Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer
File: LrTU3kCE88jhpPbU01U5B6sMgIo.cer (raw, json)
Hash identifier: 4JsB3ArjOiYyGvJzZlX0bg9/GHzxu6Z75ijc6ocJsHs=
Subject key identifier: 2E:B4:D4:DE:40:84:F3:C8:E1:A4:F6:D4:D3:55:39:07:AB:0C:80:8A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B5A33D8A34A8D17E5B7D396C3F62AB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:50:02 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 45.11.64.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:a3:3d:8a:34:a8:d1:7e:5b:7d:39:6c:3f:62:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:50:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2eb4d4de4084f3c8e1a4f6d4d3553907ab0c808a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:36:3f:10:22:1d:ca:4f:43:ab:91:d1:37:54:
4c:9f:1e:08:9a:1c:d0:50:43:d6:80:cf:ec:ff:9e:
b7:61:eb:1e:05:37:38:29:67:5d:ea:c1:d1:7e:bf:
5c:41:c8:eb:07:d4:09:1d:13:91:6e:b6:90:d2:af:
fd:d7:9d:c6:da:a2:67:d8:5e:e9:a5:27:16:77:79:
66:4d:cf:f0:59:1a:d1:9e:d7:ce:60:3f:91:c6:c0:
b4:d9:d7:89:6a:49:ea:66:f6:4b:6f:f9:85:46:51:
56:e7:14:e2:43:84:24:40:4d:fb:66:33:37:32:f7:
a1:7c:56:cd:b4:e6:35:15:5e:55:86:e3:89:98:f2:
4d:77:43:e5:a9:e3:57:38:96:f1:d4:15:7f:ac:9e:
3d:72:78:55:f5:ce:9f:e1:d2:d6:38:7b:e3:14:e5:
5d:17:ab:59:af:4b:79:ec:fb:7a:df:dc:5a:06:04:
c2:b7:76:8a:5f:41:76:0e:2c:be:34:de:8f:64:be:
10:a6:d2:9f:bd:9c:67:20:29:e5:c3:bc:42:c8:bb:
b7:39:aa:44:8b:0c:3d:29:25:5e:6f:a7:95:d1:e6:
c8:8d:19:14:d4:20:34:2d:ea:de:48:23:16:8e:e3:
87:1c:af:94:3f:6e:e9:bf:fa:c4:61:e3:13:09:2c:
8c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:B4:D4:DE:40:84:F3:C8:E1:A4:F6:D4:D3:55:39:07:AB:0C:80:8A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.64.0/22
Signature Algorithm: sha256WithRSAEncryption
43:cf:af:14:8c:34:03:a7:2f:c6:99:8e:cd:d7:a7:0e:11:87:
59:42:ea:d7:b3:a1:14:75:3d:9c:1a:69:4c:61:1e:04:aa:0a:
67:50:61:df:7a:47:2d:0e:d2:e6:0c:87:8a:dd:04:26:cd:57:
be:56:93:36:e3:97:f9:91:34:ab:16:d8:0b:95:8b:70:18:cd:
e9:71:da:f4:7e:fe:bd:6b:51:95:1f:7a:e8:a9:e9:c1:2c:85:
47:f6:75:a2:ba:12:4e:27:e0:7a:1c:2f:bd:d0:d6:7a:6a:84:
47:91:ec:7d:60:fa:5f:e0:9d:af:1f:43:fe:5b:84:18:c3:76:
1d:02:15:7a:c2:b3:fc:2e:54:8e:a1:59:9d:9b:71:23:f0:26:
5e:95:23:76:4d:82:f7:5a:ee:85:88:13:00:53:f7:11:0d:63:
c2:4b:6a:b7:5d:9f:90:94:7e:36:c0:93:09:69:ad:25:3f:6f:
5d:15:d3:f8:be:56:87:01:5d:27:59:02:b2:d2:56:3d:14:d1:
b2:89:7d:73:f2:8c:8b:5f:f7:22:46:00:d8:21:41:7e:26:0c:
fa:e3:1c:2c:fb:0d:c5:bf:a1:af:8c:b9:2c:48:d1:e0:c5:67:
7d:cb:3c:ea:e5:1a:5a:be:6a:3c:3b:ee:4f:ad:f7:c9:58:44:
a7:ec:0d:d4
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQntaM9ijSo0X5bfTlsP2KrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTU1MDAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZWI0ZDRkZTQwODRmM2M4ZTFhNGY2ZDRkMzU1MzkwN2FiMGM4MDhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTY/ECIdyk9Dq5HRN1RMnx4ImhzQ
UEPWgM/s/563YeseBTc4KWdd6sHRfr9cQcjrB9QJHRORbraQ0q/9153G2qJn2F7p
pScWd3lmTc/wWRrRntfOYD+RxsC02deJaknqZvZLb/mFRlFW5xTiQ4QkQE37ZjM3
MvehfFbNtOY1FV5VhuOJmPJNd0PlqeNXOJbx1BV/rJ49cnhV9c6f4dLWOHvjFOVd
F6tZr0t57Pt639xaBgTCt3aKX0F2Diy+NN6PZL4QptKfvZxnICnlw7xCyLu3OapE
iww9KSVeb6eV0ebIjRkU1CA0LereSCMWjuOHHK+UP27pv/rEYeMTCSyM8QIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFC601N5AhPPI4aT21NNVOQerDICKMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJhLzdjZmM2
OC00N2I4LTQ2MjgtYjQyZi05NTI5YmNjYmJiMTQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmEvN2NmYzY4
LTQ3YjgtNDYyOC1iNDJmLTk1MjliY2NiYmIxNC8xL0xyVFUza0NFODhqaHBQYlUw
MVU1QjZzTWdJby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCLQtAMA0GCSqGSIb3DQEBCwUAA4IBAQBDz68U
jDQDpy/GmY7N16cOEYdZQurXs6EUdT2cGmlMYR4EqgpnUGHfekctDtLmDIeK3QQm
zVe+VpM245f5kTSrFtgLlYtwGM3pcdr0fv69a1GVH3roqenBLIVH9nWiuhJOJ+B6
HC+90NZ6aoRHkex9YPpf4J2vH0P+W4QYw3YdAhV6wrP8LlSOoVmdm3Ej8CZelSN2
TYL3Wu6FiBMAU/cRDWPCS2q3XZ+QlH42wJMJaa0lP29dFdP4vlaHAV0nWQKy0lY9
FNGyiX1z8oyLX/ciRgDYIUF+Jgz64xws+w3Fv6GvjLksSNHgxWd9yzzq5Rpavmo8
O+5PrffJWESn7A3U
-----END CERTIFICATE-----
Generated at Tue Apr 8 15:44:49 2025 by rpki-client