Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8aqhbd2NihLf0OUyEXA62VLjshQ.cer
File: 8aqhbd2NihLf0OUyEXA62VLjshQ.cer (raw, json)
Hash identifier: OXqi2aXchkgCzlwLm8JemOAocCJ53gju7mE8LneqPdo=
Subject key identifier: F1:AA:A1:6D:DD:8D:8A:12:DF:D0:E5:32:11:70:3A:D9:52:E3:B2:14
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221FA2A7A51D30B5A759BC7D376E97BA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1c/4eaca0-8db9-4d0a-ba22-8a9935da0588/1/8aqhbd2NihLf0OUyEXA62VLjshQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1c/4eaca0-8db9-4d0a-ba22-8a9935da0588/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:06 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.201.220.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:a2:a7:a5:1d:30:b5:a7:59:bc:7d:37:6e:97:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f1aaa16ddd8d8a12dfd0e53211703ad952e3b214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:68:67:82:5d:46:ab:48:d8:8c:6a:fe:cb:ad:
77:dc:98:40:aa:f1:81:fb:86:b9:f9:ab:e6:38:ef:
d1:7c:bd:78:bc:bd:be:eb:49:70:e4:66:8d:25:91:
9e:7b:6e:72:93:be:de:0b:0d:05:ae:e9:e6:b2:c2:
10:2a:3e:a3:02:fc:91:43:bc:fc:27:b8:66:3a:a5:
9f:74:4e:27:53:fb:2e:ca:3a:b7:7f:d6:c1:fa:0a:
8a:71:61:73:2f:6b:88:f9:92:c3:49:20:aa:03:ef:
aa:3d:ba:f1:4a:87:c2:da:a6:71:67:ee:01:03:15:
e6:5d:6b:43:82:01:d2:e1:3e:a9:d2:21:9b:95:cb:
25:d9:c2:e5:76:83:48:0c:c3:9d:b8:30:88:92:71:
b9:80:cf:a0:b3:3d:5d:e0:95:c7:c4:84:c2:ff:76:
8c:d7:97:c5:0d:38:84:b5:95:25:1b:eb:64:8a:ec:
be:92:b2:1b:95:52:69:54:f3:bb:0c:59:8d:96:2f:
be:20:fa:77:d2:72:dd:30:db:75:8c:4f:5b:db:71:
ac:44:fa:99:a6:cd:99:2b:35:5c:fb:1d:6f:8c:16:
d0:fb:a2:a7:eb:2d:ce:92:8a:0f:11:68:e2:03:1b:
20:96:9d:44:19:44:41:dd:64:49:22:16:f9:8f:62:
ee:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:AA:A1:6D:DD:8D:8A:12:DF:D0:E5:32:11:70:3A:D9:52:E3:B2:14
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4eaca0-8db9-4d0a-ba22-8a9935da0588/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4eaca0-8db9-4d0a-ba22-8a9935da0588/1/8aqhbd2NihLf0OUyEXA62VLjshQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.220.0/22
Signature Algorithm: sha256WithRSAEncryption
49:19:68:bd:c2:ff:07:49:35:ca:e0:27:9e:9e:e4:37:a9:09:
f0:f3:16:c6:7b:b1:b2:10:c9:2d:c2:16:d1:d7:a3:6a:25:d0:
7c:65:2b:70:5a:bf:de:43:11:7c:fb:fd:9e:68:51:8d:7a:5e:
0a:5a:28:75:7f:4a:7a:29:41:74:5f:18:fe:fd:82:39:5f:3a:
eb:65:ab:ec:8c:94:07:d0:c9:d5:03:5b:de:6e:f2:a8:9e:d8:
86:0b:53:91:9a:b3:3c:6b:7c:d5:78:24:54:b4:3b:d3:0b:d0:
e0:f9:a0:4f:13:57:89:76:08:8d:20:6a:9d:57:61:6e:ab:23:
5f:2d:ad:0e:63:e2:12:b4:d8:ca:18:e0:fa:41:dd:39:9a:53:
24:7e:ef:cc:eb:30:b9:ce:c1:17:82:8d:6c:14:bb:55:7a:86:
d0:9a:fe:1a:de:f7:d6:eb:50:01:fe:c5:5e:d8:a4:de:42:97:
dd:14:bf:14:e4:97:4d:3c:5d:a9:9e:4d:13:2a:db:d0:50:93:
d0:57:5e:b4:4c:ec:4c:9c:bb:09:15:6e:0e:61:5e:3b:a6:61:
99:77:4b:88:22:e8:ba:82:02:20:c2:b1:80:27:31:85:3d:f4:
31:1b:51:51:70:02:93:4e:19:26:77:c8:8b:03:49:85:2b:98:
e9:dd:21:1a
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQiH6KnpR0wtadZvH03bpe6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTM0ODA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMWFhYTE2ZGRkOGQ4YTEyZGZkMGU1MzIxMTcwM2FkOTUyZTNiMjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWhngl1Gq0jYjGr+y6133JhAqvGB
+4a5+avmOO/RfL14vL2+60lw5GaNJZGee25yk77eCw0FrunmssIQKj6jAvyRQ7z8
J7hmOqWfdE4nU/suyjq3f9bB+gqKcWFzL2uI+ZLDSSCqA++qPbrxSofC2qZxZ+4B
AxXmXWtDggHS4T6p0iGblcsl2cLldoNIDMOduDCIknG5gM+gsz1d4JXHxITC/3aM
15fFDTiEtZUlG+tkiuy+krIblVJpVPO7DFmNli++IPp30nLdMNt1jE9b23GsRPqZ
ps2ZKzVc+x1vjBbQ+6Kn6y3OkooPEWjiAxsglp1EGURB3WRJIhb5j2LuBQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFPGqoW3djYoS39DlMhFwOtlS47IUMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFjLzRlYWNh
MC04ZGI5LTRkMGEtYmEyMi04YTk5MzVkYTA1ODgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWMvNGVhY2Ew
LThkYjktNGQwYS1iYTIyLThhOTkzNWRhMDU4OC8xLzhhcWhiZDJOaWhMZjBPVXlF
WEE2MlZManNoUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCucncMA0GCSqGSIb3DQEBCwUAA4IBAQBJGWi9
wv8HSTXK4CeenuQ3qQnw8xbGe7GyEMktwhbR16NqJdB8ZStwWr/eQxF8+/2eaFGN
el4KWih1f0p6KUF0Xxj+/YI5XzrrZavsjJQH0MnVA1vebvKontiGC1ORmrM8a3zV
eCRUtDvTC9Dg+aBPE1eJdgiNIGqdV2FuqyNfLa0OY+IStNjKGOD6Qd05mlMkfu/M
6zC5zsEXgo1sFLtVeobQmv4a3vfW61AB/sVe2KTeQpfdFL8U5JdNPF2pnk0TKtvQ
UJPQV160TOxMnLsJFW4OYV47pmGZd0uIIui6ggIgwrGAJzGFPfQxG1FRcAKTThkm
d8iLA0mFK5jp3SEa
-----END CERTIFICATE-----
Generated at Tue Apr 8 21:46:06 2025 by rpki-client