Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer
File: CNK8Pjlyic6cOqAuFW4gwD1Nc0I.cer (raw, json)
Hash identifier: wsZC+ossEmh/YzdtQ1El/sHw97nFfwPmZnR87E7q/A0=
Subject key identifier: 08:D2:BC:3E:39:72:89:CE:9C:3A:A0:2E:15:6E:20:C0:3D:4D:73:42
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942067F09AB86D0BC67486DD6E9660C8F2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:47:50 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 195.69.163.0/24
IP: 2a12:3e40::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:f0:9a:b8:6d:0b:c6:74:86:dd:6e:96:60:c8:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=08d2bc3e397289ce9c3aa02e156e20c03d4d7342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8f:0c:01:ca:44:0b:87:40:40:15:62:e2:d2:
a0:05:af:a0:45:dd:b7:83:ee:ca:46:49:48:cf:7b:
39:e7:b4:75:5a:cb:9e:3d:77:19:a0:e1:9b:e9:87:
d3:8f:f7:b8:58:68:b0:2c:79:d2:6b:65:fe:59:b1:
c2:e9:e0:20:46:01:69:84:e0:fb:02:b2:a0:01:a1:
74:c3:cb:08:fd:5a:0a:1e:6e:33:90:6b:d5:58:64:
cc:cf:0f:32:60:31:f5:ec:09:d7:11:bb:c9:5f:2c:
5e:bf:f1:cb:cf:fc:30:d2:18:60:4f:68:20:fc:1b:
fc:35:5d:f3:65:52:be:50:54:fc:ef:40:de:13:a9:
6d:f3:44:01:93:59:09:98:3b:fc:61:a5:18:86:59:
0d:8d:ae:11:1f:24:8e:6e:fa:1d:81:59:99:2e:76:
5a:5c:39:67:9e:99:36:68:f9:7e:eb:74:5f:90:ee:
1f:c0:8e:1f:c0:ed:ce:05:05:9d:73:b0:aa:f0:a7:
25:81:bb:49:ba:d3:35:8a:32:34:d0:20:1f:3a:76:
42:79:23:fc:30:b3:49:07:2d:89:6a:a6:23:39:f4:
13:4c:17:4f:2a:e7:26:ab:2c:3e:d8:a7:e9:1e:5e:
0d:c1:0a:98:c7:13:5b:e0:ea:b4:cb:53:8e:c5:5f:
33:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D2:BC:3E:39:72:89:CE:9C:3A:A0:2E:15:6E:20:C0:3D:4D:73:42
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/913089-8986-42a6-881e-2e0eb4f46fa4/1/CNK8Pjlyic6cOqAuFW4gwD1Nc0I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.69.163.0/24
IPv6:
2a12:3e40::/29
Signature Algorithm: sha256WithRSAEncryption
4f:43:88:74:8c:f6:76:76:bc:90:db:fb:2d:07:39:27:f0:fd:
de:3b:fb:4f:6a:ca:f7:26:ca:52:e9:d4:ca:0e:d4:64:09:cd:
39:89:e3:b3:d3:3f:03:8b:fa:11:c1:55:d4:b3:4b:b4:6e:a2:
ea:6d:0a:d7:56:dd:40:ba:7d:59:3e:fc:14:40:b8:b9:de:bf:
11:d4:22:e3:eb:ef:a6:e2:83:22:79:ee:4b:63:0c:06:ad:76:
9f:94:94:68:48:03:1f:2b:61:68:ee:b1:3a:ad:bb:ff:7e:4c:
c7:14:c7:9a:f6:aa:6f:95:8f:39:64:52:2e:a5:02:f3:f6:f7:
2a:95:a0:b0:88:71:85:ee:49:ee:2b:ac:7c:e5:93:dd:4b:a8:
f9:70:23:a0:ec:ba:4b:98:ff:9b:fd:f4:15:d1:41:1b:32:04:
6c:f3:25:4a:f9:19:7d:e0:2e:eb:b6:4d:49:28:fe:07:2b:e3:
65:07:78:ea:a0:7f:eb:a8:f0:92:53:56:cb:11:ad:ef:6a:c0:
c6:29:d0:c7:59:e9:c5:d3:e3:24:7c:37:9a:56:13:20:08:da:
03:df:d4:38:c7:8a:a5:3c:ec:31:8f:e0:28:cc:be:82:89:1e:
00:2a:b0:a1:9e:47:60:62:9f:45:87:8c:53:2e:37:77:1e:7d:
27:7e:19:d2
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZQgZ/CauG0LxnSG3W6WYMjyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDU0NzUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOGQyYmMzZTM5NzI4OWNlOWMzYWEwMmUxNTZlMjBjMDNkNGQ3MzQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2o8MAcpEC4dAQBVi4tKgBa+gRd23
g+7KRklIz3s557R1WsuePXcZoOGb6YfTj/e4WGiwLHnSa2X+WbHC6eAgRgFphOD7
ArKgAaF0w8sI/VoKHm4zkGvVWGTMzw8yYDH17AnXEbvJXyxev/HLz/ww0hhgT2gg
/Bv8NV3zZVK+UFT870DeE6lt80QBk1kJmDv8YaUYhlkNja4RHySObvodgVmZLnZa
XDlnnpk2aPl+63RfkO4fwI4fwO3OBQWdc7Cq8KclgbtJutM1ijI00CAfOnZCeSP8
MLNJBy2JaqYjOfQTTBdPKucmqyw+2KfpHl4NwQqYxxNb4Oq0y1OOxV8zswIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFAjSvD45conOnDqgLhVuIMA9TXNCMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U5LzkxMzA4
OS04OTg2LTQyYTYtODgxZS0yZTBlYjRmNDZmYTQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTkvOTEzMDg5
LTg5ODYtNDJhNi04ODFlLTJlMGViNGY0NmZhNC8xL0NOSzhQamx5aWM2Y09xQXVG
VzRnd0QxTmMwSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAw0WjMA0EAgACMAcDBQMqEj5AMA0GCSqGSIb3
DQEBCwUAA4IBAQBPQ4h0jPZ2dryQ2/stBzkn8P3eO/tPasr3JspS6dTKDtRkCc05
ieOz0z8Di/oRwVXUs0u0bqLqbQrXVt1Aun1ZPvwUQLi53r8R1CLj6++m4oMiee5L
YwwGrXaflJRoSAMfK2Fo7rE6rbv/fkzHFMea9qpvlY85ZFIupQLz9vcqlaCwiHGF
7knuK6x85ZPdS6j5cCOg7LpLmP+b/fQV0UEbMgRs8yVK+Rl94C7rtk1JKP4HK+Nl
B3jqoH/rqPCSU1bLEa3vasDGKdDHWenF0+MkfDeaVhMgCNoD39Q4x4qlPOwxj+Ao
zL6CiR4AKrChnkdgYp9Fh4xTLjd3Hn0nfhnS
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:27:36 2025 by rpki-client