Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sHq5IlZeKz4sxj1IWlXdT8QdNX4.cer
File: sHq5IlZeKz4sxj1IWlXdT8QdNX4.cer (raw, json)
Hash identifier: VzrplxwIryGZuF8QQIm+KYoKRWbpOfoW4xJO3f8bJf8=
Subject key identifier: B0:7A:B9:22:56:5E:2B:3E:2C:C6:3D:48:5A:55:DD:4F:C4:1D:35:7E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221F84A86EB5F70BF71418040EF7D5B5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/sHq5IlZeKz4sxj1IWlXdT8QdNX4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:47:58 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.217.5.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:84:a8:6e:b5:f7:0b:f7:14:18:04:0e:f7:d5:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b07ab922565e2b3e2cc63d485a55dd4fc41d357e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5d:34:3d:2e:37:a3:c0:56:50:36:ab:03:68:
31:54:b3:77:e6:a8:29:db:ac:b8:7b:aa:90:a4:0f:
89:fd:5b:62:1e:2c:91:ee:94:4b:3f:71:5e:92:b0:
68:10:41:7f:78:71:05:73:0e:cd:36:2e:78:f9:df:
e9:60:ac:d2:5e:13:de:b2:72:85:b4:6a:fe:2d:59:
ed:a9:be:fc:32:8e:e0:27:4a:ab:ad:b5:61:d0:f5:
d5:6e:bc:30:4b:01:ae:34:75:96:47:1e:60:c1:0b:
51:4e:7f:ab:b3:48:a1:d7:e4:f6:04:88:71:c0:44:
e2:40:d6:7b:c6:07:c3:87:65:73:c9:c0:47:4a:36:
93:d4:3c:79:33:93:28:01:ff:32:7a:7a:0f:f9:21:
38:f3:82:d1:9a:4f:ac:1b:e8:c0:79:51:69:0c:72:
74:88:d4:ee:7a:f2:e5:b3:a0:eb:e5:a2:79:2c:18:
a0:26:b6:b2:71:dd:2e:01:e2:67:4f:06:fb:42:87:
72:6a:e8:6c:a6:c5:81:0b:a7:b3:ba:8a:dc:7f:72:
13:0b:97:b9:66:5f:03:8b:64:3c:37:59:43:2c:9a:
99:ab:54:c3:25:e4:00:72:95:81:ea:5f:a8:31:94:
33:75:e2:72:21:cc:84:05:ab:92:96:03:32:e1:57:
40:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:7A:B9:22:56:5E:2B:3E:2C:C6:3D:48:5A:55:DD:4F:C4:1D:35:7E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d59d9-9daf-4fcb-8d05-13bcc752119a/1/sHq5IlZeKz4sxj1IWlXdT8QdNX4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.5.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:7a:4b:7a:c7:59:92:82:9f:04:89:12:9b:48:4f:7e:c6:ee:
18:ee:87:42:c9:01:b9:1c:4c:95:1e:f4:9a:4c:80:35:5f:1a:
7d:8d:2e:ba:49:f6:aa:1b:c2:42:b5:1f:b3:66:2a:e9:f8:6f:
9e:23:27:23:38:23:ab:fc:c9:c0:e4:31:e9:16:ec:ab:94:2a:
42:18:c2:a4:89:65:be:18:04:36:f0:c6:ae:4f:af:3f:ed:74:
bf:e6:e6:22:42:9a:a7:c9:cb:f7:33:f4:c7:40:c4:64:23:91:
be:e5:b5:c5:30:7b:c9:cf:54:c3:47:d8:72:8b:7b:e2:12:75:
47:b4:68:a9:90:e1:ad:48:97:a3:4e:02:fd:4e:7e:f6:34:91:
16:f2:95:32:78:c0:1a:32:5d:48:29:e1:db:3a:ac:a9:a2:48:
fd:ee:02:7e:3d:45:44:b4:02:45:e0:4d:03:a0:96:61:e3:f9:
15:83:00:11:96:98:81:89:87:ae:c5:a1:83:f8:ed:40:b7:b8:
2f:af:40:ff:ae:65:c1:66:a5:ee:7f:e9:7a:78:62:08:91:71:
69:43:7c:9d:7c:9b:21:51:af:fc:9c:c2:de:02:05:01:2f:e7:
90:6c:8f:c4:82:55:01:45:f3:a3:a5:fa:e3:d6:94:5d:d9:08:
8d:9b:96:75
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQiH4SobrX3C/cUGAQO99W1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTM0NzU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMDdhYjkyMjU2NWUyYjNlMmNjNjNkNDg1YTU1ZGQ0ZmM0MWQzNTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvF00PS43o8BWUDarA2gxVLN35qgp
26y4e6qQpA+J/VtiHiyR7pRLP3FekrBoEEF/eHEFcw7NNi54+d/pYKzSXhPesnKF
tGr+LVntqb78Mo7gJ0qrrbVh0PXVbrwwSwGuNHWWRx5gwQtRTn+rs0ih1+T2BIhx
wETiQNZ7xgfDh2VzycBHSjaT1Dx5M5MoAf8yenoP+SE484LRmk+sG+jAeVFpDHJ0
iNTuevLls6Dr5aJ5LBigJraycd0uAeJnTwb7QodyauhspsWBC6ezuorcf3ITC5e5
Zl8Di2Q8N1lDLJqZq1TDJeQAcpWB6l+oMZQzdeJyIcyEBauSlgMy4VdAtwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFLB6uSJWXis+LMY9SFpV3U/EHTV+MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJlLzZkNTlk
OS05ZGFmLTRmY2ItOGQwNS0xM2JjYzc1MjExOWEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmUvNmQ1OWQ5
LTlkYWYtNGZjYi04ZDA1LTEzYmNjNzUyMTE5YS8xL3NIcTVJbFplS3o0c3hqMUlX
bFhkVDhRZE5YNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAudkFMA0GCSqGSIb3DQEBCwUAA4IBAQCfekt6
x1mSgp8EiRKbSE9+xu4Y7odCyQG5HEyVHvSaTIA1Xxp9jS66SfaqG8JCtR+zZirp
+G+eIycjOCOr/MnA5DHpFuyrlCpCGMKkiWW+GAQ28MauT68/7XS/5uYiQpqnycv3
M/THQMRkI5G+5bXFMHvJz1TDR9hyi3viEnVHtGipkOGtSJejTgL9Tn72NJEW8pUy
eMAaMl1IKeHbOqypokj97gJ+PUVEtAJF4E0DoJZh4/kVgwARlpiBiYeuxaGD+O1A
t7gvr0D/rmXBZqXuf+l6eGIIkXFpQ3ydfJshUa/8nMLeAgUBL+eQbI/EglUBRfOj
pfrj1pRd2QiNm5Z1
-----END CERTIFICATE-----
Generated at Sun Apr 6 06:51:49 2025 by rpki-client