Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TjwBugxcvyCuPpPKPTeeYt9clZo.cer
File: TjwBugxcvyCuPpPKPTeeYt9clZo.cer (raw, json)
Hash identifier: CrBeC6I2qq9JCab69QCs0Z7+CFa2MywXcHr5S3sDx40=
Subject key identifier: 4E:3C:01:BA:0C:5C:BF:20:AE:3E:93:CA:3D:37:9E:62:DF:5C:95:9A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221F71933BBA94102E8287C3ADD6A1C5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:47:53 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.5.132.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:71:93:3b:ba:94:10:2e:82:87:c3:ad:d6:a1:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4e3c01ba0c5cbf20ae3e93ca3d379e62df5c959a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:dc:5f:98:30:4a:de:91:8b:b4:86:2f:f9:8a:
a4:62:52:da:2b:9c:93:0b:4e:49:c5:c0:00:05:4e:
bd:62:f3:66:67:11:6b:c9:a3:dd:f0:e3:89:2a:db:
0a:ce:f3:43:cd:20:73:81:1a:2d:dd:7f:9a:cd:58:
ad:bf:77:8e:ea:d8:af:4f:42:af:e6:2d:76:54:e4:
a7:5d:9c:54:3a:33:ea:15:d0:02:6e:86:ca:0e:3f:
36:82:6e:92:5b:a0:dc:c7:18:e5:15:3b:7f:1a:77:
18:7a:41:7b:35:f0:f7:f8:63:0e:e0:ef:90:ab:42:
91:c5:66:31:e2:c4:6d:4f:d8:36:85:c4:4f:58:cf:
5b:08:ff:60:1c:49:fa:89:58:97:8a:50:4b:df:6f:
ed:9e:13:40:5b:c0:c5:2d:ff:35:44:e8:34:0c:4e:
1f:e6:c8:51:52:6d:c1:50:c6:93:cc:a4:ed:42:6e:
fc:dd:bf:2d:ea:51:77:04:d0:66:0c:70:0b:be:a8:
3a:6c:c8:5f:4c:d8:c3:b6:c3:90:c5:0e:34:6e:51:
27:5e:3f:be:2e:06:9f:b6:4d:82:32:13:5f:02:55:
69:6f:6b:19:79:29:d3:99:87:8d:a5:1b:ac:de:bd:
ca:f9:c2:2b:48:cf:cf:01:5c:02:cc:ed:b2:43:8d:
d6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:3C:01:BA:0C:5C:BF:20:AE:3E:93:CA:3D:37:9E:62:DF:5C:95:9A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.5.132.0/23
Signature Algorithm: sha256WithRSAEncryption
30:4b:33:57:72:9f:97:72:8b:fb:e1:db:83:0f:2b:d1:91:89:
43:7c:1a:4e:c5:58:22:6c:74:08:02:f7:29:96:f5:a3:ea:01:
24:d8:19:09:fc:4d:f9:f8:8c:28:a1:7b:07:a0:b9:0e:b1:c9:
9b:2f:eb:75:fe:36:00:a2:6b:18:82:8e:a6:1b:5c:b7:ae:c9:
f4:e7:b8:23:fb:9d:9d:65:7c:48:c9:d4:69:b7:0c:ee:6b:3d:
9f:a2:5b:99:03:21:00:f8:85:3d:b4:bd:28:15:95:35:66:69:
fc:8e:e2:4a:b6:c5:ea:40:4b:1b:19:14:05:d9:02:d1:32:b9:
40:df:31:18:7f:e1:31:67:62:52:38:4d:5f:01:78:06:4f:ec:
e4:61:53:3a:c1:38:e3:25:f0:11:1d:55:be:d6:ca:3d:e2:0d:
14:3f:bf:c4:eb:dd:69:64:a5:bb:87:8a:fa:50:19:bc:ce:d4:
ab:e3:f0:92:ec:89:28:b6:fb:c1:ad:0c:78:02:dc:22:93:9c:
47:dd:92:48:1b:1b:02:d5:ed:57:c3:ba:29:8b:42:fc:de:2e:
1b:b0:d9:87:49:21:28:22:8e:b3:20:79:ae:63:6f:d1:e8:33:
54:5b:b1:40:7c:1f:11:a3:f8:44:57:5b:83:31:aa:67:97:a7:
64:e2:0c:0d
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQiH3GTO7qUEC6Ch8Ot1qHFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTM0NzUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZTNjMDFiYTBjNWNiZjIwYWUzZTkzY2EzZDM3OWU2MmRmNWM5NTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9xfmDBK3pGLtIYv+YqkYlLaK5yT
C05JxcAABU69YvNmZxFryaPd8OOJKtsKzvNDzSBzgRot3X+azVitv3eO6tivT0Kv
5i12VOSnXZxUOjPqFdACbobKDj82gm6SW6DcxxjlFTt/GncYekF7NfD3+GMO4O+Q
q0KRxWYx4sRtT9g2hcRPWM9bCP9gHEn6iViXilBL32/tnhNAW8DFLf81ROg0DE4f
5shRUm3BUMaTzKTtQm783b8t6lF3BNBmDHALvqg6bMhfTNjDtsOQxQ40blEnXj++
Lgaftk2CMhNfAlVpb2sZeSnTmYeNpRus3r3K+cIrSM/PAVwCzO2yQ43WywIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFE48AboMXL8grj6Tyj03nmLfXJWaMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JlL2I4ZTc3
My00ZTcxLTRkMDktYjc0YS1iMjdmNTUyNjcyZTAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmUvYjhlNzcz
LTRlNzEtNGQwOS1iNzRhLWIyN2Y1NTI2NzJlMC8xL1Rqd0J1Z3hjdnlDdVBwUEtQ
VGVlWXQ5Y2xaby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQBuQWEMA0GCSqGSIb3DQEBCwUAA4IBAQAwSzNX
cp+Xcov74duDDyvRkYlDfBpOxVgibHQIAvcplvWj6gEk2BkJ/E35+IwooXsHoLkO
scmbL+t1/jYAomsYgo6mG1y3rsn057gj+52dZXxIydRptwzuaz2foluZAyEA+IU9
tL0oFZU1Zmn8juJKtsXqQEsbGRQF2QLRMrlA3zEYf+ExZ2JSOE1fAXgGT+zkYVM6
wTjjJfARHVW+1so94g0UP7/E691pZKW7h4r6UBm8ztSr4/CS7IkotvvBrQx4Atwi
k5xH3ZJIGxsC1e1Xw7opi0L83i4bsNmHSSEoIo6zIHmuY2/R6DNUW7FAfB8Ro/hE
V1uDMapnl6dk4gwN
-----END CERTIFICATE-----
Generated at Sun Apr 6 17:22:15 2025 by rpki-client