Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
File: jRHLAV35uqthIo27zhfdTgDmPBM.cer (raw, json)
Hash identifier: voXeDQo4LZfRA3+66F/LPDpAYQM6MjtR8Zjp5b6YNQM=
Subject key identifier: 8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258EB08F1703CCC9666BB7F6FAC29E9A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:48:15 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 39927
IP: 46.180.0.0/15
IP: 89.31.220.0/22
IP: 95.181.0.0/17
IP: 134.90.160.0/19
IP: 158.46.0.0/16
IP: 176.196.0.0/15
IP: 178.171.0.0/17
IP: 212.75.192.0/19
IP: 2a02:2830::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:b0:8f:17:03:cc:c9:66:6b:b7:f6:fa:c2:9e:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:22:a2:22:0d:c2:eb:d8:4e:0f:f3:72:65:f2:
69:e5:c3:49:48:62:33:06:f3:49:92:a4:50:30:f5:
32:47:c8:b4:8c:35:6e:bc:6c:42:a0:62:75:42:c8:
7b:79:d5:bf:67:40:67:4b:a6:39:24:8f:c8:04:72:
b0:2b:fd:d8:f5:ec:51:25:d8:ab:87:98:8a:1f:04:
3d:65:fa:a6:3f:da:1c:2a:f1:2d:f9:d2:e7:8c:8b:
4f:52:d0:4f:c7:fe:a1:31:fa:86:f6:c4:b8:b4:14:
85:9e:72:9b:eb:ab:1a:12:ea:ce:90:fd:01:cd:5f:
2f:52:e6:09:b9:be:80:1c:c9:66:44:1e:0e:6c:80:
00:a3:20:fa:71:8e:93:6d:3c:7c:ac:06:3e:87:04:
a5:cc:47:9d:d7:0a:7a:8f:34:70:a0:05:20:74:e8:
ed:e7:3f:88:46:47:75:91:fc:41:8d:c4:67:f1:52:
26:be:2c:79:1f:7e:b3:bc:c5:c9:d0:5e:11:35:9a:
ea:9f:86:90:b5:7d:17:16:4b:0f:99:4c:0f:46:4a:
23:2a:42:3c:8c:90:23:fd:99:68:2e:53:61:d8:df:
ab:e5:27:6e:4b:3a:27:dd:b6:f5:60:cc:49:86:d9:
41:e7:1c:96:01:a3:ae:f8:df:76:57:65:9a:de:4a:
97:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.180.0.0/15
89.31.220.0/22
95.181.0.0/17
134.90.160.0/19
158.46.0.0/16
176.196.0.0/15
178.171.0.0/17
212.75.192.0/19
IPv6:
2a02:2830::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39927
Signature Algorithm: sha256WithRSAEncryption
60:44:6a:b8:cc:e4:b9:18:1f:21:a9:6b:12:46:b0:7b:00:05:
35:6a:b1:2f:19:75:4b:6b:2e:fc:98:f4:1a:ac:8a:b0:81:c8:
d4:65:ac:b8:69:0b:ec:ac:09:8c:6a:bd:2f:75:4a:94:02:ae:
52:80:d6:86:cd:86:43:c0:16:67:4e:5a:70:22:af:a8:59:46:
6b:51:14:6a:d2:7d:df:5f:65:70:0e:45:22:cb:73:9f:9b:d1:
38:85:27:59:8c:2a:c3:b7:81:74:64:12:e2:43:8b:ae:79:c5:
23:e6:21:f4:ca:80:0e:9e:be:ef:cb:24:ef:8d:44:cc:71:4b:
8d:5f:05:a0:63:3a:2d:26:d0:5b:c4:d5:17:7f:90:95:0f:f4:
6f:33:96:84:75:ce:33:32:3d:1c:87:ac:76:05:0b:1c:1f:de:
98:76:3e:07:5b:6d:78:bc:57:9c:c1:69:3e:2f:1a:be:f1:69:
b2:d3:8b:ee:51:0e:2a:c3:ea:20:bb:bf:e7:31:58:42:2c:b7:
3d:7c:d7:19:b7:20:ec:69:19:a0:80:50:c8:67:83:fb:be:f6:
ff:65:fd:32:c0:cb:e5:fe:5e:07:c6:a9:a9:6c:ac:57:58:37:
02:22:b6:d4:12:4b:f3:f9:57:d3:ad:c2:fd:e4:82:9f:49:80:
d6:a3:e2:41
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:22:50 2025 by rpki-client