Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tdtzI5cVvIixALOGOKX4MMQkmRc.cer
File: tdtzI5cVvIixALOGOKX4MMQkmRc.cer (raw, json)
Hash identifier: pw2p5Azl5MzcPFwH0m1KGyICLo780TbKBhPN2e3MIcQ=
Subject key identifier: B5:DB:73:23:97:15:BC:88:B1:00:B3:86:38:A5:F8:30:C4:24:99:17
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A30B6D984E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3f/859374-7672-49cc-a852-1620c3759991/1/tdtzI5cVvIixALOGOKX4MMQkmRc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3f/859374-7672-49cc-a852-1620c3759991/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 09:01:45 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 43069
IP: 45.150.148.0/22
IP: 2a0f:d200::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 700271401038 (0xa30b6d984e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:01:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b5db73239715bc88b100b38638a5f830c4249917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1e:a0:42:94:b4:72:c4:8d:19:01:67:1d:e7:
bf:fa:d0:1b:fe:50:05:a6:7a:95:77:4e:0b:cb:1f:
94:f2:4e:94:20:7f:d3:60:3a:20:7f:a2:02:ec:a3:
6f:79:0f:41:52:ba:8b:b6:a6:f4:33:6e:78:af:b5:
29:48:c0:5e:a0:f3:f4:08:30:90:db:27:72:30:03:
57:5d:29:5d:37:2b:dd:68:0b:e6:f3:1b:f3:55:3e:
0f:81:26:ae:f1:b0:6f:ca:61:50:1b:90:2e:7d:22:
37:26:50:88:6b:82:ff:32:50:52:6f:2d:f8:f9:86:
f0:33:2b:2e:6c:51:c1:ba:02:c2:22:5f:64:7c:8b:
ca:a5:b2:38:22:b3:da:e6:86:30:d5:da:c6:f6:7b:
f5:9e:05:3f:94:28:60:a8:cc:99:f8:01:55:4c:44:
15:a1:f4:64:3a:d9:90:02:54:96:b4:f5:66:5f:10:
60:16:1c:11:15:ae:53:b8:a4:ae:b6:ff:e9:48:d6:
b6:87:bc:35:31:a1:af:c4:18:82:25:f7:00:a7:a0:
4b:7a:9c:f8:d0:95:45:67:92:78:34:1d:e2:1e:81:
95:4a:84:61:ab:98:7e:7f:d0:0a:fe:ba:7b:8d:e3:
11:59:46:e7:f0:20:0d:9a:66:c2:56:df:a8:0b:8e:
65:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:DB:73:23:97:15:BC:88:B1:00:B3:86:38:A5:F8:30:C4:24:99:17
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/859374-7672-49cc-a852-1620c3759991/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/859374-7672-49cc-a852-1620c3759991/1/tdtzI5cVvIixALOGOKX4MMQkmRc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.148.0/22
IPv6:
2a0f:d200::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43069
Signature Algorithm: sha256WithRSAEncryption
2f:32:fc:3c:f0:ae:25:2a:0f:3b:6d:a2:46:89:c3:36:c0:4b:
91:db:70:56:d6:4f:2c:a1:6f:ed:db:ff:25:bf:bd:97:46:10:
a1:37:8e:25:08:68:fb:b3:2b:ff:f4:50:7b:0b:6e:75:19:2a:
0d:c0:1c:8c:8e:73:62:3a:cd:14:e1:a8:96:dd:88:69:df:c3:
b8:28:6a:d6:23:54:3c:f3:c3:75:84:57:83:43:32:b8:62:63:
6f:37:91:72:fa:69:fe:33:f6:00:bb:ef:ea:71:99:23:61:4b:
0d:d6:2b:c2:2c:d4:1c:79:8a:5c:91:1e:28:5d:56:5c:e4:dc:
c1:84:6d:ef:5b:dc:57:c1:dc:28:5b:07:f2:c2:b5:39:c4:8c:
3c:7a:8d:4d:d5:1a:d2:c7:b7:77:00:95:9b:38:59:4d:12:37:
b4:a2:e5:14:07:f1:e0:47:0a:5e:17:c5:f5:ad:87:4f:f9:94:
1d:dc:70:68:5a:a6:d8:07:79:87:e0:e1:79:ca:ca:4d:2a:49:
59:13:74:ef:4c:ec:77:cb:f1:52:ac:38:18:45:50:c3:9b:bb:
d1:eb:be:4a:6a:28:7d:9c:69:e0:36:8c:aa:7d:3c:38:21:2e:
b0:d2:b1:04:c1:d7:a3:47:93:0c:f0:0d:10:47:fe:6f:8f:e8:
15:7d:37:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:46:01 2025 by rpki-client