Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer
File: XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer (raw, json)
Hash identifier: moq2WILUGn2UjWcL8xNsnc3gLfUfaFTBZLD5PFztsCc=
Subject key identifier: 5E:95:FD:FD:28:CD:C0:3D:89:D2:14:E4:AD:3A:6C:5F:B3:EB:AC:BF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194274881796BB48AB3577947CA93096D02
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:50:50 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 21350
IP: 80.244.160.0/20
IP: 95.175.32.0/19
IP: 185.106.128.0/22
IP: 2a00:dc20::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:81:79:6b:b4:8a:b3:57:79:47:ca:93:09:6d:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:50:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5e95fdfd28cdc03d89d214e4ad3a6c5fb3ebacbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:31:f8:b9:7b:88:fd:2b:14:45:32:04:6a:bb:
23:de:31:97:11:5a:3b:ce:64:2e:b9:60:e6:68:de:
bd:dc:d6:90:3b:5c:cc:89:e2:3d:91:7d:65:74:e9:
69:97:32:8d:a5:51:cd:86:47:1a:eb:c3:ce:d2:e4:
2f:3b:f7:29:14:d0:be:1b:7e:82:b7:7c:81:c8:04:
6f:b9:12:45:3e:a9:59:68:93:b2:00:87:64:fe:27:
2a:63:c4:8b:ce:6c:b9:1e:19:44:c6:c2:70:00:75:
67:2e:d0:06:33:db:2f:7e:f3:a0:2c:9b:b8:80:6d:
b9:8b:48:ae:a4:89:14:06:4c:91:ed:64:c0:62:4c:
14:f8:2a:25:1e:cc:9d:46:99:70:b4:b8:97:a2:83:
d9:f7:00:ba:fc:be:c9:62:c8:68:79:3e:0b:37:3b:
bd:2f:f1:13:f5:3e:3e:3a:6c:dd:dc:a6:cb:4b:e9:
3d:7b:27:ae:78:75:e3:87:a0:38:ee:91:06:83:81:
d3:fd:5f:57:92:f2:17:33:ab:18:8f:35:da:5c:5a:
c5:e5:e5:9a:76:21:fe:be:04:93:37:3c:01:88:e4:
d0:c7:79:60:3f:82:eb:3c:b7:e3:93:6e:43:d1:9d:
ae:18:4a:d1:b6:65:08:b0:67:13:90:df:b9:05:ec:
ab:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:95:FD:FD:28:CD:C0:3D:89:D2:14:E4:AD:3A:6C:5F:B3:EB:AC:BF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.244.160.0/20
95.175.32.0/19
185.106.128.0/22
IPv6:
2a00:dc20::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
21350
Signature Algorithm: sha256WithRSAEncryption
9d:19:24:1b:5f:e4:97:00:d1:39:54:97:d4:c1:34:95:a3:6d:
ea:e3:de:e6:92:53:88:b9:63:26:44:0b:6e:02:1f:1d:13:85:
59:f6:42:8f:45:24:d2:16:53:ab:0f:98:d9:c9:90:bd:43:81:
43:df:0a:dc:a8:46:da:4a:b4:f6:6f:88:c4:54:a8:18:7b:41:
65:0a:c6:ca:e0:93:6e:9c:53:f7:81:ad:55:bf:c5:32:a1:28:
55:44:d8:55:67:f7:b9:8b:46:73:a7:3c:20:a3:93:e3:a7:b7:
e4:8d:4e:31:b7:9a:7b:9b:36:59:ca:9c:db:c3:52:06:58:d7:
93:e0:b9:12:12:67:0c:43:66:0e:8d:e8:51:7e:06:d3:7f:12:
76:77:1c:ad:ed:01:c7:e2:04:bd:93:d5:65:6a:e9:9e:93:0f:
38:0d:5d:8f:07:10:bb:65:42:f2:7b:8c:52:db:70:88:a3:d2:
b0:c2:02:70:cb:1e:55:6d:03:02:0b:64:2c:fa:98:53:b2:fe:
68:25:b0:7a:3c:57:87:10:28:a8:ba:5b:ff:05:13:dd:ef:41:
a6:5a:a4:15:85:ff:db:f4:d2:35:ca:94:74:a8:1b:4c:58:a7:
0a:03:0a:24:2c:84:32:6a:54:a3:95:99:ee:3a:04:34:29:fc:
be:7f:f6:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:28:54 2025 by rpki-client