Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VnrJvwvpHgpIZk7ItqZ3CVeiECA.cer
File: VnrJvwvpHgpIZk7ItqZ3CVeiECA.cer (raw, json)
Hash identifier: XcWFCIN0l6g3KKGxeHn+ohslMhq55QBNWTgn+ATXlxo=
Subject key identifier: 56:7A:C9:BF:0B:E9:1E:0A:48:66:4E:C8:B6:A6:77:09:57:A2:10:20
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194214435938F144399ABBA97FF4D1971C5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a8/c51d08-8575-4bfb-af6e-01889cc03eba/1/VnrJvwvpHgpIZk7ItqZ3CVeiECA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a8/c51d08-8575-4bfb-af6e-01889cc03eba/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:25 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 58208
IP: 5.42.152.0/21
IP: 91.216.120.0/24
IP: 185.118.68.0/22
IP: 2a01:45c0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:35:93:8f:14:43:99:ab:ba:97:ff:4d:19:71:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=567ac9bf0be91e0a48664ec8b6a6770957a21020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:6b:34:24:73:ee:31:07:3c:8d:a8:6f:ec:7b:
3c:e7:7a:4b:ff:97:70:83:da:2f:a5:66:b7:3b:41:
6f:6f:46:be:2c:29:0a:87:98:a9:6a:b0:f2:b5:e3:
45:91:99:9f:58:f5:28:3f:49:41:5a:59:90:d5:d3:
7a:0b:09:ae:17:a9:14:82:d6:08:d7:cf:4f:2c:59:
33:db:07:93:b5:b0:3b:c4:a4:54:f7:ab:1b:97:7a:
cc:17:e4:10:67:0b:09:90:58:b3:f9:cc:8b:e4:ea:
69:c8:79:0a:cd:ef:1f:fd:fd:7f:74:be:55:ad:8a:
40:b4:fe:c2:fd:98:08:6c:a1:e5:86:cd:2e:dd:d7:
fb:2c:16:bd:d7:dd:9b:b9:bc:35:70:80:13:c6:92:
65:d7:ed:d7:fe:0b:47:3d:24:ee:c0:3c:bc:9e:39:
43:35:5c:86:5b:33:bf:1c:63:d1:2b:45:6e:b8:f2:
11:fd:d0:cb:43:46:0f:ab:36:fe:6c:cd:60:aa:59:
ec:86:0e:87:97:36:67:68:d3:51:64:f4:92:0e:c2:
26:bd:82:89:16:76:df:1d:3a:d2:b2:6e:ec:fc:c2:
83:cb:99:ef:bd:c6:24:3c:98:7f:b4:6c:dc:ad:8b:
b1:7e:ee:46:6d:67:9e:ff:8a:f8:e6:d3:34:64:c2:
84:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:7A:C9:BF:0B:E9:1E:0A:48:66:4E:C8:B6:A6:77:09:57:A2:10:20
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c51d08-8575-4bfb-af6e-01889cc03eba/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c51d08-8575-4bfb-af6e-01889cc03eba/1/VnrJvwvpHgpIZk7ItqZ3CVeiECA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.152.0/21
91.216.120.0/24
185.118.68.0/22
IPv6:
2a01:45c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58208
Signature Algorithm: sha256WithRSAEncryption
a2:1c:86:40:22:93:81:ad:36:f4:6c:c5:9e:e5:a4:90:71:66:
75:2b:65:5a:7f:e1:66:cf:0a:87:8c:d7:67:13:5f:8a:7e:43:
98:ac:a9:26:09:3a:0c:94:f3:fe:b4:18:e1:b8:3f:06:f7:f6:
83:fd:8e:7a:9d:06:94:2d:f6:51:b6:3c:00:e8:78:27:23:8c:
f0:c2:a7:72:0a:c2:83:80:dc:95:08:ca:09:63:60:26:91:de:
72:7d:bd:ca:a5:ce:d3:dc:9e:33:47:13:5c:78:75:ec:64:b8:
85:09:43:7b:ee:7c:1b:d5:dc:bf:86:34:7c:67:07:6b:0f:40:
51:ac:c2:34:31:bb:7e:54:74:63:61:f8:60:80:d5:ac:d9:30:
2c:4b:33:19:2e:18:40:37:3b:90:8f:d1:98:24:cc:b6:b0:a4:
fd:1b:05:7b:5f:66:94:77:00:ee:64:42:0a:8b:1c:22:c6:2e:
16:d7:b2:4e:cd:f0:8c:e3:c3:70:d6:f2:c6:0b:7b:86:e6:5c:
d5:f0:c5:22:11:72:37:62:6a:bd:75:1a:15:f1:38:94:a8:eb:
e2:33:eb:22:b3:2d:5c:db:58:57:e9:91:01:32:a3:7d:ee:71:
9f:4b:67:a1:5e:bf:43:e6:9e:b6:c8:7f:59:f8:6c:9f:31:93:
97:73:29:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:56:19 2025 by rpki-client