Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer
File: Xe_gki9PVScNzVwI8E8ce_Jgc8M.cer (raw, json)
Hash identifier: eXUoMChGe7QhQA6WesA2lhaFHlnL1BF6WobT98jNgdw=
Subject key identifier: 5D:EF:E0:92:2F:4F:55:27:0D:CD:5C:08:F0:4F:1C:7B:F2:60:73:C3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D6428F4FD04AB0791A9A425225EBB7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:48:20 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 45.146.160.0/22
IP: 2a13:b7c0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:42:8f:4f:d0:4a:b0:79:1a:9a:42:52:25:eb:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5defe0922f4f55270dcd5c08f04f1c7bf26073c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6f:50:32:fe:48:d7:cf:ea:ca:6d:3e:54:dd:
5f:9f:c6:77:c9:3b:79:20:23:fe:88:15:59:84:fb:
17:8d:e8:ed:00:dd:da:c8:9c:dd:2e:70:50:53:a8:
ec:70:60:85:45:4a:3f:7e:81:0a:2d:29:13:11:4a:
cc:9d:5c:a3:60:23:8a:fd:62:fb:92:4f:3b:d5:09:
ca:e7:90:ca:4f:51:3b:3e:14:73:1c:7b:c3:a1:7d:
1e:8e:7f:90:7b:74:fd:46:6f:38:ca:11:b8:cf:5d:
ec:72:1a:bf:61:71:69:9b:fe:75:6e:d4:97:58:70:
b6:d2:0c:14:a4:4b:45:99:b2:39:ba:de:4a:07:60:
70:bd:60:f7:23:54:8b:98:9f:17:3e:ca:f2:14:b2:
0f:dc:c8:99:14:6e:a6:9d:fb:ef:d2:d6:17:27:1d:
77:a5:7e:7d:70:4f:24:98:98:49:6c:44:a3:27:ed:
cf:62:2c:0a:86:c8:92:41:26:d8:bb:b8:4f:21:9f:
df:26:42:68:00:9e:1e:a6:a4:94:7c:d1:ec:25:25:
a8:bb:90:86:b3:a3:7d:42:96:27:75:ac:4a:15:f6:
71:f6:73:14:41:57:16:94:80:6e:46:b7:31:05:8b:
83:93:a1:16:72:55:d9:fe:70:f2:fe:24:ec:eb:96:
79:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:EF:E0:92:2F:4F:55:27:0D:CD:5C:08:F0:4F:1C:7B:F2:60:73:C3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/2fe2b27a-1ec5-4ab7-978e-6da9cf9f3790/0/5DEFE0922F4F55270DCD5C08F04F1C7BF26073C3.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.160.0/22
IPv6:
2a13:b7c0::/29
Signature Algorithm: sha256WithRSAEncryption
64:0e:f3:13:c9:86:e9:53:c4:09:ee:69:35:22:33:b8:b0:f2:
f2:3e:7d:6e:2c:3b:b1:79:7f:a1:0b:e8:35:77:57:e4:76:1e:
bf:9e:83:bc:3f:c3:21:e1:3c:4c:4d:c9:76:bf:0a:5e:cf:88:
33:de:20:08:f6:a1:59:cf:99:7b:04:d4:c2:1e:0b:0a:ed:c7:
86:93:95:3e:e6:2d:05:34:95:9a:39:f9:a3:df:e6:8a:50:19:
23:e9:1d:c7:18:80:f0:aa:f1:c4:c9:9b:74:29:21:76:44:20:
7c:ae:e2:2d:49:dc:60:11:1a:17:73:79:75:91:3c:c9:ec:c4:
09:e0:b9:3d:6e:0c:24:11:3c:a3:ec:b1:d3:ea:70:02:6a:22:
4e:1a:f2:1a:e4:53:5b:e2:45:c4:bc:6b:6e:db:38:36:03:98:
16:99:73:5c:f5:48:0f:07:4e:a2:52:1e:85:50:5e:75:9b:8d:
5a:7a:54:91:00:a7:40:4b:be:93:1b:f0:8f:f1:1e:57:c2:c2:
cc:18:6f:53:52:21:3d:1b:8d:f4:d3:98:72:1c:5f:d3:c8:63:
0d:07:83:7c:74:6b:a6:f1:8d:73:fc:ac:5c:44:8e:c7:34:0c:
56:ac:09:27:8c:8e:f7:b0:2d:33:4d:7f:b1:44:4c:f3:1a:8f:
0e:d8:d1:e7
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQg1kKPT9BKsHkamkJSJeu3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDc0ODIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZGVmZTA5MjJmNGY1NTI3MGRjZDVjMDhmMDRmMWM3YmYyNjA3M2MzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwW9QMv5I18/qym0+VN1fn8Z3yTt5
ICP+iBVZhPsXjejtAN3ayJzdLnBQU6jscGCFRUo/foEKLSkTEUrMnVyjYCOK/WL7
kk871QnK55DKT1E7PhRzHHvDoX0ejn+Qe3T9Rm84yhG4z13schq/YXFpm/51btSX
WHC20gwUpEtFmbI5ut5KB2BwvWD3I1SLmJ8XPsryFLIP3MiZFG6mnfvv0tYXJx13
pX59cE8kmJhJbESjJ+3PYiwKhsiSQSbYu7hPIZ/fJkJoAJ4epqSUfNHsJSWou5CG
s6N9QpYndaxKFfZx9nMUQVcWlIBuRrcxBYuDk6EWclXZ/nDy/iTs65Z5NQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFF3v4JIvT1UnDc1cCPBPHHvyYHPDMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggE/BggrBgEFBQcBCwSCATEwggEtMF8GCCsGAQUFBzAFhlNy
c3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzJmZTJi
MjdhLTFlYzUtNGFiNy05NzhlLTZkYTljZjlmMzc5MC8wLzCBiwYIKwYBBQUHMAqG
f3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvMmZl
MmIyN2EtMWVjNS00YWI3LTk3OGUtNmRhOWNmOWYzNzkwLzAvNURFRkUwOTIyRjRG
NTUyNzBEQ0Q1QzA4RjA0RjFDN0JGMjYwNzNDMy5tZnQwPAYIKwYBBQUHMA2GMGh0
dHBzOi8vcnJkcC5wYWFzLnJwa2kucmlwZS5uZXQvbm90aWZpY2F0aW9uLnhtbDBZ
BgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhDMlFIVlYzZDVtay5jcmwwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgME
Ai2SoDANBAIAAjAHAwUDKhO3wDANBgkqhkiG9w0BAQsFAAOCAQEAZA7zE8mG6VPE
Ce5pNSIzuLDy8j59biw7sXl/oQvoNXdX5HYev56DvD/DIeE8TE3Jdr8KXs+IM94g
CPahWc+ZewTUwh4LCu3HhpOVPuYtBTSVmjn5o9/milAZI+kdxxiA8KrxxMmbdCkh
dkQgfK7iLUncYBEaF3N5dZE8yezECeC5PW4MJBE8o+yx0+pwAmoiThryGuRTW+JF
xLxrbts4NgOYFplzXPVIDwdOolIehVBedZuNWnpUkQCnQEu+kxvwj/EeV8LCzBhv
U1IhPRuN9NOYchxf08hjDQeDfHRrpvGNc/ysXESOxzQMVqwJJ4yO97AtM01/sURM
8xqPDtjR5w==
-----END CERTIFICATE-----
Generated at Sun Apr 6 18:40:39 2025 by rpki-client