Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.cer
File: ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.cer (raw, json)
Hash identifier: sOgXqM/I6uejOLRzamSZLcIhbESVCvcT9CXAVIqonR4=
Subject key identifier: 66:65:DD:97:66:5A:23:B1:B1:83:E2:23:82:2B:66:B5:AE:53:6A:2F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266B2E8BECDD28AF91103B05604F4736
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:49:06 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 8548
AS: 34079
IP: 5.198.136.0/21
IP: 81.87.0.0/16
IP: 83.137.208.0/21
IP: 83.138.32.0/21
IP: 89.207.208.0/21
IP: 185.224.232.0/22
IP: 188.92.136.0/21
IP: 193.60.0.0/14
IP: 194.66.0.0/16
IP: 194.80.0.0/14
IP: 195.194.0.0/15
IP: 212.121.0.0/19
IP: 212.121.192.0/19
IP: 212.219.0.0/16
IP: 2001:630::/32
IP: 2001:67c:128::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:2e:8b:ec:dd:28:af:91:10:3b:05:60:4f:47:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6665dd97665a23b1b183e223822b66b5ae536a2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ad:ee:34:70:5c:9c:f8:7e:17:1e:32:23:36:
5a:a2:ec:41:0d:8a:ac:f3:e9:59:cb:16:dd:91:fd:
68:c3:45:56:98:71:aa:4a:59:7c:21:f2:17:28:0f:
a6:83:69:40:a2:a5:ff:40:af:8b:a0:ed:0f:42:d1:
e9:81:81:19:8f:b5:16:ed:7e:cc:53:c8:94:9e:a5:
ad:bc:4a:b4:1e:8b:12:5f:9d:d8:21:4f:f8:e1:00:
c9:dc:c9:26:84:f1:d7:fd:1b:6c:cb:1d:d0:3d:df:
d6:32:35:bc:0f:4d:03:ca:dc:96:9d:f0:3c:92:a8:
ab:43:12:ee:c0:86:d6:26:96:32:35:25:62:dc:9c:
58:1c:64:4f:10:c4:74:42:26:f6:a3:2e:03:61:db:
14:23:de:eb:96:fb:21:b3:36:41:7d:62:fa:5c:d2:
6c:0b:71:63:e0:70:62:99:2d:3a:fb:d7:75:4b:d6:
70:a2:57:99:f0:bf:3c:eb:34:0f:3a:b6:9d:b9:f8:
b2:47:b7:6c:9f:c0:2d:a9:df:a0:f0:a9:0a:d1:a7:
fd:73:23:92:41:e3:4b:cc:6f:2c:7f:d1:7d:2f:01:
50:94:11:e9:77:ae:83:c1:69:24:f9:0c:b7:f1:ae:
9a:d4:26:8f:f8:c1:6e:58:ce:9a:8e:e1:c1:1d:11:
d4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:65:DD:97:66:5A:23:B1:B1:83:E2:23:82:2B:66:B5:AE:53:6A:2F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.198.136.0/21
81.87.0.0/16
83.137.208.0/21
83.138.32.0/21
89.207.208.0/21
185.224.232.0/22
188.92.136.0/21
193.60.0.0/14
194.66.0.0/16
194.80.0.0/14
195.194.0.0/15
212.121.0.0/19
212.121.192.0/19
212.219.0.0/16
IPv6:
2001:630::/32
2001:67c:128::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8548
34079
Signature Algorithm: sha256WithRSAEncryption
4c:44:5f:b9:87:14:56:b4:e6:51:12:d3:6c:50:e1:a3:79:8c:
7f:37:09:13:8e:0b:3c:bb:e5:db:5c:66:af:d9:9e:6d:b9:28:
90:9d:a3:9b:b0:1a:42:30:09:1e:dd:d2:ea:08:a1:34:ca:47:
f8:67:d0:87:e7:cf:eb:25:d3:19:fe:d7:e9:19:98:b2:49:fc:
39:e0:37:2f:fb:6b:e9:18:f2:7b:55:d8:a4:3d:20:19:1f:5a:
11:a5:f9:15:e6:43:46:bc:92:64:2a:3b:3e:c4:3a:92:d3:66:
57:b1:d5:d6:16:c0:0f:af:47:1a:d3:04:9c:05:87:b5:2b:11:
9d:16:f8:ff:4f:7d:fe:3d:f4:5d:2a:30:77:fd:7d:52:98:44:
c3:5f:39:a0:e7:d5:2c:f9:13:61:58:ab:f9:44:62:fe:2c:18:
fb:88:a4:ab:c5:6a:25:d4:a9:ff:1e:22:db:7c:81:c4:05:4f:
c2:ff:b7:f1:bd:42:0e:15:a2:c0:7b:28:2d:52:df:6c:57:52:
68:d0:22:62:f1:66:8b:7c:fa:62:af:cd:2c:f9:4e:1d:be:6e:
e7:8a:52:fb:1c:84:7c:f5:88:f9:ca:99:73:a3:6e:84:02:32:
59:70:df:18:75:28:81:5f:93:4d:e1:96:56:15:05:5f:96:93:
91:92:33:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:28:02 2025 by rpki-client