Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/s9Zil8XNvTbYaEnd6ueYWXn0UMo.cer
File: s9Zil8XNvTbYaEnd6ueYWXn0UMo.cer (raw, json)
Hash identifier: suJfchPHWEZBlDiD0qyOGsIasGzEkADh1iVEl5652WQ=
Subject key identifier: B3:D6:62:97:C5:CD:BD:36:D8:68:49:DD:EA:E7:98:59:79:F4:50:CA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423692D65E78AAE797C6E4F738FD274E4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:48:03 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 44567
AS: 216108
IP: 91.240.214.0/23
IP: 91.241.14.0/23
IP: 93.92.152.0/21
IP: 2a01:9c00::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:2d:65:e7:8a:ae:79:7c:6e:4f:73:8f:d2:74:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b3d66297c5cdbd36d86849ddeae7985979f450ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0e:1d:8d:16:53:01:cc:72:1d:68:6a:1c:46:
7a:b1:6f:24:71:d9:ce:a2:b5:25:d6:b1:2c:f6:7b:
15:43:85:a4:96:aa:d0:d6:70:74:d6:fe:6c:1b:7e:
44:0c:a9:b8:d1:8d:24:49:5f:71:2c:db:f3:05:b1:
3f:ff:b0:80:82:09:1c:af:30:1d:3c:4c:a9:91:14:
60:10:08:a9:c2:4a:a6:92:42:3f:79:90:de:f6:28:
03:83:3e:35:4c:be:9f:82:6b:bb:a9:5f:83:68:13:
8b:1d:69:10:f0:e5:e9:54:0f:18:74:35:c7:85:fe:
93:d7:1b:54:bb:02:91:60:ac:32:27:dd:0d:52:c6:
f4:90:cb:65:8c:4d:ac:ca:fb:78:51:84:f2:b5:b4:
40:69:51:85:e9:d0:99:09:05:9f:76:df:c7:1c:f5:
38:13:9e:5e:d9:17:ea:f9:f4:76:96:67:20:a1:06:
39:99:54:89:e7:bb:5b:81:4a:54:3a:3c:4a:d8:6f:
28:43:fc:4c:b8:86:63:07:2c:73:a3:fe:f9:ca:17:
a8:67:e9:c7:81:fc:ce:fa:55:6b:09:f3:c9:3b:cf:
b9:ff:09:5a:f3:aa:74:01:8d:05:f8:1b:2a:35:1d:
99:fb:cf:40:ca:cb:97:93:4c:14:da:05:2a:9b:35:
8b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D6:62:97:C5:CD:BD:36:D8:68:49:DD:EA:E7:98:59:79:F4:50:CA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.214.0/23
91.241.14.0/23
93.92.152.0/21
IPv6:
2a01:9c00::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44567
216108
Signature Algorithm: sha256WithRSAEncryption
63:27:23:40:50:b0:3b:f4:c4:88:d0:72:1f:61:80:2d:ea:3a:
55:ed:8d:77:3b:98:fd:1b:38:53:1d:4a:a9:c4:8a:51:26:8c:
63:61:26:ed:11:03:7b:0d:c7:6c:04:c8:7e:03:73:94:3d:68:
bc:d4:f4:53:9a:00:f3:8a:ba:e9:5f:fa:68:2f:15:bd:c8:10:
10:d1:f2:0f:ab:32:4d:9f:f5:d9:78:fc:24:56:28:77:df:fb:
ca:b5:34:31:25:8b:a1:74:6f:c7:9a:24:7b:9a:11:4b:0a:f0:
8b:56:c4:a2:3f:05:48:9f:e7:a6:c3:60:31:8d:fe:31:df:e5:
02:6b:c3:dc:1b:a3:a6:9b:ad:12:1e:f9:ed:c7:be:ff:3d:99:
2e:1b:5e:80:ef:0b:e9:32:61:3d:0c:52:12:61:4a:f8:4f:61:
aa:0c:5a:7a:60:b2:64:56:23:6c:e1:fd:3e:f0:23:7f:16:3e:
c7:e6:7b:0a:fb:af:72:dd:e6:4f:41:b4:bf:73:65:5a:02:06:
f1:c7:cd:c6:69:cc:e0:54:07:a0:b5:d7:ec:d9:fd:ac:b8:d8:
b3:ae:fd:60:de:fa:b0:7a:68:6d:b9:c5:db:aa:b5:bd:34:10:
da:52:5e:85:20:9c:ea:6b:6b:33:7a:ff:33:4c:3d:95:24:ec:
86:c4:eb:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:52:46 2025 by rpki-client