Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer
File: XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer (raw, json)
Hash identifier: eV4Dt8UoS47ehFEsua92OOw5YeiuRVP5SoDvNK4ITbU=
Subject key identifier: 5D:D2:3C:7A:C6:E6:82:FB:C5:3B:E1:A0:E9:31:8F:6C:CA:E7:19:3D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194214417431AF45A1210CD387A6FC7DB0F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:18 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 57860
IP: 185.129.60.0/22
IP: 2a06:d380::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:17:43:1a:f4:5a:12:10:cd:38:7a:6f:c7:db:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5dd23c7ac6e682fbc53be1a0e9318f6ccae7193d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:98:29:e3:e5:50:6d:c0:cc:5e:c8:97:c2:be:
3b:7a:02:fc:67:15:22:90:00:6f:b1:d3:d7:7c:17:
5a:b1:c9:6f:67:e1:e0:77:79:4a:5c:27:01:99:17:
1f:20:a4:de:b7:27:0d:7c:99:1c:90:3b:ab:7d:91:
10:c5:8f:03:37:a6:47:16:52:d4:12:88:61:78:e0:
6f:89:37:e3:66:72:4a:25:4d:c8:76:1c:01:06:b3:
2e:66:1a:98:aa:3b:f4:15:fb:09:1e:62:68:65:b9:
06:c7:e9:0a:f0:0a:f8:ba:86:72:20:e1:4c:18:86:
5c:c7:c3:81:b6:40:be:fb:2e:be:b9:ea:27:70:b7:
31:88:1e:9c:dc:db:b1:00:53:40:d1:09:85:4d:4e:
9b:a1:e3:47:31:42:83:3c:c3:37:84:91:b8:bb:42:
13:fa:50:41:44:91:ef:d7:bf:d9:8f:35:1f:3f:20:
82:86:f3:7e:f1:49:08:ca:ff:03:e0:40:f8:6f:77:
fb:87:1b:6d:21:ce:06:9d:c3:0e:ca:3b:da:9a:f6:
d0:ff:4a:a7:0f:81:e9:64:b2:b1:c6:39:0d:19:aa:
58:3c:1d:e9:d3:1c:ce:36:87:06:3a:21:14:2f:e4:
73:6d:20:98:0f:11:07:b1:e6:6a:e2:95:70:0f:70:
48:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:D2:3C:7A:C6:E6:82:FB:C5:3B:E1:A0:E9:31:8F:6C:CA:E7:19:3D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.129.60.0/22
IPv6:
2a06:d380::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57860
Signature Algorithm: sha256WithRSAEncryption
05:69:88:87:2e:10:4b:9e:44:08:1e:8b:6a:c7:32:30:d3:6f:
d0:e8:f5:36:64:67:f6:98:fb:17:cf:05:97:4c:f8:90:07:34:
69:87:4d:20:33:39:fc:09:61:13:cf:bf:3b:07:45:18:07:57:
46:10:8f:1f:ff:93:be:6c:49:ec:23:c6:5e:53:e5:ad:06:b1:
d0:20:1d:89:99:35:60:71:a8:61:76:e4:8a:84:e6:17:cc:7b:
8d:21:9a:a1:45:54:57:c1:6a:aa:d4:74:fe:ed:15:5f:a1:70:
2a:db:87:2a:8a:ec:c8:95:bf:29:15:1d:30:94:b0:a5:13:17:
16:14:2e:b0:e3:32:6b:6e:ba:58:5b:17:41:52:51:5a:b6:31:
75:03:c5:53:73:4a:a4:40:0a:11:b6:1a:c7:5d:a8:8f:50:2e:
46:a9:cc:fc:7f:79:78:2e:31:eb:60:e1:5d:34:e4:97:d1:24:
7c:66:47:2b:24:0f:58:b5:c9:fd:b9:6d:db:18:a4:10:56:b7:
5b:70:da:92:f9:20:10:44:09:ed:ca:29:2a:17:96:84:c1:38:
53:dd:d5:08:e7:c3:bc:8c:54:a4:b1:12:f8:f7:10:b1:38:f9:
54:69:9d:ae:7e:13:65:fc:f3:df:5b:cd:31:52:86:70:6e:6a:
6e:7e:9d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:14:11 2025 by rpki-client