Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yN4cEONpZBxLMY2Jh7xareeIuR4.cer
File: yN4cEONpZBxLMY2Jh7xareeIuR4.cer (raw, json)
Hash identifier: WrK6q6f7KJlndl+6G2vyRKsCR+0oGEdNr+QMQ1HoKEE=
Subject key identifier: C8:DE:1C:10:E3:69:64:1C:4B:31:8D:89:87:BC:5A:AD:E7:88:B9:1E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A7E8B07ECA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/48/b95b83-9ac9-4849-acd5-f2755c7976bf/1/yN4cEONpZBxLMY2Jh7xareeIuR4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/48/b95b83-9ac9-4849-acd5-f2755c7976bf/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 13:06:30 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 49818
IP: 81.22.228.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 721163419338 (0xa7e8b07eca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:06:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c8de1c10e369641c4b318d8987bc5aade788b91e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b7:21:d0:22:ee:d5:10:bf:31:00:15:f7:93:
32:70:d2:e2:b1:ff:52:b3:d8:c8:db:b9:d4:50:9d:
7e:a3:e6:0a:a1:4d:2e:ed:e1:81:1c:8a:f1:1f:85:
d7:da:4b:e9:9c:27:85:c4:ce:e7:17:f8:11:f2:dd:
86:00:42:12:f6:ae:7d:6c:80:ad:ba:4a:a9:15:87:
72:3c:e6:16:75:bc:40:d0:f1:bd:cd:4b:e3:4d:32:
d8:10:45:49:c9:4c:a7:f7:68:97:9e:04:e3:9c:d0:
ec:75:c3:df:c6:2f:2b:ac:9a:eb:e0:a4:2e:cc:19:
54:ff:77:10:9d:c6:5e:22:71:24:12:6b:d1:ec:bc:
a0:f9:29:fa:3c:a0:f9:11:f0:76:9a:7f:23:86:18:
60:a2:50:61:60:20:c5:c2:33:09:c3:71:ea:55:ce:
fe:ab:9f:13:b2:2c:9c:2e:2b:62:ce:bd:b4:15:c3:
8f:f6:74:ff:d2:ef:c8:c4:43:a8:b1:5d:8d:72:f3:
aa:ff:91:d4:12:c4:6a:29:bf:ab:80:6a:39:d8:8b:
88:8d:7c:b5:7c:83:86:2e:98:c1:76:2d:ce:f7:b2:
8d:fa:69:00:82:8a:01:7c:c5:b8:91:84:a0:cd:f2:
3f:57:a9:d9:a8:34:0a:1b:7f:2e:7d:a5:cc:fd:42:
23:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:DE:1C:10:E3:69:64:1C:4B:31:8D:89:87:BC:5A:AD:E7:88:B9:1E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b95b83-9ac9-4849-acd5-f2755c7976bf/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b95b83-9ac9-4849-acd5-f2755c7976bf/1/yN4cEONpZBxLMY2Jh7xareeIuR4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.228.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49818
Signature Algorithm: sha256WithRSAEncryption
3a:fb:21:0e:0a:06:df:1b:8e:90:33:42:4d:99:06:05:b9:ea:
63:ed:fd:94:8f:4d:27:3a:c5:e4:32:af:f5:31:b1:bc:30:04:
e2:05:24:b4:63:0e:0b:f5:ab:3a:56:5d:22:14:a8:1a:57:67:
5f:df:55:02:85:b8:97:67:4d:7d:e9:ed:84:b6:89:8e:ca:97:
0c:b3:d6:c4:ff:6c:25:1d:43:da:13:2f:04:2f:4c:23:4a:4d:
79:d2:e1:42:9e:6b:15:ad:cb:14:ac:eb:06:64:08:26:2a:aa:
5a:a7:ba:49:21:bd:29:e0:23:d5:f4:0d:b2:e3:54:eb:3c:b8:
54:27:7b:06:f5:cd:ae:cb:4c:df:cf:30:e8:1d:0b:fe:63:1b:
df:9d:36:16:58:b6:a7:f8:5a:f3:f1:71:c4:be:7e:de:6d:2b:
b5:ea:f0:c6:e3:23:19:a5:66:27:34:12:b2:e6:73:0f:59:6a:
db:0e:70:5f:16:f4:0f:a2:82:63:c0:9c:69:08:a6:f0:31:dd:
dc:cd:32:a0:ca:53:00:17:25:fe:49:42:a1:38:40:a9:16:43:
c8:55:d4:b6:1f:c8:75:28:6d:7d:61:e4:92:01:29:e9:89:0a:
9e:00:33:ad:12:31:7b:03:02:9d:67:1f:ef:50:9c:74:5c:30:
1f:15:ce:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:46:15 2025 by rpki-client