Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FCs7hgfEFNhpNM4J4Rb9vB0ffyg.cer
File: FCs7hgfEFNhpNM4J4Rb9vB0ffyg.cer (raw, json)
Hash identifier: eb2dqRk3sxlcC971E9y8mMfUwVsrKQq/aDHQAacdZrU=
Subject key identifier: 14:2B:3B:86:07:C4:14:D8:69:34:CE:09:E1:16:FD:BC:1D:1F:7F:28
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018571D6F60A3CA2A2DA59E172D9F38F62A4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/52/8179a7-b735-47f7-a8ba-6922b49d0747/1/FCs7hgfEFNhpNM4J4Rb9vB0ffyg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/52/8179a7-b735-47f7-a8ba-6922b49d0747/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 09:36:31 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 193.141.92.0/24
IP: 2a12:8700::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d6:f6:0a:3c:a2:a2:da:59:e1:72:d9:f3:8f:62:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:36:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=142b3b8607c414d86934ce09e116fdbc1d1f7f28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8a:ed:82:90:9c:f2:46:f0:bd:fb:92:c3:f4:
c9:63:43:eb:e6:87:f0:8c:93:5d:f2:74:3b:e4:90:
a6:98:8e:86:9f:1e:e8:60:3d:14:61:a7:4a:ed:a8:
dd:e5:ef:7c:3d:1e:20:1d:a9:b2:75:54:b0:97:0a:
d5:54:4d:18:bd:18:31:0b:14:32:5a:cc:ae:7f:dd:
0c:78:04:3a:d7:bd:63:66:df:43:d0:90:fa:88:d7:
29:82:34:29:bf:1d:45:ec:2b:e1:89:a1:bf:5c:7b:
ad:3f:90:95:f6:d5:75:1d:3c:bb:3e:74:b4:db:fd:
d4:a7:ac:01:c3:98:22:9c:3c:5b:b7:a5:96:8f:5f:
81:21:f1:95:29:62:4d:da:05:78:1b:37:6a:ff:38:
80:7b:56:8d:0e:3a:25:68:bf:e1:c3:53:7d:a8:6e:
f8:35:d6:2c:d4:e4:f2:5e:1d:01:1f:17:61:e2:3e:
15:0e:23:64:95:28:c1:e3:d1:36:03:2e:0f:8a:ad:
31:33:2c:1f:cc:53:00:cd:e8:73:f3:94:bb:ae:b1:
db:ae:86:89:93:5c:29:33:48:db:3f:e6:84:0b:20:
6f:af:76:e2:ac:53:25:39:d2:d2:5c:36:a8:42:8d:
6e:31:de:06:46:b6:24:6a:20:e8:8d:ad:aa:b1:a3:
25:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:2B:3B:86:07:C4:14:D8:69:34:CE:09:E1:16:FD:BC:1D:1F:7F:28
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/8179a7-b735-47f7-a8ba-6922b49d0747/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/8179a7-b735-47f7-a8ba-6922b49d0747/1/FCs7hgfEFNhpNM4J4Rb9vB0ffyg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.141.92.0/24
IPv6:
2a12:8700::/29
Signature Algorithm: sha256WithRSAEncryption
5a:70:c0:a2:4b:f9:95:dd:11:ee:49:b1:68:c6:71:73:de:53:
3e:a9:7e:59:75:e7:60:0d:7b:66:25:06:b9:a1:bb:ef:7c:3a:
d9:66:06:23:76:d6:9b:db:f7:77:3e:92:68:17:ca:4f:d7:35:
c6:25:96:89:3e:d8:27:9c:39:24:f5:dc:03:c5:ea:8a:68:7f:
43:be:83:ac:17:d6:a6:b8:05:26:b3:d7:2b:d5:21:32:9b:ff:
6e:39:2e:2a:90:85:49:84:01:48:d3:02:b9:19:2f:0f:83:b5:
37:a8:97:10:39:e8:8c:02:1e:ee:a0:06:ee:b0:92:62:2a:4c:
07:f9:58:3e:43:26:74:49:b1:8c:80:04:1f:6e:6d:88:62:01:
38:3b:71:ae:74:28:4e:6d:62:56:5a:f1:54:c2:a2:13:cf:ea:
b3:b6:44:8b:20:ef:80:92:73:73:05:47:47:d0:ff:8b:dc:53:
de:4f:89:e2:b6:59:25:89:f6:e5:d9:71:b0:2d:84:8e:07:17:
2e:d3:cf:d4:29:7a:55:ee:f4:b7:bd:40:95:92:fb:56:30:d5:
cc:f6:71:9a:d3:e7:ba:65:7d:13:b2:31:bd:67:5c:42:77:89:
7c:c4:3c:c7:09:5d:1c:f0:3a:39:17:de:9c:ff:b2:00:7b:33:
e0:3c:cd:a1
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAYVx1vYKPKKi2lnhctnzj2KkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjMwMTAyMDkzNjMxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNDJiM2I4NjA3YzQxNGQ4NjkzNGNlMDllMTE2ZmRiYzFkMWY3ZjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIrtgpCc8kbwvfuSw/TJY0Pr5ofw
jJNd8nQ75JCmmI6Gnx7oYD0UYadK7ajd5e98PR4gHamydVSwlwrVVE0YvRgxCxQy
Wsyuf90MeAQ6171jZt9D0JD6iNcpgjQpvx1F7CvhiaG/XHutP5CV9tV1HTy7PnS0
2/3Up6wBw5ginDxbt6WWj1+BIfGVKWJN2gV4Gzdq/ziAe1aNDjolaL/hw1N9qG74
NdYs1OTyXh0BHxdh4j4VDiNklSjB49E2Ay4Piq0xMywfzFMAzehz85S7rrHbroaJ
k1wpM0jbP+aECyBvr3birFMlOdLSXDaoQo1uMd4GRrYkaiDoja2qsaMlWQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFBQrO4YHxBTYaTTOCeEW/bwdH38oMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUyLzgxNzlh
Ny1iNzM1LTQ3ZjctYThiYS02OTIyYjQ5ZDA3NDcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTIvODE3OWE3
LWI3MzUtNDdmNy1hOGJhLTY5MjJiNDlkMDc0Ny8xL0ZDczdoZ2ZFRk5ocE5NNEo0
UmI5dkIwZmZ5Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAwY1cMA0EAgACMAcDBQMqEocAMA0GCSqGSIb3
DQEBCwUAA4IBAQBacMCiS/mV3RHuSbFoxnFz3lM+qX5ZdedgDXtmJQa5obvvfDrZ
ZgYjdtab2/d3PpJoF8pP1zXGJZaJPtgnnDkk9dwDxeqKaH9DvoOsF9amuAUms9cr
1SEym/9uOS4qkIVJhAFI0wK5GS8Pg7U3qJcQOeiMAh7uoAbusJJiKkwH+Vg+QyZ0
SbGMgAQfbm2IYgE4O3GudChObWJWWvFUwqITz+qztkSLIO+AknNzBUdH0P+L3FPe
T4nitlklifbl2XGwLYSOBxcu08/UKXpV7vS3vUCVkvtWMNXM9nGa0+e6ZX0TsjG9
Z1xCd4l8xDzHCV0c8Do5F96c/7IAezPgPM2h
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:47:25 2025 by rpki-client