Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ddLkvfS-_IKsk47MNG8LMhZZdSM.cer
File: ddLkvfS-_IKsk47MNG8LMhZZdSM.cer (raw, json)
Hash identifier: MNnCIbZvTejsoQ5dkZVX+1ysqEzoLM4Rrd37aBpfXX4=
Subject key identifier: 75:D2:E4:BD:F4:BE:FC:82:AC:93:8E:CC:34:6F:0B:32:16:59:75:23
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194E03155DB26626CE8563B87A5FE077A83
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/0/75D2E4BDF4BEFC82AC938ECC346F0B3216597523.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Fri 07 Feb 2025 11:35:17 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 47272
IP: 2001:67c:d84::/48
IP: 2001:67c:d88::/48
IP: 2001:67c:d8c::/48
IP: 2001:67c:d90::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:e0:31:55:db:26:62:6c:e8:56:3b:87:a5:fe:07:7a:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 7 11:35:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=75d2e4bdf4befc82ac938ecc346f0b3216597523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a9:0d:ac:81:e0:06:56:3c:4c:a2:d3:b3:80:
a2:87:ce:b4:3e:d2:95:91:ba:a4:f1:3b:9f:c0:72:
4f:ce:c2:ca:11:36:64:43:b7:30:49:5c:ce:f7:f6:
e5:ec:97:3b:f4:3d:f4:8b:f0:4a:bd:a3:3b:09:7b:
86:a8:31:f4:eb:28:da:86:2e:5b:5c:aa:b4:43:9b:
45:20:45:8e:c0:48:4b:74:59:59:26:30:2b:84:5e:
ab:f2:cf:8a:d7:2c:56:20:5e:d2:c1:e3:49:bc:06:
9d:ca:c6:cc:56:a4:dd:dd:cd:6c:85:0a:e3:e7:7e:
3a:bd:28:3d:13:fb:74:18:8d:cd:d0:dd:72:df:38:
f9:c1:ca:93:61:57:62:92:a0:a0:bf:16:58:a1:b0:
38:03:41:54:26:13:3a:cc:c7:2f:5a:db:bd:73:60:
83:19:f6:64:4a:13:5a:ac:27:46:0a:51:2d:63:81:
26:6b:e0:ab:25:15:56:a1:17:ea:2d:f5:5b:79:08:
4a:f4:eb:da:ef:55:0c:7d:23:9c:91:a0:97:6d:85:
67:ed:bc:da:21:c7:30:75:69:34:33:b1:26:ee:b4:
8e:ba:10:5c:88:4d:0f:24:5b:10:a9:a5:4a:26:7e:
59:e5:87:b9:76:0e:8a:e8:90:54:13:68:cc:e6:ed:
85:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:D2:E4:BD:F4:BE:FC:82:AC:93:8E:CC:34:6F:0B:32:16:59:75:23
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/0/75D2E4BDF4BEFC82AC938ECC346F0B3216597523.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:d84::/48
2001:67c:d88::/48
2001:67c:d8c::/48
2001:67c:d90::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47272
Signature Algorithm: sha256WithRSAEncryption
0d:ca:bc:8b:2b:b6:fa:44:9f:1e:db:7e:f1:ac:e1:1f:fb:f1:
54:e7:6f:af:77:ec:0b:0b:06:9c:11:3d:40:cc:8a:07:65:7a:
21:05:81:7f:32:f8:81:f6:cd:7a:e5:1b:55:47:09:82:a3:7f:
b1:09:43:8f:8c:cd:80:bd:a9:20:d2:ec:56:e0:2c:6d:aa:b5:
b9:99:50:a6:95:3d:ad:b3:35:24:55:ac:4b:58:6a:38:f8:bc:
7b:b0:7c:bb:a9:d6:97:09:8e:39:34:d3:2d:a0:22:13:ee:a0:
1f:54:5d:f7:24:f3:cd:b1:43:df:1c:e3:dc:f6:15:bc:ec:ed:
9f:78:78:cd:36:de:71:37:bb:c4:f4:a4:43:37:a2:6b:53:32:
d4:fa:ed:51:59:16:d5:0b:14:b5:06:f8:0f:9d:53:f4:24:9c:
36:cf:3f:3e:1d:82:aa:c0:56:89:13:73:b9:a1:93:63:3b:8f:
36:4c:04:0d:0b:fa:28:92:0f:5d:df:3f:32:63:67:ff:51:f5:
d0:8f:13:7f:42:20:1e:e0:ce:ba:ac:3b:04:3b:86:06:be:3e:
29:c2:31:bc:b4:1b:5b:d1:1f:13:5f:6d:90:17:24:a2:c0:8e:
a9:95:f8:29:12:71:ef:7c:6e:fb:a1:70:f7:8d:9a:f6:01:45:
d9:f0:92:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 11:23:55 2025 by rpki-client