Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94ItRZflST0VF4v7EOaEHdF-WJc.cer
File: 94ItRZflST0VF4v7EOaEHdF-WJc.cer (raw, json)
Hash identifier: vU+4czI2AQNWSRfRmOq9W9kJA2u/uIsFMOpzwM94VVk=
Subject key identifier: F7:82:2D:45:97:E5:49:3D:15:17:8B:FB:10:E6:84:1D:D1:7E:58:97
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228DD4399D5A0285A570DFC59D768A32
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/94ItRZflST0VF4v7EOaEHdF-WJc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:27 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 12551
AS: 202098
IP: 146.133.0.0/16
IP: 158.47.0.0/16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:d4:39:9d:5a:02:85:a5:70:df:c5:9d:76:8a:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f7822d4597e5493d15178bfb10e6841dd17e5897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:13:05:a3:67:ee:33:5c:c4:7f:77:3a:f1:d6:
bc:8f:a7:1e:1e:8e:e1:6e:b6:7d:9a:05:33:60:e7:
22:78:9b:82:fa:b9:65:b2:de:e1:74:b3:e3:35:72:
63:cb:47:9a:31:8a:4b:1a:05:e9:dc:06:b9:a3:80:
79:06:3f:91:4c:53:90:c0:69:c7:52:7d:81:79:72:
55:74:2a:e5:9d:34:a7:9d:7f:c9:0e:0e:06:3e:43:
69:52:68:e7:07:0d:bf:17:76:75:95:7d:4e:cd:57:
5f:6b:5f:3d:76:e5:db:3b:73:f6:15:3f:d2:90:30:
ae:dc:4c:2b:23:af:cb:fd:af:53:25:1a:dc:7b:a8:
72:dd:43:90:30:2a:b5:2f:ac:c8:de:76:66:37:cc:
84:82:cb:1a:b0:74:8b:c4:c8:3d:9f:ee:e2:b5:75:
ed:bc:65:c9:a4:c1:41:44:af:54:a2:5c:24:80:8f:
ad:8d:c7:38:12:a6:38:ac:41:75:1b:5c:42:9a:9a:
ab:49:88:e4:f1:47:6a:be:a8:68:ab:2a:bd:19:7f:
a2:46:34:47:7a:6b:39:f5:72:d4:dc:eb:67:c5:34:
45:b5:43:de:67:4d:72:19:72:bf:f2:8a:4a:a3:42:
1e:e7:6e:21:26:04:62:61:2d:f0:d3:43:62:f0:1b:
4f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:82:2D:45:97:E5:49:3D:15:17:8B:FB:10:E6:84:1D:D1:7E:58:97
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/94ItRZflST0VF4v7EOaEHdF-WJc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.133.0.0/16
158.47.0.0/16
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12551
202098
Signature Algorithm: sha256WithRSAEncryption
ad:f0:c9:a5:2e:6a:a1:dc:51:8b:7e:a2:d2:fb:70:e2:b6:92:
3c:ef:02:23:e1:b5:51:79:df:00:f2:cb:c9:cf:bb:0b:2d:8f:
ba:ea:87:47:88:fc:ee:81:df:3f:b1:27:55:44:49:ed:75:a8:
6e:85:ad:f7:50:0e:e1:51:3e:9a:20:84:6f:f4:d7:5e:bc:60:
8c:1c:33:fb:fa:8f:94:2e:a0:34:ac:fb:eb:03:94:0e:ab:6a:
23:30:10:38:90:68:8d:56:1e:3d:b6:08:d1:3d:30:5f:6f:c9:
28:28:60:6e:66:0d:c6:b4:a8:8f:05:33:36:dc:fc:11:a6:da:
b9:2a:07:eb:5d:26:f2:a6:57:a4:53:b7:e8:c9:bd:d3:a4:6b:
27:26:30:5c:54:30:ec:6d:1d:6c:b0:85:97:a0:7e:85:d8:76:
e6:74:7f:54:fa:8c:16:97:57:7b:21:a4:ac:ca:ee:71:24:db:
96:31:4d:dd:eb:05:a9:4d:18:7d:bf:53:f6:89:27:cc:be:77:
f1:f1:d6:1c:e2:b2:21:87:7c:dd:81:d1:85:6d:0a:34:ba:83:
07:b4:49:ae:fe:e1:f7:ff:dc:60:d4:6e:c1:23:05:87:c7:86:
4a:45:10:90:82:e1:f6:09:33:7e:b6:24:30:9e:5b:a9:f7:68:
03:02:4d:40
-----BEGIN CERTIFICATE-----
MIIFnDCCBISgAwIBAgISAZQijdQ5nVoChaVw38WddooyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTU0ODI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzgyMmQ0NTk3ZTU0OTNkMTUxNzhiZmIxMGU2ODQxZGQxN2U1ODk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBMFo2fuM1zEf3c68da8j6ceHo7h
brZ9mgUzYOcieJuC+rllst7hdLPjNXJjy0eaMYpLGgXp3Aa5o4B5Bj+RTFOQwGnH
Un2BeXJVdCrlnTSnnX/JDg4GPkNpUmjnBw2/F3Z1lX1OzVdfa189duXbO3P2FT/S
kDCu3EwrI6/L/a9TJRrce6hy3UOQMCq1L6zI3nZmN8yEgssasHSLxMg9n+7itXXt
vGXJpMFBRK9UolwkgI+tjcc4EqY4rEF1G1xCmpqrSYjk8Udqvqhoqyq9GX+iRjRH
ems59XLU3OtnxTRFtUPeZ01yGXK/8opKo0Ie524hJgRiYS3w00Ni8BtPAQIDAQAB
o4ICqDCCAqQwHQYDVR0OBBYEFPeCLUWX5Uk9FReL+xDmhB3RfliXMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YzLzMxMDgx
YS04YjVhLTQ5ZWMtOTAzNi04NjJlOTk5NzNmYzMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjMvMzEwODFh
LThiNWEtNDllYy05MDM2LTg2MmU5OTk3M2ZjMy8xLzk0SXRSWmZsU1QwVkY0djdF
T2FFSGRGLVdKYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCMGCCsGAQUF
BwEHAQH/BBQwEjAQBAIAATAKAwMAkoUDAwCeLzAeBggrBgEFBQcBCAEB/wQPMA2g
CzAJAgIxBwIDAxVyMA0GCSqGSIb3DQEBCwUAA4IBAQCt8MmlLmqh3FGLfqLS+3Di
tpI87wIj4bVRed8A8svJz7sLLY+66odHiPzugd8/sSdVREntdahuha33UA7hUT6a
IIRv9NdevGCMHDP7+o+ULqA0rPvrA5QOq2ojMBA4kGiNVh49tgjRPTBfb8koKGBu
Zg3GtKiPBTM23PwRptq5KgfrXSbyplekU7foyb3TpGsnJjBcVDDsbR1ssIWXoH6F
2HbmdH9U+owWl1d7IaSsyu5xJNuWMU3d6wWpTRh9v1P2iSfMvnfx8dYc4rIhh3zd
gdGFbQo0uoMHtEmu/uH3/9xg1G7BIwWHx4ZKRRCQguH2CTN+tiQwnlup92gDAk1A
-----END CERTIFICATE-----
Generated at Thu Apr 10 04:18:27 2025 by rpki-client