Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fz4LJ7jk15j5K53hV_HaWkPNSeU.cer
File: fz4LJ7jk15j5K53hV_HaWkPNSeU.cer (raw, json)
Hash identifier: 7rgbMftlZuYerdBPM2UdNxVBOVGrScqDhAy7MVAeO/k=
Subject key identifier: 7F:3E:0B:27:B8:E4:D7:98:F9:2B:9D:E1:57:F1:DA:5A:43:CD:49:E5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFAB7B98409DC2FA3A8B4B9657EE652
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:48:32 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 208316
IP: 193.72.144.0/22
IP: 193.73.238.0/24
IP: 193.168.212.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:b7:b9:84:09:dc:2f:a3:a8:b4:b9:65:7e:e6:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f3e0b27b8e4d798f92b9de157f1da5a43cd49e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:aa:92:fa:67:73:76:82:ae:0c:fd:de:56:9b:
5e:e3:d4:dc:53:e5:74:37:8e:68:64:00:25:d3:74:
29:72:43:4f:40:ef:fe:7d:f4:60:29:ae:fa:3d:c0:
cb:d6:41:11:b8:2e:c9:af:0b:e3:bc:7a:ba:14:06:
0e:f0:4e:cd:35:5d:e6:47:5e:85:79:ec:fb:10:bc:
10:20:dc:93:c9:2b:28:e2:8b:30:0e:7e:fd:8a:d6:
0c:85:78:12:30:35:f5:bd:77:93:0c:3a:75:66:8f:
3d:db:67:90:b5:3b:09:df:64:17:74:67:89:98:de:
70:98:fe:e0:3d:91:2a:f2:a7:82:ec:4f:7b:04:80:
77:de:9b:3f:56:54:5c:11:6f:6f:26:a6:e8:24:30:
0c:49:c1:b4:10:a3:0e:da:86:83:4c:4e:f5:fd:4c:
27:15:3c:d1:ce:97:4d:6d:e5:59:48:8d:fd:60:1c:
c9:cb:a4:9a:24:9e:09:12:16:18:c9:14:3e:b7:5f:
6f:6b:40:ce:bb:68:cf:11:85:64:1d:15:6f:00:b2:
61:f6:90:bd:be:83:01:a3:4d:59:08:5f:c0:4c:95:
64:41:a9:04:69:16:af:eb:59:1d:f5:66:77:ef:a2:
cd:b7:92:a5:c1:1e:fe:cb:1b:f3:2a:03:68:34:a1:
14:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:3E:0B:27:B8:E4:D7:98:F9:2B:9D:E1:57:F1:DA:5A:43:CD:49:E5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/a0c9ac-3a47-4d6c-aa15-a42ec8776fbb/1/fz4LJ7jk15j5K53hV_HaWkPNSeU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.72.144.0/22
193.73.238.0/24
193.168.212.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208316
Signature Algorithm: sha256WithRSAEncryption
72:ed:af:4f:41:e9:11:ea:4c:32:87:b7:53:a0:a7:98:01:e4:
9b:7d:b9:e4:22:d8:87:2f:46:58:a9:b2:45:80:e1:3d:b2:df:
98:30:9a:6c:0f:de:f8:a5:fb:85:e2:4f:46:59:6e:3b:38:36:
ef:90:5d:c2:8b:7a:25:3f:b4:5f:4c:28:49:df:56:5a:24:ec:
ed:27:e4:be:06:90:e0:69:5c:9c:31:a3:67:16:50:51:25:f7:
26:10:76:83:e7:49:ee:bc:5c:ac:81:bf:27:10:5a:55:79:db:
64:7f:85:d6:b8:3b:ee:e3:7b:d8:0d:d0:36:7d:b3:cc:11:8d:
a0:dc:a2:49:f1:93:8e:5a:eb:d4:7e:fa:9c:7d:17:55:61:da:
24:ba:56:b6:15:fa:be:8e:ab:91:e7:55:9c:a4:6c:39:30:44:
cf:e5:55:f8:be:69:02:4e:9e:86:44:30:30:96:24:5c:de:4c:
cc:43:4f:55:87:4c:5d:23:4f:1a:95:c9:09:d6:b4:56:48:86:
25:be:d9:af:e8:14:4b:88:97:07:d9:ec:6d:f5:9c:33:6e:b5:
c9:10:ca:88:c3:e5:3a:f1:5f:68:d6:bb:c2:83:83:f4:d1:c7:
cf:32:93:bb:17:25:b0:70:1e:b0:ba:43:91:ef:18:eb:66:3b:
01:e2:61:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:25:11 2025 by rpki-client