Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-Pc8XA86EGqLp9_z41yBbRB43HE.cer
File: 1-Pc8XA86EGqLp9_z41yBbRB43HE.cer (raw, json)
Hash identifier: H3BxiwXMTDvsO9Pc+gVDuHkhDTvaqUEuOGrRwPvOe7Q=
Subject key identifier: F8:F7:3C:5C:0F:3A:10:6A:8B:A7:DF:F3:E3:5C:81:6D:10:78:DC:71
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019546BD676296BD946C92BBE5D0558BEAD9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 27 Feb 2025 09:29:32 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 198605
IP: 5.45.56.0/21
IP: 31.14.72.0/22
IP: 37.156.184.0/22
IP: 69.94.64.0/20
IP: 77.234.40.0/21
IP: 91.213.143.0/24
IP: 185.51.228.0/22
IP: 185.167.64.0/21
IP: 185.189.92.0/22
IP: 195.74.76.0/24
IP: 2001:67c:284::/48
IP: 2a00:d040::/32
IP: 2a0b:e180::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:46:bd:67:62:96:bd:94:6c:92:bb:e5:d0:55:8b:ea:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 27 09:29:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8f73c5c0f3a106a8ba7dff3e35c816d1078dc71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:60:62:70:ae:57:e5:05:86:fd:50:ef:3b:dd:
a0:1f:30:98:9d:73:c6:8f:78:aa:20:f3:74:9e:25:
ca:ba:46:d2:7d:e9:49:60:5f:36:2f:4a:99:17:3b:
2a:49:d4:4c:2e:62:f9:ef:10:cd:83:47:25:00:5b:
3b:dd:4d:73:2c:24:1d:19:51:0a:4f:7c:5e:4f:ef:
96:a7:24:62:57:03:81:d0:ce:67:b1:f3:e8:8c:54:
aa:86:89:c0:99:99:02:09:1c:85:68:c8:b7:59:5c:
d6:66:d7:8d:81:03:f8:f8:e2:0c:0b:47:a1:ec:a6:
0b:fe:f4:94:b9:8d:14:01:dd:3c:99:6b:a6:38:d2:
ad:b7:53:50:40:31:b2:d3:98:98:24:21:f1:1e:d3:
0d:ac:85:b4:a7:57:56:30:33:22:d1:01:32:d2:01:
2e:e2:56:9b:72:1c:43:95:e5:bd:60:b5:17:c2:0c:
1c:cf:a9:e6:d0:77:1c:b6:31:e6:c0:f5:13:28:dd:
11:af:fc:fa:d1:60:47:df:fa:98:f4:ca:6d:61:47:
8a:5f:d2:8e:65:8e:2b:37:96:45:94:eb:3b:7e:bc:
37:49:1d:01:0b:6b:d5:39:c1:f1:54:07:dc:20:14:
63:0f:dc:7f:1e:a7:2f:45:49:a2:ac:99:0f:40:a4:
d3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:F7:3C:5C:0F:3A:10:6A:8B:A7:DF:F3:E3:5C:81:6D:10:78:DC:71
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.45.56.0/21
31.14.72.0/22
37.156.184.0/22
69.94.64.0/20
77.234.40.0/21
91.213.143.0/24
185.51.228.0/22
185.167.64.0/21
185.189.92.0/22
195.74.76.0/24
IPv6:
2001:67c:284::/48
2a00:d040::/32
2a0b:e180::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198605
Signature Algorithm: sha256WithRSAEncryption
23:83:36:ce:b5:e8:49:64:81:59:ca:43:94:6c:f7:91:10:0a:
99:92:2c:df:f0:30:f2:bb:b5:eb:83:12:5c:99:45:cd:55:a9:
f4:18:90:22:5c:62:20:d2:14:60:81:d6:52:b0:5a:68:58:11:
64:3d:59:07:c0:63:18:1b:0e:f5:4b:08:44:3a:e9:64:31:54:
88:40:d3:cd:45:04:d9:5f:7e:14:e6:d9:18:ba:0c:d6:43:f5:
28:fb:c4:f3:18:f6:71:d6:81:6b:94:f8:a8:8f:d8:84:1c:58:
19:c5:ca:ae:4d:41:7d:b8:46:67:a1:42:27:2b:6b:20:47:4f:
99:73:2b:64:cc:67:8e:44:33:91:5a:2f:f9:85:1f:56:6a:97:
dc:4f:4b:05:b0:9b:f6:6b:00:47:37:98:86:4f:6e:ae:73:13:
31:d6:5b:cc:23:01:fa:47:97:3a:e7:25:97:2f:55:c2:c3:2d:
6b:40:c4:ac:d2:8e:bb:51:cf:d1:9e:1d:1d:58:25:e8:6f:62:
c3:13:60:8e:b0:1f:44:a2:8a:9d:96:01:c4:90:ed:f1:36:3d:
25:fd:08:db:d6:08:2c:cf:21:ba:cc:d7:8b:3b:a9:1e:48:ab:
80:12:51:71:e2:34:df:53:01:fd:d9:5f:a6:d8:f5:f8:68:f3:
29:fc:17:42
-----BEGIN CERTIFICATE-----
MIIF6jCCBNKgAwIBAgISAZVGvWdilr2UbJK75dBVi+rZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMjI3MDkyOTMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOGY3M2M1YzBmM2ExMDZhOGJhN2RmZjNlMzVjODE2ZDEwNzhkYzcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimBicK5X5QWG/VDvO92gHzCYnXPG
j3iqIPN0niXKukbSfelJYF82L0qZFzsqSdRMLmL57xDNg0clAFs73U1zLCQdGVEK
T3xeT++WpyRiVwOB0M5nsfPojFSqhonAmZkCCRyFaMi3WVzWZteNgQP4+OIMC0eh
7KYL/vSUuY0UAd08mWumONKtt1NQQDGy05iYJCHxHtMNrIW0p1dWMDMi0QEy0gEu
4labchxDleW9YLUXwgwcz6nm0HcctjHmwPUTKN0Rr/z60WBH3/qY9MptYUeKX9KO
ZY4rN5ZFlOs7frw3SR0BC2vVOcHxVAfcIBRjD9x/HqcvRUmirJkPQKTTuwIDAQAB
o4IC9jCCAvIwHQYDVR0OBBYEFPj3PFwPOhBqi6ff8+NcgW0QeNxxMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzI2LzAzY2Nl
My1lNjIwLTQ0ODMtYjA4Yi02ZDhmZDMzMGU5YWEvMS8wfQYIKwYBBQUHMAqGcXJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjYvMDNjY2Uz
LWU2MjAtNDQ4My1iMDhiLTZkOGZkMzMwZTlhYS8xLzEtUGM4WEE4NkVHcUxwOV96
NDF5QmJSQjQzSEUubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u
ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD
MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjB0BggrBgEF
BQcBBwEB/wRlMGMwQgQCAAEwPAMEAwUtOAMEAh8OSAMEAiWcuAMEBEVeQAMEA03q
KAMEAFvVjwMEArkz5AMEA7mnQAMEArm9XAMEAMNKTDAdBAIAAjAXAwcAIAEGfAKE
AwUAKgDQQAMFAyoL4YAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAwfNMA0GCSqG
SIb3DQEBCwUAA4IBAQAjgzbOtehJZIFZykOUbPeREAqZkizf8DDyu7XrgxJcmUXN
Van0GJAiXGIg0hRggdZSsFpoWBFkPVkHwGMYGw71SwhEOulkMVSIQNPNRQTZX34U
5tkYugzWQ/Uo+8TzGPZx1oFrlPioj9iEHFgZxcquTUF9uEZnoUInK2sgR0+Zcytk
zGeORDORWi/5hR9WapfcT0sFsJv2awBHN5iGT26ucxMx1lvMIwH6R5c65yWXL1XC
wy1rQMSs0o67Uc/Rnh0dWCXob2LDE2COsB9EooqdlgHEkO3xNj0l/Qjb1ggszyG6
zNeLO6keSKuAElFx4jTfUwH92V+m2PX4aPMp/BdC
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:42:03 2025 by rpki-client