Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eY4NpPkQB7IkdorLTRMfElF9K3o.cer
File: eY4NpPkQB7IkdorLTRMfElF9K3o.cer (raw, json)
Hash identifier: /CV5Nr5odVF64PmrlPkZg2rERyUUH44gvVZuhJRynKM=
Subject key identifier: 79:8E:0D:A4:F9:10:07:B2:24:76:8A:CB:4D:13:1F:12:51:7D:2B:7A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942521B5EDFC49A1BE084E12911D101671
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:49:13 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 200909
IP: 91.202.100.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:b5:ed:fc:49:a1:be:08:4e:12:91:1d:10:16:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=798e0da4f91007b224768acb4d131f12517d2b7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:60:5b:c8:51:b3:43:e7:12:75:d4:7f:7b:21:
bd:95:1f:10:35:bd:4c:df:e4:dc:47:4a:06:e1:70:
9d:0f:b8:da:b5:82:5c:08:12:ca:fc:a4:7f:d2:11:
1d:43:94:a9:5a:64:8a:77:1d:0e:47:34:2e:69:0b:
d8:55:2b:eb:48:78:b7:1f:7c:e0:69:98:b9:05:82:
a9:54:91:2d:09:7f:78:e4:0e:cc:70:fb:16:ce:1a:
37:14:bb:1f:c7:6b:58:1b:8a:b1:99:9d:ac:53:da:
4b:e0:e4:4c:e0:ee:f9:fa:0d:de:6f:95:0c:11:34:
9b:8c:80:6d:fb:11:d1:32:7d:f7:c7:ef:11:b0:3b:
10:a5:05:12:43:ce:4c:72:32:23:cd:c2:c6:06:5f:
54:b6:82:39:b6:f4:d1:df:77:91:17:59:b1:53:0b:
51:b6:d0:c3:25:26:93:83:76:c9:6e:bd:78:19:68:
54:95:d7:23:5a:cf:ab:6a:7a:b7:61:55:c3:1f:43:
05:a1:0f:6c:79:ec:88:85:02:37:f3:2c:23:5f:c4:
df:4f:4a:3a:02:0f:cf:a7:f4:c0:89:0d:87:f8:93:
a3:82:cb:5c:e0:d4:90:c0:7f:0e:61:e0:f4:7c:ef:
df:c5:7a:11:fe:92:1a:24:58:ba:9a:78:0e:04:74:
ee:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:8E:0D:A4:F9:10:07:B2:24:76:8A:CB:4D:13:1F:12:51:7D:2B:7A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/404e64-f981-45b5-9cae-4fb4ef91a82f/1/eY4NpPkQB7IkdorLTRMfElF9K3o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.202.100.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200909
Signature Algorithm: sha256WithRSAEncryption
2c:08:44:e2:f9:da:c4:a5:ee:92:54:f9:fd:80:0e:cf:5b:c4:
99:d3:84:dc:aa:89:9b:e9:c9:a7:24:02:a9:4b:fa:e1:d1:87:
bc:bf:ae:5b:76:4c:b2:b2:bb:7a:a0:84:e0:c8:61:f6:e2:fa:
eb:6b:1e:7b:1a:45:36:89:ad:62:a8:03:0f:3e:54:47:c4:e8:
85:30:16:d2:df:95:b8:d3:b8:b0:f9:53:31:46:29:e7:83:f5:
cf:38:7c:71:21:f6:e6:75:bf:ff:85:a6:39:e7:48:a6:50:06:
1e:f5:86:46:42:15:bc:65:6e:aa:f0:ab:9e:d0:17:9d:7f:d1:
4c:1d:26:4a:b8:92:2c:89:52:ad:58:b7:00:02:dd:49:75:e4:
f1:f5:42:62:46:eb:d3:6f:27:32:11:66:a6:c0:dd:9a:07:cb:
74:81:07:29:43:5b:8c:fa:1b:ac:ae:a0:6f:79:a1:90:36:21:
8a:8a:0e:21:bc:69:96:29:72:46:b1:8f:d8:df:ec:ce:b2:d3:
52:0d:81:76:20:8d:f2:e9:66:8f:7a:cf:4b:a8:2e:04:a9:d8:
39:52:c1:61:60:75:53:4b:cc:5b:8c:5b:cf:d6:fd:7a:75:ec:
5b:24:2a:41:4e:20:3d:d7:b3:c3:07:a7:9a:7f:29:14:41:c9:
8a:a9:58:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:43:01 2025 by rpki-client