Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5Xcx6oV7kDqkCo5f2NiERlBbUjM.cer
File: 5Xcx6oV7kDqkCo5f2NiERlBbUjM.cer (raw, json)
Hash identifier: YZWpwkiRYEd4NrFWylC7fowd5tNAjd6vhF7bZsPlGws=
Subject key identifier: E5:77:31:EA:85:7B:90:3A:A4:0A:8E:5F:D8:D8:84:46:50:5B:52:33
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019547ACADE18835A8266817F5D5ADF0ED97
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 27 Feb 2025 13:50:53 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 1890
IP: 193.67.0.0/16
IP: 193.78.0.0/15
IP: 194.178.0.0/16
IP: 194.229.0.0/16
IP: 194.247.96.0/19
IP: 195.108.0.0/15
IP: 195.193.0.0/16
IP: 212.136.0.0/16
IP: 212.153.0.0/16
IP: 212.206.0.0/16
IP: 213.53.0.0/16
IP: 2a02:2aa8::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:47:ac:ad:e1:88:35:a8:26:68:17:f5:d5:ad:f0:ed:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 27 13:50:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e57731ea857b903aa40a8e5fd8d88446505b5233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5f:c9:d7:ea:dd:a0:e0:b6:d1:57:71:20:66:
51:34:97:8c:64:82:62:9f:6d:bf:f3:95:0d:10:bc:
57:5e:da:98:99:7b:80:73:5e:3b:7c:d5:50:76:79:
ab:96:8b:17:97:38:a3:9f:a5:81:63:2c:10:72:6b:
e2:cd:74:e7:79:b7:1e:0c:19:a7:98:57:8a:21:45:
1f:b8:7c:1c:59:1c:13:ff:0d:24:5b:e5:00:61:53:
d6:75:8e:2d:48:4e:7c:96:19:20:ad:f4:0a:34:19:
72:c9:97:81:e8:4f:e0:af:4c:19:ae:d0:fe:ea:5e:
64:ce:8b:24:a1:bf:31:31:77:2e:fe:8c:92:e5:19:
bc:a5:e6:e7:b3:7e:bd:cb:8c:2c:11:68:d8:c9:bd:
b7:55:f9:e1:13:f1:0a:62:5f:d1:7d:79:4e:63:40:
c6:32:92:36:74:9f:46:3e:b7:26:52:72:b8:01:f9:
9b:34:ad:e4:43:05:38:44:8d:59:dd:eb:a3:4e:de:
ca:bb:d1:d2:c0:b3:bd:0e:fc:22:0d:da:db:76:0b:
5b:56:11:bd:c6:6a:5d:7f:0a:4e:ca:1e:10:f4:b3:
bd:ed:f7:24:1d:54:b8:7e:10:4e:e4:62:e3:ab:77:
97:f8:0b:0a:ad:bc:ad:1d:2c:67:89:bb:70:47:e2:
7c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:77:31:EA:85:7B:90:3A:A4:0A:8E:5F:D8:D8:84:46:50:5B:52:33
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.67.0.0/16
193.78.0.0/15
194.178.0.0/16
194.229.0.0/16
194.247.96.0/19
195.108.0.0/15
195.193.0.0/16
212.136.0.0/16
212.153.0.0/16
212.206.0.0/16
213.53.0.0/16
IPv6:
2a02:2aa8::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
1890
Signature Algorithm: sha256WithRSAEncryption
45:ac:f2:fa:b5:ae:83:55:c7:d9:51:25:1b:95:e9:af:4b:79:
47:92:62:ee:f3:2f:fe:2b:77:b6:e2:5e:18:f6:63:4f:5d:b8:
4e:fa:47:c8:d5:ab:88:f3:2b:4a:c0:48:a9:e5:68:ca:f5:2d:
64:d2:8e:41:67:45:ff:c1:71:20:8f:81:da:be:b2:da:75:61:
3b:57:c7:5d:ea:df:67:df:97:7f:f2:9a:17:57:f5:65:45:d8:
4b:cd:85:f1:8a:5f:d5:17:53:9e:81:e0:02:21:41:9d:fb:d0:
08:ae:62:27:7c:bf:2c:dc:73:90:70:d6:e7:b2:8b:fa:84:76:
8e:f1:cd:4b:a1:42:8f:b0:7b:71:47:1e:d7:d2:44:e8:28:8e:
2a:4d:8d:9f:d4:a1:36:51:e4:3c:5e:e2:65:d9:d7:4c:1e:8e:
8d:53:2c:7f:75:3a:58:01:68:76:48:4f:ee:b7:b5:61:c3:10:
39:39:4b:c1:36:96:d0:3c:e8:af:fb:cb:eb:9b:f5:84:a7:6f:
c3:0e:b7:05:dc:d3:80:08:17:21:2d:68:2a:56:ca:36:de:02:
4f:6e:78:dd:d0:e2:19:e4:87:48:a7:db:bd:de:e4:6b:7c:d3:
c0:dc:5c:3e:e5:06:ee:d6:76:f6:58:4e:27:84:64:ac:36:ab:
dc:67:6f:23
-----BEGIN CERTIFICATE-----
MIIF1DCCBLygAwIBAgISAZVHrK3hiDWoJmgX9dWt8O2XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMjI3MTM1MDUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNTc3MzFlYTg1N2I5MDNhYTQwYThlNWZkOGQ4ODQ0NjUwNWI1MjMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArV/J1+rdoOC20VdxIGZRNJeMZIJi
n22/85UNELxXXtqYmXuAc147fNVQdnmrlosXlzijn6WBYywQcmvizXTnebceDBmn
mFeKIUUfuHwcWRwT/w0kW+UAYVPWdY4tSE58lhkgrfQKNBlyyZeB6E/gr0wZrtD+
6l5kzoskob8xMXcu/oyS5Rm8pebns369y4wsEWjYyb23VfnhE/EKYl/RfXlOY0DG
MpI2dJ9GPrcmUnK4AfmbNK3kQwU4RI1Z3eujTt7Ku9HSwLO9DvwiDdrbdgtbVhG9
xmpdfwpOyh4Q9LO97fckHVS4fhBO5GLjq3eX+AsKrbytHSxnibtwR+J8OQIDAQAB
o4IC4DCCAtwwHQYDVR0OBBYEFOV3MeqFe5A6pAqOX9jYhEZQW1IzMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NhL2FmYmI2
Mi0wMDk4LTQyYjMtODFhZS1mMGJiMmUxNWY2ZDAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2EvYWZiYjYy
LTAwOTgtNDJiMy04MWFlLWYwYmIyZTE1ZjZkMC8xLzVYY3g2b1Y3a0Rxa0NvNWYy
TmlFUmxCYlVqTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGAGCCsGAQUF
BwEHAQH/BFEwTzA+BAIAATA4AwMAwUMDAwHBTgMDAMKyAwMAwuUDBAXC92ADAwHD
bAMDAMPBAwMA1IgDAwDUmQMDANTOAwMA1TUwDQQCAAIwBwMFAyoCKqgwGQYIKwYB
BQUHAQgBAf8ECjAIoAYwBAICB2IwDQYJKoZIhvcNAQELBQADggEBAEWs8vq1roNV
x9lRJRuV6a9LeUeSYu7zL/4rd7biXhj2Y09duE76R8jVq4jzK0rASKnlaMr1LWTS
jkFnRf/BcSCPgdq+stp1YTtXx13q32ffl3/ymhdX9WVF2EvNhfGKX9UXU56B4AIh
QZ370AiuYid8vyzcc5Bw1ueyi/qEdo7xzUuhQo+we3FHHtfSROgojipNjZ/UoTZR
5Dxe4mXZ10wejo1TLH91OlgBaHZIT+63tWHDEDk5S8E2ltA86K/7y+ub9YSnb8MO
twXc04AIFyEtaCpWyjbeAk9ueN3Q4hnkh0in273e5Gt808DcXD7lBu7WdvZYTieE
ZKw2q9xnbyM=
-----END CERTIFICATE-----
Generated at Wed Apr 9 13:40:02 2025 by rpki-client