Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PhkEg0jX7LnxGRCAVVv0RYoaVOc.cer
File: PhkEg0jX7LnxGRCAVVv0RYoaVOc.cer (raw, json)
Hash identifier: ItbV03rSHA7Ha+5KDPmcpoll/6DjbPyy3LXxjxL58ao=
Subject key identifier: 3E:19:04:83:48:D7:EC:B9:F1:19:10:80:55:5B:F4:45:8A:1A:54:E7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D96AAFB3F8DCAB716BDB937020D0F1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:30 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 45.90.104.0/22
IP: 2a0f:80c0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:6a:af:b3:f8:dc:ab:71:6b:db:93:70:20:d0:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3e19048348d7ecb9f1191080555bf4458a1a54e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:34:bf:80:5b:7f:5e:58:d8:22:06:42:db:b1:
66:80:98:2d:7b:6f:d2:6c:ff:0e:6a:c3:34:69:d3:
72:d4:a6:37:24:9d:eb:9f:56:31:6d:f1:77:66:10:
0b:78:9e:66:aa:2f:aa:21:75:77:54:d9:ed:08:12:
eb:12:ed:39:33:89:b0:97:99:a1:1a:1c:51:85:4c:
97:96:26:1c:1f:92:22:0d:87:8f:ac:04:da:03:7c:
05:40:bc:eb:23:b1:13:a0:8e:93:cd:9b:4c:ff:e1:
b2:70:af:dd:6d:be:0e:9a:17:b8:a0:f3:9d:f4:d6:
23:a3:bf:f4:1a:8c:40:43:98:b9:cc:03:ee:f6:d0:
65:08:5b:72:b3:0a:51:70:fb:1a:ad:81:76:e4:86:
a1:0d:1f:4a:92:f1:cc:e1:5a:0c:aa:0c:d0:6e:f2:
b5:b9:94:fb:13:bc:4a:fe:0a:41:4d:06:90:c4:69:
cd:9b:f7:fd:d1:b8:cd:ba:d2:8c:ab:c0:91:94:dd:
89:a4:4c:a8:2c:60:9b:67:cd:6f:b5:50:99:cd:24:
57:fe:cd:1f:5e:c6:da:ef:1c:7f:50:6f:8b:5c:61:
c3:c5:46:b9:c7:65:13:80:99:9b:6f:c1:7c:a0:17:
8b:bb:b8:d7:2e:81:6e:21:23:13:bb:87:b0:41:b4:
86:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:19:04:83:48:D7:EC:B9:F1:19:10:80:55:5B:F4:45:8A:1A:54:E7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/af262c-e2cd-4841-850f-02f35ad877f3/1/PhkEg0jX7LnxGRCAVVv0RYoaVOc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.104.0/22
IPv6:
2a0f:80c0::/29
Signature Algorithm: sha256WithRSAEncryption
08:1c:15:f5:e4:e3:17:1b:3d:97:6d:0e:cd:37:9c:54:64:40:
39:09:13:88:cc:b4:13:9e:b7:69:36:11:de:07:02:96:96:91:
81:be:df:f0:98:d5:66:d9:a5:fe:28:c2:9b:84:83:c7:92:b0:
78:6b:d6:fc:f3:a1:ff:8e:81:2c:fc:7d:a6:8e:77:d4:f8:1e:
17:c2:38:f1:b8:c4:a2:a2:19:2f:78:24:f4:8f:fe:23:3c:41:
ce:69:b5:09:dd:d9:69:3a:c7:37:97:32:62:7c:b6:86:e4:e1:
f0:7f:8f:e6:9e:09:a9:9f:74:fb:90:e6:d2:2a:8f:25:9d:76:
2c:e6:bd:64:fd:fd:1f:60:61:f8:14:ab:1c:eb:0d:e1:40:a2:
8a:c2:6e:3c:26:c6:47:05:a8:4a:59:f7:93:65:0e:dd:08:e6:
a6:bb:9e:9c:7b:38:21:f0:34:43:21:42:aa:cd:e2:3c:3c:82:
65:e3:de:92:3c:a5:f9:f7:ed:6f:38:cb:2c:91:b8:de:f3:81:
3a:6f:20:27:77:08:6e:8b:a1:5c:dd:99:ea:d5:a3:07:7f:eb:
f8:68:d3:60:5f:36:55:4a:95:88:76:df:25:00:bf:0f:33:ed:
81:28:3d:a5:38:54:68:39:23:41:a7:21:33:4a:56:6b:16:ab:
5e:21:a6:95
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZQm2Wqvs/jcq3Fr25NwINDxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTE0OTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZTE5MDQ4MzQ4ZDdlY2I5ZjExOTEwODA1NTViZjQ0NThhMWE1NGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zS/gFt/XljYIgZC27FmgJgte2/S
bP8OasM0adNy1KY3JJ3rn1YxbfF3ZhALeJ5mqi+qIXV3VNntCBLrEu05M4mwl5mh
GhxRhUyXliYcH5IiDYePrATaA3wFQLzrI7EToI6TzZtM/+GycK/dbb4Omhe4oPOd
9NYjo7/0GoxAQ5i5zAPu9tBlCFtyswpRcPsarYF25IahDR9KkvHM4VoMqgzQbvK1
uZT7E7xK/gpBTQaQxGnNm/f90bjNutKMq8CRlN2JpEyoLGCbZ81vtVCZzSRX/s0f
Xsba7xx/UG+LXGHDxUa5x2UTgJmbb8F8oBeLu7jXLoFuISMTu4ewQbSGZQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFD4ZBINI1+y58RkQgFVb9EWKGlTnMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc0L2FmMjYy
Yy1lMmNkLTQ4NDEtODUwZi0wMmYzNWFkODc3ZjMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzQvYWYyNjJj
LWUyY2QtNDg0MS04NTBmLTAyZjM1YWQ4NzdmMy8xL1Boa0VnMGpYN0xueEdSQ0FW
VnYwUllvYVZPYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCLVpoMA0EAgACMAcDBQMqD4DAMA0GCSqGSIb3
DQEBCwUAA4IBAQAIHBX15OMXGz2XbQ7NN5xUZEA5CROIzLQTnrdpNhHeBwKWlpGB
vt/wmNVm2aX+KMKbhIPHkrB4a9b886H/joEs/H2mjnfU+B4XwjjxuMSiohkveCT0
j/4jPEHOabUJ3dlpOsc3lzJifLaG5OHwf4/mngmpn3T7kObSKo8lnXYs5r1k/f0f
YGH4FKsc6w3hQKKKwm48JsZHBahKWfeTZQ7dCOamu56cezgh8DRDIUKqzeI8PIJl
496SPKX59+1vOMsskbje84E6byAndwhui6Fc3Znq1aMHf+v4aNNgXzZVSpWIdt8l
AL8PM+2BKD2lOFRoOSNBpyEzSlZrFqteIaaV
-----END CERTIFICATE-----
Generated at Mon Apr 7 04:41:17 2025 by rpki-client