d:9a:3e:8f:0c:70:36:eb:45:a6:78:0b:
7f:31:79:c4:9d:df:56:7c:1c:91:c7:10:20:94:c2:
06:17:72:91:68:b2:6e:8b:45:91:06:40:91:cf:fd:
0a:b3:8d:33:f2:a5:da:df:a4:e9:95:05:e7:15:80:
0c:fb:f2:2b:e5:6f:91:29:52:97:98:c1:b8:a2:15:
98:a9:c1:ec:30:30:25:5c:a2:65:17:44:fc:84:08:
4d:b8:a8:7b:d1:31:78:b3:15:e8:54:07:ac:f1:1b:
d7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A5:C9:0C:A9:28:31:3B:C7:0D:26:83:BB:0F:64:D6:32:B2:73:A1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/c4b7a0-1e50-403c-b24e-13ed633f922a/1/UqXJDKkoMTvHDSaDuw9k1jKyc6E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.0.0/20
80.73.96.0/19
80.88.64.0/20
109.239.160.0/20
185.76.40.0/22
194.0.184.0/24
IPv6:
2001:67c:2088::/48
2a00:1230::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
20902
Signature Algorithm: sha256WithRSAEncryption
7f:4d:be:89:f5:ba:05:a9:cb:07:e6:a0:02:5a:92:cb:1e:68:
22:af:21:15:e5:ff:4d:f5:e0:94:99:4c:65:71:00:31:f9:be:
18:2f:53:67:eb:18:21:cb:79:ae:e8:ea:be:5b:8b:e6:ca:a0:
fc:12:b9:46:f9:4d:70:8e:a8:51:e5:3d:b6:31:9e:95:8b:7c:
a9:59:9e:93:2f:2b:5c:ce:e1:c0:ac:5b:0f:97:82:8c:a5:4f:
12:2c:d6:12:46:e8:14:02:d9:64:47:14:d9:06:86:33:9d:55:
09:26:29:70:da:a3:87:43:c5:a8:9e:27:61:25:dd:f2:74:a5:
a5:a8:3e:82:90:b1:9f:ce:04:53:c5:c0:21:63:e3:65:ba:07:
6c:95:d1:78:c0:49:e0:fa:8b:46:aa:e5:f9:0b:19:b4:70:59:
cc:ac:67:d1:5a:64:86:f3:f5:8d:63:06:62:05:68:fb:6f:47:
1f:de:d5:ac:d6:9b:1e:ae:71:a8:05:ca:0f:cb:ac:0c:e7:8b:
a1:30:eb:28:33:49:df:b8:f4:d8:07:cc:03:71:b3:f6:1d:c9:
a4:12:a4:da:73:d9:57:cd:4a:e9:c0:a5:cd:bd:0f:ba:64:a1:
e1:56:bf:fc:d8:08:70:f6:4f:42:a6:75:fa:ca:8e:8e:64:e0:
f4:da:58:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:08:15 2025 by rpki-client