Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer
File: y9wl6joKcp7Y5umnPaiW2E-VQ5w.cer (raw, json)
Hash identifier: j3e4CaqkQ1c4HroGmCoASIxD4UjS8EJq5yoA/e2nR4I=
Subject key identifier: CB:DC:25:EA:3A:0A:72:9E:D8:E6:E9:A7:3D:A8:96:D8:4F:95:43:9C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258F5FBB9EAC5E7EEC24405DD18E5EA6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:49:00 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 12849
IP: 5.28.128.0/18
IP: 5.29.0.0/16
IP: 37.142.0.0/16
IP: 141.226.236.0/22
IP: 185.13.192.0/22
IP: 185.23.175.0/24
IP: 212.55.184.0/21
IP: 213.57.0.0/16
IP: 2a00:a040::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:5f:bb:9e:ac:5e:7e:ec:24:40:5d:d1:8e:5e:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cbdc25ea3a0a729ed8e6e9a73da896d84f95439c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9a:4c:2c:b1:74:6d:ce:5e:ac:f9:97:ef:5f:
a8:f3:a7:f6:4c:84:30:3f:da:df:b9:b6:78:85:90:
df:1a:ce:50:29:49:53:c5:f4:4e:55:d5:0a:db:d1:
bb:98:51:32:65:39:f4:39:51:b3:22:b1:56:86:0a:
62:13:51:fe:a6:92:5c:aa:e3:ad:41:42:5c:95:25:
f2:7c:53:1e:70:dd:97:98:f9:f2:1f:ee:55:47:d5:
1e:26:39:42:48:cb:d9:d9:ab:9f:9d:99:84:37:08:
04:c3:14:1c:d1:3d:c7:9d:38:94:d9:b4:fc:f6:59:
ff:fc:28:d6:ac:8b:47:6d:7f:2d:36:51:12:91:e5:
4e:56:50:5e:42:da:0c:46:d2:6b:d9:24:17:7f:93:
0b:52:e4:d6:a0:97:ff:dd:0e:17:4f:a7:20:63:e9:
d3:c9:af:7d:ec:dc:bc:98:27:0f:df:ac:98:2a:81:
43:c2:3c:95:75:be:d6:93:89:5f:e2:6f:ed:05:b4:
07:25:c9:18:b1:fa:0c:79:e9:f1:96:e2:aa:b4:0c:
c6:d7:c6:cd:b8:aa:94:ab:8e:d9:41:e0:05:ee:6a:
b1:96:b6:ca:b6:32:3c:34:e7:40:65:51:0e:44:56:
f9:9c:83:77:52:4a:ad:d7:2f:94:11:24:e1:71:ef:
be:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:DC:25:EA:3A:0A:72:9E:D8:E6:E9:A7:3D:A8:96:D8:4F:95:43:9C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5da1e6-246f-4493-992e-22c79aea127c/1/y9wl6joKcp7Y5umnPaiW2E-VQ5w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.28.128.0/18
5.29.0.0/16
37.142.0.0/16
141.226.236.0/22
185.13.192.0/22
185.23.175.0/24
212.55.184.0/21
213.57.0.0/16
IPv6:
2a00:a040::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12849
Signature Algorithm: sha256WithRSAEncryption
1a:8e:5c:c2:94:1f:7b:36:f0:85:8b:c0:da:32:f3:5f:9d:e5:
4e:f2:69:bc:70:97:7d:e6:3e:da:7e:34:e1:f8:6a:c3:e4:78:
07:5c:c6:70:a2:3f:68:fb:74:f8:9b:b1:67:ff:58:7c:0a:55:
88:8b:c1:a8:e8:2a:60:c5:9c:b3:cb:7f:9d:01:0f:29:fb:30:
31:73:42:07:6c:95:9b:ef:ee:72:03:d8:97:f7:12:af:9f:a7:
4e:cc:0c:aa:a8:2d:0f:65:c8:90:ba:cd:5f:4e:22:c9:85:e4:
c1:03:3c:1d:b1:74:d8:3a:fd:31:05:27:06:ba:be:f7:30:0a:
af:28:90:ad:e9:00:0a:aa:37:38:a6:fc:cc:fb:25:4c:e8:b2:
37:f3:f9:86:50:07:ce:0a:b7:e6:27:69:81:0b:36:b5:4e:12:
8c:84:70:9b:52:68:fd:0d:0e:ff:fd:a3:d6:93:cd:a9:3e:70:
5a:e2:0a:69:52:be:f7:7a:de:cc:ee:7e:1b:da:93:0a:ed:2a:
21:e5:ae:af:b1:23:18:8a:25:73:9f:8d:63:e3:ff:8c:e8:e1:
6b:ae:a3:a5:3f:fc:69:e6:5f:d3:48:76:33:ef:eb:7e:b6:d9:
a0:2b:7e:87:f0:ea:43:4a:12:56:16:a3:b2:e9:a4:3f:9c:61:
fc:f3:fc:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:43:19 2025 by rpki-client