Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer
File: Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer (raw, json)
Hash identifier: Q0O/HOZgceKs5QvN5ZZhE3aQH6PWbOaO77QZqZt4b4c=
Subject key identifier: 42:1F:10:88:82:A9:E2:D7:27:82:DB:65:27:DA:4D:9A:DE:EB:19:CC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228D5A464AE45B05488B95D4F016458E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:47:56 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 45.86.112.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:5a:46:4a:e4:5b:05:48:8b:95:d4:f0:16:45:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=421f108882a9e2d72782db6527da4d9adeeb19cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3f:79:bb:ac:b6:9c:a8:d9:be:4f:65:d0:f4:
b1:37:c5:34:99:14:eb:ee:9d:93:b1:07:f2:09:c8:
9c:04:a9:ad:e8:ae:2e:f8:07:7a:bf:ea:b8:57:53:
3b:2b:64:88:d1:24:4a:a8:fb:4c:33:fd:e1:ab:b5:
e0:fa:78:e3:30:a0:59:a9:3b:52:2c:74:29:24:cc:
f8:58:02:5e:4b:0a:90:d6:e4:48:7b:a9:89:53:1c:
e4:42:09:fe:4a:88:c5:d9:fc:2a:da:36:b6:80:74:
20:0f:67:80:68:70:04:4b:46:c4:d4:0d:7f:9d:1c:
64:d4:cd:a3:b3:0d:7f:0b:b9:e9:cc:5c:93:a9:de:
c6:93:14:fe:49:fa:ec:1e:57:ec:a1:7e:34:e9:ac:
6d:fa:65:6c:df:ac:99:bb:ac:f5:dd:22:ca:a8:26:
05:ff:a3:2b:f4:f6:e0:2e:c6:61:f4:53:1c:35:58:
90:9a:e0:7e:57:54:4f:75:85:e1:12:67:fb:ed:ca:
11:2b:5e:64:bf:ff:40:f5:83:38:e1:eb:64:9a:a1:
6b:dd:fe:c6:7a:cc:29:82:b9:77:e1:5a:cf:6f:f4:
78:15:9d:18:a3:8a:51:51:82:c6:fe:70:c3:1a:04:
ce:0c:09:ab:1c:99:45:7b:e6:82:7d:96:72:71:eb:
68:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:1F:10:88:82:A9:E2:D7:27:82:DB:65:27:DA:4D:9A:DE:EB:19:CC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.112.0/22
Signature Algorithm: sha256WithRSAEncryption
94:15:de:c4:bd:9d:0a:59:5c:6b:85:e7:24:5d:b1:64:3e:3c:
e6:38:7e:ff:6f:76:3e:7a:45:1e:25:14:64:bc:fe:74:74:0b:
38:52:88:a0:f7:65:82:19:f4:d7:fd:1a:a1:33:85:a9:c8:13:
0d:ba:45:6d:71:5a:6d:2b:b6:d7:6f:78:56:79:16:75:2d:92:
ad:d7:5f:30:32:0d:e3:18:1b:4f:6a:a0:7a:b6:b5:99:93:95:
10:f9:c9:f7:3b:42:cb:65:f6:08:d9:28:55:4b:d3:08:04:49:
ce:f9:de:66:f0:4f:18:e9:6a:cc:5d:9c:56:2a:07:86:56:fc:
93:b5:9b:33:90:bc:08:05:8a:fc:d1:e0:55:45:5b:06:3f:b7:
c7:c6:63:e1:65:c5:1f:89:b8:ec:89:7d:fb:00:48:99:7e:cc:
af:69:eb:8f:af:30:bc:07:b6:1c:73:1a:96:42:ff:04:f4:ff:
fd:c9:2b:80:c0:9d:9d:7b:f9:30:17:7e:d7:96:bd:79:a8:b4:
af:99:3d:9f:df:4c:3b:3e:f7:87:4a:3c:cb:e5:42:ab:ca:39:
d2:f5:65:44:70:34:8e:fe:bd:33:b8:46:54:41:b5:76:05:97:
7e:0b:b6:53:d7:41:d1:30:09:31:0e:a9:25:a1:b2:4b:a7:c7:
ae:07:34:08
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQijVpGSuRbBUiLldTwFkWOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTU0NzU2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MjFmMTA4ODgyYTllMmQ3Mjc4MmRiNjUyN2RhNGQ5YWRlZWIxOWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsz95u6y2nKjZvk9l0PSxN8U0mRTr
7p2TsQfyCcicBKmt6K4u+Ad6v+q4V1M7K2SI0SRKqPtMM/3hq7Xg+njjMKBZqTtS
LHQpJMz4WAJeSwqQ1uRIe6mJUxzkQgn+SojF2fwq2ja2gHQgD2eAaHAES0bE1A1/
nRxk1M2jsw1/C7npzFyTqd7GkxT+SfrsHlfsoX406axt+mVs36yZu6z13SLKqCYF
/6Mr9PbgLsZh9FMcNViQmuB+V1RPdYXhEmf77coRK15kv/9A9YM44etkmqFr3f7G
eswpgrl34VrPb/R4FZ0Yo4pRUYLG/nDDGgTODAmrHJlFe+aCfZZycetoRwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFEIfEIiCqeLXJ4LbZSfaTZre6xnMMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM2LzIxOTIy
YS1kZDc5LTRmNTYtODNiZS0wYTA2OWRlYzEwMGEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzYvMjE5MjJh
LWRkNzktNGY1Ni04M2JlLTBhMDY5ZGVjMTAwYS8xL1FoOFFpSUtwNHRjbmd0dGxK
OXBObXQ3ckdjdy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCLVZwMA0GCSqGSIb3DQEBCwUAA4IBAQCUFd7E
vZ0KWVxrheckXbFkPjzmOH7/b3Y+ekUeJRRkvP50dAs4Uoig92WCGfTX/RqhM4Wp
yBMNukVtcVptK7bXb3hWeRZ1LZKt118wMg3jGBtPaqB6trWZk5UQ+cn3O0LLZfYI
2ShVS9MIBEnO+d5m8E8Y6WrMXZxWKgeGVvyTtZszkLwIBYr80eBVRVsGP7fHxmPh
ZcUfibjsiX37AEiZfsyvaeuPrzC8B7YccxqWQv8E9P/9ySuAwJ2de/kwF37Xlr15
qLSvmT2f30w7PveHSjzL5UKryjnS9WVEcDSO/r0zuEZUQbV2BZd+C7ZT10HRMAkx
DqklobJLp8euBzQI
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:23:22 2025 by rpki-client