Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nvrlnr-YsBAL8UwGymvuJmh2zO0.cer
File: nvrlnr-YsBAL8UwGymvuJmh2zO0.cer (raw, json)
Hash identifier: ZKLmimqG+oABZf6MkrkkBE0MMtYvErgL9PHp7Tbk+bQ=
Subject key identifier: 9E:FA:E5:9E:BF:98:B0:10:0B:F1:4C:06:CA:6B:EE:26:68:76:CC:ED
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC4937D6199CBD1F84DEA6139863C7E2B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/57/4f2e09-6884-466e-afef-a0f5c78127bb/1/nvrlnr-YsBAL8UwGymvuJmh2zO0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/57/4f2e09-6884-466e-afef-a0f5c78127bb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:30:49 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 209173
IP: 2.56.36.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:7d:61:99:cb:d1:f8:4d:ea:61:39:86:3c:7e:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:30:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9efae59ebf98b0100bf14c06ca6bee266876cced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:c5:66:c5:51:ca:bf:13:d3:2d:2c:b0:08:2e:
30:17:87:b0:93:d0:69:e4:20:b7:d2:c8:e1:3d:69:
0a:3d:05:c8:b6:6b:b9:fe:f4:0d:60:96:78:09:e4:
70:c1:4c:73:a2:32:10:6a:6b:82:f6:ed:df:7b:42:
f9:6e:ef:d9:64:36:c9:f6:84:57:48:fa:75:5e:f9:
31:78:b0:50:08:e0:c9:fb:f5:2d:74:4a:d3:ec:c4:
0b:57:de:9d:2a:47:63:56:77:e4:94:ee:1b:0e:4f:
c6:f8:cf:c7:68:8f:e5:7f:e9:53:39:f8:ec:5a:27:
15:12:01:08:a2:01:91:c6:99:f2:b9:4e:5b:f4:cf:
28:bb:6e:40:25:bc:b1:55:28:af:d5:a3:56:44:84:
89:0c:e4:cc:d3:6b:00:9e:02:ff:26:ae:45:c2:b0:
1e:b3:37:f3:54:65:f6:5b:ef:bf:64:71:42:90:ab:
10:e9:18:2c:ad:96:2d:f0:5f:bf:23:2b:29:93:0b:
c4:ad:e1:1c:e1:56:d7:f7:e2:1a:46:fc:75:d0:fb:
63:0d:4c:1f:eb:d9:a2:49:76:8a:65:ea:02:de:e4:
f8:f9:ea:3e:b4:a4:45:0b:38:69:95:d1:70:55:e4:
d9:04:fa:d5:32:5b:05:b2:42:a3:04:7d:e3:06:17:
62:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:FA:E5:9E:BF:98:B0:10:0B:F1:4C:06:CA:6B:EE:26:68:76:CC:ED
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4f2e09-6884-466e-afef-a0f5c78127bb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/4f2e09-6884-466e-afef-a0f5c78127bb/1/nvrlnr-YsBAL8UwGymvuJmh2zO0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.36.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209173
Signature Algorithm: sha256WithRSAEncryption
5c:4a:50:2c:b6:01:bb:6c:f8:43:e6:dc:b9:d6:78:b4:20:da:
3d:dd:62:2c:9b:7f:10:90:f7:37:d2:98:37:81:d2:0c:9c:94:
9d:98:0b:d8:0e:2f:09:de:80:91:fd:c5:b6:bf:a6:1a:72:26:
5b:6a:6f:ac:81:b1:3e:e7:5b:f1:af:da:8c:c0:60:8a:b0:45:
c4:ef:42:3a:7b:fb:8e:99:3a:61:36:ca:29:9f:ac:47:59:89:
d4:e6:5f:42:53:29:f2:50:21:b9:53:b6:71:73:5b:ad:b0:31:
7a:7b:ec:0f:77:e0:43:f8:c8:b1:37:6e:3a:13:ff:55:03:90:
79:2e:a9:91:55:32:6b:6d:18:55:d6:ff:71:43:bd:dd:fe:5f:
16:c1:c9:43:4e:26:33:47:b1:a5:e2:65:29:39:9a:ba:71:34:
66:de:9e:2d:19:05:e0:0a:1e:c2:f8:e5:8c:b5:04:10:75:53:
4b:57:21:13:16:b3:ed:e2:7c:73:7b:99:95:f3:50:1e:82:0b:
35:e5:36:37:76:16:16:11:f7:b4:66:e7:dc:70:36:ef:3a:57:
b8:ac:97:23:21:dc:2d:f2:c4:eb:8f:14:de:90:fe:22:fb:3c:
b9:9a:b6:92:23:d0:57:a9:94:5e:d3:06:08:f6:d5:d8:fb:5a:
a6:65:e4:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:20:43 2025 by rpki-client