Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bTnOTCmrP4Avnekz9ElQJsTQ7ko.cer
File: bTnOTCmrP4Avnekz9ElQJsTQ7ko.cer (raw, json)
Hash identifier: KKv8TbPRe0cRU2nVdz7oBhyB585wzerOPIdAAlcdlos=
Subject key identifier: 6D:39:CE:4C:29:AB:3F:80:2F:9D:E9:33:F4:49:50:26:C4:D0:EE:4A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B3901945E1229DAA8D902182751568
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:48:55 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 52000
AS: 206932
IP: 185.15.208.0/22
IP: 185.142.32.0/22
IP: 194.213.24.0/24
IP: 194.242.33.0/24
IP: 194.242.38.0/24
IP: 194.242.45.0/24
IP: 2a03:afc0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:90:19:45:e1:22:9d:aa:8d:90:21:82:75:15:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6d39ce4c29ab3f802f9de933f4495026c4d0ee4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:57:f6:68:14:71:a5:fb:8d:48:db:f7:80:c6:
e1:d7:20:0a:51:b5:73:cb:5e:4b:e3:05:e9:36:93:
06:c0:b2:24:9c:16:f2:2d:d5:3f:11:5e:44:dc:30:
fb:9a:65:46:c4:9b:da:1a:6a:e6:69:66:e0:62:21:
45:81:e0:e7:96:c9:aa:a9:e8:8f:b8:ea:c3:7f:0b:
91:88:46:ab:ca:8f:ab:4e:a9:fc:2b:1e:1b:a8:60:
23:07:b5:61:46:31:9f:f5:76:33:85:e8:12:5b:86:
26:b0:89:43:fa:b9:5f:ab:86:75:b9:92:ef:45:de:
44:d2:26:e5:81:f4:2c:db:1f:48:27:4b:b9:56:cb:
c8:6d:8a:e5:1d:0a:dc:fd:7f:65:29:7f:71:50:7b:
14:e3:56:64:bc:3a:8b:39:72:be:30:a3:d7:0a:f1:
47:71:3b:b8:4b:4c:bf:c6:e7:41:d0:cc:76:dd:a1:
34:5e:c5:d5:9c:07:5b:40:d4:4d:a4:9b:0b:4a:58:
a6:52:3b:08:ab:06:d0:c5:4e:90:0e:47:9b:81:cf:
cd:fd:e4:3d:ca:eb:a3:09:9b:4d:ca:24:43:b7:ef:
31:62:8e:04:8d:7d:9a:88:d9:dc:c2:98:00:a3:72:
ca:1b:6d:a3:d9:a2:9e:10:c3:d3:db:be:73:2d:d2:
60:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:39:CE:4C:29:AB:3F:80:2F:9D:E9:33:F4:49:50:26:C4:D0:EE:4A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.15.208.0/22
185.142.32.0/22
194.213.24.0/24
194.242.33.0/24
194.242.38.0/24
194.242.45.0/24
IPv6:
2a03:afc0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
52000
206932
Signature Algorithm: sha256WithRSAEncryption
af:37:44:3e:20:7a:cf:63:5b:ce:18:f2:a3:5d:86:c3:6d:06:
63:b7:7c:40:3d:7c:0b:83:f0:d9:ca:cc:32:3e:31:f7:3c:3c:
24:b7:a7:5b:80:15:5c:f5:8f:ac:74:f4:e0:25:2f:71:ae:e9:
8b:22:72:22:30:fc:4e:f9:37:58:fd:1a:e8:cd:69:ac:6c:11:
6c:9a:70:7f:90:e2:54:61:4c:5e:b7:f1:1f:6c:2e:23:ef:6b:
9b:51:48:9e:10:cb:c9:8b:bb:7b:8b:8c:6a:46:13:6a:76:25:
e9:64:46:e1:1d:d1:ab:78:96:d2:34:a6:89:f7:bd:8e:1b:a7:
2d:3c:1d:e9:06:10:8e:19:b3:d1:ca:e6:ca:34:de:3e:77:ff:
c9:d4:77:48:4b:fc:a9:0a:95:5e:ec:b4:75:3d:8f:a2:68:7a:
ee:7e:58:ae:61:0c:80:40:ee:6e:8c:d9:27:eb:39:3e:f9:40:
55:79:cb:3e:13:6b:4e:20:ef:dc:61:8b:de:d5:f6:42:6c:3f:
59:6a:af:71:b7:0c:9e:5d:1a:a3:9f:8a:b8:42:5e:4c:20:96:
c9:bb:bb:df:e8:42:ea:30:35:c1:29:ba:3b:63:22:8b:e8:3a:
97:1d:26:79:3d:f9:2a:16:ae:83:31:fc:bd:51:79:bf:e8:a0:
03:a2:69:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:10:36 2025 by rpki-client