Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer
File: Ce5-4PdbcWSsdZYZfH8SHW_KFXY.cer (raw, json)
Hash identifier: u9a9Jz1aGy/i/GE1Uctt9+2TRhY/XfpRzEStmYwgtYE=
Subject key identifier: 09:EE:7E:E0:F7:5B:71:64:AC:75:96:19:7C:7F:12:1D:6F:CA:15:76
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D9CE9D118C8812B5B764E82691DA6D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:55 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 216.245.80.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:ce:9d:11:8c:88:12:b5:b7:64:e8:26:91:da:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=09ee7ee0f75b7164ac7596197c7f121d6fca1576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4d:92:74:d1:0f:01:f4:30:e9:bf:9f:18:79:
f8:84:76:e2:ae:2b:b9:48:e3:a6:f5:d4:3b:34:77:
ef:0a:c1:a1:ec:f1:b4:5a:49:fe:fa:c1:35:e5:b1:
ed:3e:68:6f:a4:30:c6:62:7c:e5:fb:5a:87:d9:a7:
65:11:b3:a9:d0:be:3a:7a:d3:2c:79:e3:0b:c6:3f:
86:9a:9d:36:e4:fc:af:e3:02:59:32:41:56:3c:a3:
83:3c:71:37:9b:bb:78:1f:a7:8d:d5:88:56:37:c9:
54:94:29:71:d8:37:9b:dd:68:da:9c:11:1b:6b:8c:
39:10:63:46:d5:90:bc:58:ff:92:7d:0c:0e:22:e5:
90:18:e5:a5:5e:48:1b:29:79:c6:ba:b5:16:31:ba:
28:28:2d:d9:44:2d:ab:7a:4f:56:a3:d1:04:57:dc:
5a:d7:96:94:68:5e:d8:18:ed:75:58:ff:8c:35:20:
10:01:64:fe:a5:28:0d:e9:72:37:f4:11:38:67:8e:
ae:dd:28:59:b0:97:9a:98:bf:f5:74:d6:ad:c7:16:
a3:3b:0a:05:4d:c7:5e:83:85:99:2d:0b:3b:b5:6c:
6b:f2:6d:d5:f2:b1:08:a7:4e:d2:8c:82:be:c7:f1:
e5:05:08:9e:64:4c:81:50:a8:ba:92:25:43:8a:87:
ef:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:EE:7E:E0:F7:5B:71:64:AC:75:96:19:7C:7F:12:1D:6F:CA:15:76
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dbe50a-2ca1-4362-b5e7-6683c8fc9e5b/1/Ce5-4PdbcWSsdZYZfH8SHW_KFXY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.245.80.0/24
Signature Algorithm: sha256WithRSAEncryption
47:dd:df:61:db:01:a1:6a:76:f7:50:82:62:dc:cb:6d:23:fc:
56:b8:51:1f:4d:11:b8:5e:2a:6d:45:05:57:32:86:a5:f1:59:
f0:b0:37:07:3c:ad:c7:43:0d:2b:12:e2:12:ff:f1:dd:30:cf:
ab:87:d0:41:a9:3d:db:f5:fd:af:fc:06:37:ec:19:cb:aa:a9:
63:ab:c4:5c:a4:29:98:d3:20:1c:3c:21:67:e4:17:a7:7d:cc:
1b:d0:b3:bf:0c:7c:b1:64:f4:e5:40:f8:14:ad:d7:d5:0f:fe:
5c:7d:1d:00:bb:b5:f7:0f:e9:eb:7d:ec:34:3d:7b:e8:a6:cd:
95:04:f3:04:8f:73:66:00:b2:f2:6f:16:13:40:38:e5:9f:4d:
a9:e2:9e:5a:69:fa:cd:24:d3:08:be:ff:2d:d8:08:4d:5d:f4:
e6:a5:7e:fd:81:7c:cc:a6:25:90:25:f7:15:cc:3f:23:63:e1:
6e:1f:b0:c7:01:45:c0:17:09:7f:f2:b1:55:96:f6:f5:7e:b2:
af:46:b9:c9:91:95:dd:34:97:f0:8c:0d:18:89:01:a8:fc:9d:
ae:1c:c4:f8:0e:0c:33:f7:d7:a1:8b:1e:04:01:76:6d:f1:1d:
e2:29:10:5f:f6:21:e5:86:5a:21:c4:95:a4:76:b6:f2:0c:4f:
ab:ed:01:6e
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQm2c6dEYyIErW3ZOgmkdptMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTE0OTU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOWVlN2VlMGY3NWI3MTY0YWM3NTk2MTk3YzdmMTIxZDZmY2ExNTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp02SdNEPAfQw6b+fGHn4hHbiriu5
SOOm9dQ7NHfvCsGh7PG0Wkn++sE15bHtPmhvpDDGYnzl+1qH2adlEbOp0L46etMs
eeMLxj+Gmp025Pyv4wJZMkFWPKODPHE3m7t4H6eN1YhWN8lUlClx2Deb3WjanBEb
a4w5EGNG1ZC8WP+SfQwOIuWQGOWlXkgbKXnGurUWMbooKC3ZRC2rek9Wo9EEV9xa
15aUaF7YGO11WP+MNSAQAWT+pSgN6XI39BE4Z46u3ShZsJeamL/1dNatxxajOwoF
Tcdeg4WZLQs7tWxr8m3V8rEIp07SjIK+x/HlBQieZEyBUKi6kiVDiofvIQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFAnufuD3W3FkrHWWGXx/Eh1vyhV2MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFhL2RiZTUw
YS0yY2ExLTQzNjItYjVlNy02NjgzYzhmYzllNWIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWEvZGJlNTBh
LTJjYTEtNDM2Mi1iNWU3LTY2ODNjOGZjOWU1Yi8xL0NlNS00UGRiY1dTc2RaWVpm
SDhTSFdfS0ZYWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQA2PVQMA0GCSqGSIb3DQEBCwUAA4IBAQBH3d9h
2wGhanb3UIJi3MttI/xWuFEfTRG4XiptRQVXMoal8VnwsDcHPK3HQw0rEuIS//Hd
MM+rh9BBqT3b9f2v/AY37BnLqqljq8RcpCmY0yAcPCFn5Benfcwb0LO/DHyxZPTl
QPgUrdfVD/5cfR0Au7X3D+nrfew0PXvops2VBPMEj3NmALLybxYTQDjln02p4p5a
afrNJNMIvv8t2AhNXfTmpX79gXzMpiWQJfcVzD8jY+FuH7DHAUXAFwl/8rFVlvb1
frKvRrnJkZXdNJfwjA0YiQGo/J2uHMT4Dgwz99ehix4EAXZt8R3iKRBf9iHlhloh
xJWkdrbyDE+r7QFu
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:49:49 2025 by rpki-client