Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aYfUeTXhE31URCbbUojhKpwCWsI.cer
File: aYfUeTXhE31URCbbUojhKpwCWsI.cer (raw, json)
Hash identifier: TlCU7N6SNyKe8Kta5SUFE653tbjPFBZJyxJHHJEHE6s=
Subject key identifier: 69:87:D4:79:35:E1:13:7D:54:44:26:DB:52:88:E1:2A:9C:02:5A:C2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B254FBF9BBDC8B5F76FAC351409493
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:42 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.44.178.0/23
IP: 193.84.4.0/23
IP: 2a01:7660::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:54:fb:f9:bb:dc:8b:5f:76:fa:c3:51:40:94:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6987d47935e1137d544426db5288e12a9c025ac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ed:07:4e:cd:f2:a7:8e:60:ad:11:89:5b:0f:
13:c2:78:83:2b:92:17:52:5f:56:60:b0:c8:b3:67:
db:6d:61:bd:43:c8:67:0e:1f:b5:6e:36:a2:6e:0a:
c8:42:a3:42:e7:da:7e:5a:5f:b1:37:8b:18:67:ee:
4c:81:8d:90:3d:e5:a5:f9:5d:c9:4e:c8:10:ff:5e:
59:5d:f9:24:26:f7:92:aa:10:2c:c9:55:dd:f5:d1:
96:7f:69:fe:4b:e7:de:57:06:1c:b2:db:e8:38:a2:
bf:50:dd:d8:a4:03:bd:ae:ca:12:ff:d2:06:70:dc:
06:f7:ed:6d:e4:49:f5:94:cf:e7:1d:f0:5c:c6:fc:
96:b1:e2:49:b0:79:e9:35:eb:fc:32:28:21:1f:95:
b4:13:87:6a:3b:07:e2:8d:c3:02:d3:e3:d2:95:49:
fd:6e:a5:c7:d9:21:b3:b0:65:ea:5b:a2:70:de:84:
60:16:bf:a4:53:e3:d7:b7:1a:6a:49:99:a9:7d:c2:
76:d4:74:91:9b:a8:be:5d:dc:23:57:01:c2:6c:e1:
b3:7c:89:3c:e9:8b:5a:f3:bd:c8:b1:d5:8c:1a:a7:
80:3a:b3:96:a5:d6:af:60:87:24:d2:e9:3f:86:5d:
91:7c:fc:6b:3c:01:ce:6f:9e:12:60:94:bf:e8:70:
cc:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:87:D4:79:35:E1:13:7D:54:44:26:DB:52:88:E1:2A:9C:02:5A:C2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/32d7ad-8bf9-4274-95f8-9c953594d6b1/1/aYfUeTXhE31URCbbUojhKpwCWsI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.44.178.0/23
193.84.4.0/23
IPv6:
2a01:7660::/32
Signature Algorithm: sha256WithRSAEncryption
12:54:89:3b:e9:6e:0a:77:b5:de:30:b5:f8:30:fd:4d:8f:b3:
50:99:96:0c:48:f7:fd:55:c1:f7:dc:af:42:81:81:46:62:6b:
ea:cb:77:c1:7b:ba:09:a1:39:ca:50:0c:78:2f:29:e7:b4:79:
70:5d:b2:80:9c:04:83:b6:d9:e2:ff:9b:4c:60:34:d9:e9:ea:
ef:69:34:2b:7f:0a:ea:41:ca:a3:c9:5b:f0:d0:35:52:6c:20:
1d:b6:7d:60:94:ca:09:ea:12:84:58:41:25:a2:ac:61:ea:92:
0b:b0:c0:c3:cb:be:57:8d:87:52:29:8c:90:96:22:5e:1a:ec:
f2:80:5f:26:81:44:dd:0e:af:c0:ec:b2:dc:b4:29:dd:48:d3:
6a:5b:01:49:17:0b:55:e9:aa:b2:35:67:14:85:07:ff:82:fe:
46:67:dc:46:a0:20:f3:4a:34:9d:f6:ab:db:c1:cc:7d:43:31:
05:e4:c9:ce:36:03:68:d7:fc:25:02:8a:ed:61:ac:05:1b:93:
a8:d6:36:76:36:5b:01:20:26:30:71:2a:87:27:55:02:c7:1f:
29:14:e0:90:c0:39:d0:0f:73:2e:23:fb:15:8e:b7:e6:11:8a:
dd:e4:78:98:4a:07:9a:34:86:a0:3c:6d:f3:5b:9b:27:99:bb:
ca:73:04:f0
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgISAZQhslT7+bvci192+sNRQJSTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTE0ODQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OTg3ZDQ3OTM1ZTExMzdkNTQ0NDI2ZGI1Mjg4ZTEyYTljMDI1YWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1u0HTs3yp45grRGJWw8TwniDK5IX
Ul9WYLDIs2fbbWG9Q8hnDh+1bjaibgrIQqNC59p+Wl+xN4sYZ+5MgY2QPeWl+V3J
TsgQ/15ZXfkkJveSqhAsyVXd9dGWf2n+S+feVwYcstvoOKK/UN3YpAO9rsoS/9IG
cNwG9+1t5En1lM/nHfBcxvyWseJJsHnpNev8MighH5W0E4dqOwfijcMC0+PSlUn9
bqXH2SGzsGXqW6Jw3oRgFr+kU+PXtxpqSZmpfcJ21HSRm6i+XdwjVwHCbOGzfIk8
6Yta873IsdWMGqeAOrOWpdavYIck0uk/hl2RfPxrPAHOb54SYJS/6HDMEQIDAQAB
o4ICmTCCApUwHQYDVR0OBBYEFGmH1Hk14RN9VEQm21KI4SqcAlrCMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EwLzMyZDdh
ZC04YmY5LTQyNzQtOTVmOC05Yzk1MzU5NGQ2YjEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTAvMzJkN2Fk
LThiZjktNDI3NC05NWY4LTljOTUzNTk0ZDZiMS8xL2FZZlVlVFhoRTMxVVJDYmJV
b2poS3B3Q1dzSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQBuSyyAwQBwVQEMA0EAgACMAcDBQAqAXZgMA0G
CSqGSIb3DQEBCwUAA4IBAQASVIk76W4Kd7XeMLX4MP1Nj7NQmZYMSPf9VcH33K9C
gYFGYmvqy3fBe7oJoTnKUAx4LynntHlwXbKAnASDttni/5tMYDTZ6ervaTQrfwrq
QcqjyVvw0DVSbCAdtn1glMoJ6hKEWEEloqxh6pILsMDDy75XjYdSKYyQliJeGuzy
gF8mgUTdDq/A7LLctCndSNNqWwFJFwtV6aqyNWcUhQf/gv5GZ9xGoCDzSjSd9qvb
wcx9QzEF5MnONgNo1/wlAortYawFG5Oo1jZ2NlsBICYwcSqHJ1UCxx8pFOCQwDnQ
D3MuI/sVjrfmEYrd5HiYSgeaNIagPG3zW5snmbvKcwTw
-----END CERTIFICATE-----
Generated at Sun Apr 6 16:35:16 2025 by rpki-client