Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DHYQ2W2_yiYAN_UCWxSpfsPW-hE.cer
File: DHYQ2W2_yiYAN_UCWxSpfsPW-hE.cer (raw, json)
Hash identifier: I7AG3DCWTkAh7/yJWmTZknm5mj+v65SIqRzc+6I2BSU=
Subject key identifier: 0C:76:10:D9:6D:BF:CA:26:00:37:F5:02:5B:14:A9:7E:C3:D6:FA:11
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018C319D913AF08EA07406626D54ECCC8F12
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.rp.ki/repo/aci/0/0C7610D96DBFCA260037F5025B14A97EC3D6FA11.mft
caRepository: rsync://rsync.rp.ki/repo/aci/0/
Notify URL: https://rrdp.rp.ki/notification.xml
Certificate not before: Sun 03 Dec 2023 21:37:39 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 146.19.3.0/24
IP: 2a12:1700::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:31:9d:91:3a:f0:8e:a0:74:06:62:6d:54:ec:cc:8f:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Dec 3 21:37:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c7610d96dbfca260037f5025b14a97ec3d6fa11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:11:72:f0:6f:25:9f:bd:79:ec:32:b0:43:ae:
7d:48:92:de:07:a9:d9:3a:c6:69:7a:f2:ad:dd:e9:
9d:e3:2b:71:63:76:db:d2:7a:49:a5:79:74:04:84:
a5:81:18:61:36:28:66:98:65:bc:4a:17:e5:49:08:
12:f0:9a:db:36:06:51:fa:21:26:1c:1a:4f:79:81:
f6:8b:3c:1f:da:62:b2:98:ed:d9:2b:72:a5:b0:60:
8c:a4:57:75:e6:f4:06:52:33:7f:dc:59:61:c8:31:
41:eb:a3:ad:99:de:c4:68:d2:59:65:12:3c:30:40:
4d:78:be:cd:36:ed:c5:2b:9d:2e:84:af:7b:b1:17:
b6:da:76:f7:e8:e3:fb:c9:4f:d9:23:ff:89:35:7f:
ec:da:ff:4a:38:22:22:92:6e:7e:77:4e:d7:90:4b:
47:31:30:2b:e3:f7:4f:51:49:f8:ae:44:7f:b3:bb:
1b:f0:92:cd:84:bb:92:60:3f:80:0a:23:50:67:44:
46:58:6b:be:2d:61:e6:7b:94:6a:f9:96:96:5b:7a:
21:5f:da:a5:61:ca:f4:86:d1:ae:8c:ab:5c:de:80:
26:53:46:1b:96:fc:44:38:b7:c0:98:ba:02:7e:ba:
7f:a8:00:71:86:dc:0b:1d:0d:44:cd:a9:28:b4:72:
01:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:76:10:D9:6D:BF:CA:26:00:37:F5:02:5B:14:A9:7E:C3:D6:FA:11
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.rp.ki/repo/aci/0/
RPKI Manifest - URI:rsync://rsync.rp.ki/repo/aci/0/0C7610D96DBFCA260037F5025B14A97EC3D6FA11.mft
RPKI Notify - URI:https://rrdp.rp.ki/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.3.0/24
IPv6:
2a12:1700::/29
Signature Algorithm: sha256WithRSAEncryption
0f:13:db:0c:63:77:d5:19:26:78:bb:85:7c:19:a8:dd:f6:c7:
f5:b4:81:01:5d:7d:84:e4:69:17:c0:1d:d1:6d:07:32:74:b6:
cb:41:56:e3:4f:8c:f0:36:91:68:bf:b8:97:ea:df:84:6e:5d:
83:d4:f8:d6:4b:40:d5:a9:2e:bb:d7:46:82:83:b4:00:49:3d:
06:35:74:8d:b4:a1:f1:72:4b:4a:b9:a8:38:fa:2c:bc:51:98:
7c:33:55:15:a3:57:26:e8:50:93:af:79:1e:70:74:fb:dd:fe:
62:f0:f8:cd:db:82:f5:ef:f0:42:5f:f0:e3:99:26:0c:c6:f3:
d9:d7:34:32:79:1e:03:9b:dc:d8:93:2d:90:79:ea:f6:0e:2e:
68:09:bd:3b:c8:09:3a:84:d6:af:cd:bf:74:5d:a0:40:61:7b:
1e:dd:73:92:ea:67:50:59:4b:f6:db:9f:bf:d9:9c:c7:22:dd:
1c:07:de:f2:7b:27:7d:03:47:be:3d:ec:c7:46:49:e6:f3:b7:
89:fb:0f:34:de:4f:fb:24:3d:a3:5b:fb:07:b1:89:53:9d:6c:
a1:e0:49:16:96:c4:9d:cb:0d:c6:80:34:24:77:db:1c:d9:e4:
7a:33:a5:b5:fe:52:7b:48:0c:4a:ee:49:bc:22:58:03:9a:0f:
0b:8b:64:c6
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgISAYwxnZE68I6gdAZibVTszI8SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMxMjAzMjEzNzM5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYzc2MTBkOTZkYmZjYTI2MDAzN2Y1MDI1YjE0YTk3ZWMzZDZmYTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhFy8G8ln7157DKwQ659SJLeB6nZ
OsZpevKt3emd4ytxY3bb0npJpXl0BISlgRhhNihmmGW8ShflSQgS8JrbNgZR+iEm
HBpPeYH2izwf2mKymO3ZK3KlsGCMpFd15vQGUjN/3FlhyDFB66Otmd7EaNJZZRI8
MEBNeL7NNu3FK50uhK97sRe22nb36OP7yU/ZI/+JNX/s2v9KOCIikm5+d07XkEtH
MTAr4/dPUUn4rkR/s7sb8JLNhLuSYD+ACiNQZ0RGWGu+LWHme5Rq+ZaWW3ohX9ql
Ycr0htGujKtc3oAmU0YblvxEOLfAmLoCfrp/qABxhtwLHQ1EzakotHIBkwIDAQAB
o4ICNjCCAjIwHQYDVR0OBBYEFAx2ENltv8omADf1AlsUqX7D1voRMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwgccGCCsGAQUFBwELBIG6MIG3MCsGCCsGAQUFBzAFhh9yc3lu
YzovL3JzeW5jLnJwLmtpL3JlcG8vYWNpLzAvMFcGCCsGAQUFBzAKhktyc3luYzov
L3JzeW5jLnJwLmtpL3JlcG8vYWNpLzAvMEM3NjEwRDk2REJGQ0EyNjAwMzdGNTAy
NUIxNEE5N0VDM0Q2RkExMS5tZnQwLwYIKwYBBQUHMA2GI2h0dHBzOi8vcnJkcC5y
cC5raS9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8v
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpu
SEMyUUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsG
AQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAkhMDMA0EAgACMAcDBQMqEhcAMA0GCSqG
SIb3DQEBCwUAA4IBAQAPE9sMY3fVGSZ4u4V8Gajd9sf1tIEBXX2E5GkXwB3RbQcy
dLbLQVbjT4zwNpFov7iX6t+Ebl2D1PjWS0DVqS6710aCg7QAST0GNXSNtKHxcktK
uag4+iy8UZh8M1UVo1cm6FCTr3kecHT73f5i8PjN24L17/BCX/DjmSYMxvPZ1zQy
eR4Dm9zYky2Qeer2Di5oCb07yAk6hNavzb90XaBAYXse3XOS6mdQWUv225+/2ZzH
It0cB97yeyd9A0e+PezHRknm87eJ+w803k/7JD2jW/sHsYlTnWyh4EkWlsSdyw3G
gDQkd9sc2eR6M6W1/lJ7SAxK7km8IlgDmg8Li2TG
-----END CERTIFICATE-----
Generated at Wed Apr 9 16:30:24 2025 by rpki-client