Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94tjVHSP4-hS4GSYKCwhVAB1_GY.cer
File: 94tjVHSP4-hS4GSYKCwhVAB1_GY.cer (raw, json)
Hash identifier: 8mhtbFZHMi68Xos2KnuzGrTr8wXXYjhHTS9k8JQry6k=
Subject key identifier: F7:8B:63:54:74:8F:E3:E8:52:E0:64:98:28:2C:21:54:00:75:FC:66
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D965246E6F7CDCB6A0C81A63C84D84
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a3/42710b-65c3-4c0f-ae97-b1f4384313c0/1/94tjVHSP4-hS4GSYKCwhVAB1_GY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a3/42710b-65c3-4c0f-ae97-b1f4384313c0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:28 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.47.0.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:65:24:6e:6f:7c:dc:b6:a0:c8:1a:63:c8:4d:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f78b6354748fe3e852e06498282c21540075fc66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:14:0c:63:d9:d5:64:ea:2e:84:03:37:37:97:
80:63:fd:06:02:dd:91:ff:34:47:28:2f:fc:61:4d:
a3:8a:55:8e:45:7e:95:a2:14:48:b9:c1:e5:8b:c3:
f6:b0:27:d6:72:c4:10:fe:05:06:5d:1d:a2:ce:c8:
70:74:58:34:af:08:7d:86:44:f6:41:58:bc:be:c9:
0f:21:fb:36:9f:21:0a:02:d2:c3:43:17:0a:0b:df:
5e:3b:68:37:8f:bd:18:c5:06:d9:71:e0:05:aa:c5:
11:c9:9b:79:8b:ac:f3:5c:79:86:88:c5:da:4e:87:
d3:ea:5e:6c:7d:0f:dd:42:74:f8:c4:f5:d8:3b:13:
34:27:4e:54:8f:8b:4a:30:d4:db:20:ad:56:6c:30:
44:66:1d:79:ad:d1:c7:0a:63:f1:29:d0:76:7f:7c:
03:f0:36:a1:d8:f2:3c:b9:14:4c:00:53:e7:90:9e:
02:8f:c5:14:c1:8a:e1:4f:d5:6c:ab:a1:54:e5:33:
1d:47:fb:36:b5:9e:24:0c:b8:5b:1d:6d:51:91:95:
5b:bc:30:65:22:78:bc:13:f5:26:1a:e8:94:c2:e0:
d6:4a:eb:64:ea:94:a7:ea:52:57:4c:dd:b4:11:6e:
15:52:09:a4:21:f6:f3:b1:18:79:06:96:89:6e:b4:
8b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:8B:63:54:74:8F:E3:E8:52:E0:64:98:28:2C:21:54:00:75:FC:66
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/42710b-65c3-4c0f-ae97-b1f4384313c0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/42710b-65c3-4c0f-ae97-b1f4384313c0/1/94tjVHSP4-hS4GSYKCwhVAB1_GY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.47.0.0/24
Signature Algorithm: sha256WithRSAEncryption
41:5d:a8:9e:cd:31:e5:3f:bf:bc:49:1c:9e:00:39:09:c2:21:
bc:e4:8d:40:f9:8b:0f:4c:d9:28:7a:3b:5f:cc:13:05:09:36:
1a:88:e6:3f:4e:eb:9e:d3:59:09:bc:2e:08:fe:0a:f1:87:ff:
d6:dc:24:62:b9:a8:11:20:95:e4:12:bc:74:a4:87:ea:a3:e1:
4d:69:bf:40:d4:13:ab:7a:37:df:8c:05:50:de:e1:d9:27:ce:
d4:6e:2f:5e:a0:d2:3d:8e:f7:f8:40:de:60:57:bc:8d:89:7b:
56:2b:2e:bf:59:e3:ea:2c:2d:e6:56:87:7c:7a:a1:a0:70:87:
2b:40:f8:e0:9a:05:d3:87:38:20:45:8f:e1:51:b6:30:e0:72:
e2:b7:f4:07:5b:7b:74:6c:c5:93:db:f9:af:92:89:f9:0d:ce:
72:e2:8e:16:63:6e:1c:51:e3:28:98:e0:d5:1d:48:89:71:40:
3b:ba:17:80:c4:5c:d4:b0:d2:26:78:e1:76:92:ec:5d:8e:db:
af:00:37:a3:71:5a:74:fc:f4:c9:34:a5:14:2d:33:84:24:75:
aa:0b:84:bd:70:01:ec:e9:f3:a6:2d:d9:dc:0e:e4:bb:55:c1:
1e:08:39:74:7c:6c:2e:39:4d:03:06:fd:f8:2a:7b:c5:cf:0b:
bb:84:c1:6a
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQm2WUkbm983LagyBpjyE2EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTE0OTI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzhiNjM1NDc0OGZlM2U4NTJlMDY0OTgyODJjMjE1NDAwNzVmYzY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRQMY9nVZOouhAM3N5eAY/0GAt2R
/zRHKC/8YU2jilWORX6VohRIucHli8P2sCfWcsQQ/gUGXR2izshwdFg0rwh9hkT2
QVi8vskPIfs2nyEKAtLDQxcKC99eO2g3j70YxQbZceAFqsURyZt5i6zzXHmGiMXa
TofT6l5sfQ/dQnT4xPXYOxM0J05Uj4tKMNTbIK1WbDBEZh15rdHHCmPxKdB2f3wD
8Dah2PI8uRRMAFPnkJ4Cj8UUwYrhT9Vsq6FU5TMdR/s2tZ4kDLhbHW1RkZVbvDBl
Ini8E/UmGuiUwuDWSutk6pSn6lJXTN20EW4VUgmkIfbzsRh5BpaJbrSLWQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFPeLY1R0j+PoUuBkmCgsIVQAdfxmMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EzLzQyNzEw
Yi02NWMzLTRjMGYtYWU5Ny1iMWY0Mzg0MzEzYzAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTMvNDI3MTBi
LTY1YzMtNGMwZi1hZTk3LWIxZjQzODQzMTNjMC8xLzk0dGpWSFNQNC1oUzRHU1lL
Q3doVkFCMV9HWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwS8AMA0GCSqGSIb3DQEBCwUAA4IBAQBBXaie
zTHlP7+8SRyeADkJwiG85I1A+YsPTNkoejtfzBMFCTYaiOY/Tuue01kJvC4I/grx
h//W3CRiuagRIJXkErx0pIfqo+FNab9A1BOrejffjAVQ3uHZJ87Ubi9eoNI9jvf4
QN5gV7yNiXtWKy6/WePqLC3mVod8eqGgcIcrQPjgmgXThzggRY/hUbYw4HLit/QH
W3t0bMWT2/mvkon5Dc5y4o4WY24cUeMomODVHUiJcUA7uheAxFzUsNImeOF2kuxd
jtuvADejcVp0/PTJNKUULTOEJHWqC4S9cAHs6fOmLdncDuS7VcEeCDl0fGwuOU0D
Bv34KnvFzwu7hMFq
-----END CERTIFICATE-----
Generated at Tue Apr 8 06:09:57 2025 by rpki-client