Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.cer
File: QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.cer (raw, json)
Hash identifier: GZ9W5fLxpLKq3zB8BLHFqRWGMPyoipCUNxKRSqMQbd0=
Subject key identifier: 42:26:7F:5A:6C:F4:9B:C4:3F:23:04:DE:00:F7:70:5E:C5:B7:9F:CA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B1E706FAF0C4BD8834B22C7ADE7E2C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:14 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.8.58.0 -- 193.8.60.255
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:e7:06:fa:f0:c4:bd:88:34:b2:2c:7a:de:7e:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=42267f5a6cf49bc43f2304de00f7705ec5b79fca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b8:39:9d:6c:a9:2a:fe:34:ad:85:40:ae:1b:
7e:44:5d:ce:f5:10:42:1f:27:0a:ca:38:22:a9:13:
41:a6:08:ce:4b:67:4d:89:17:be:f1:5f:4c:14:09:
45:1c:d0:81:0d:ee:59:68:47:5d:b3:80:8d:71:41:
d9:54:5e:97:6f:73:c8:e9:2c:95:a9:4b:48:8e:ca:
b5:d2:25:51:f9:0c:d3:14:07:45:44:0a:65:ca:67:
bb:77:49:ad:cb:fd:6a:26:24:fc:f8:67:bf:12:07:
c7:1f:f8:6c:c3:e9:29:9d:f3:3e:be:cf:73:fb:92:
dd:cf:67:af:2d:8d:7a:d3:5f:32:c9:a4:7a:09:98:
c1:6c:f4:14:b4:a8:81:7f:e5:6c:69:47:35:a4:59:
41:92:61:61:aa:af:70:c1:81:5f:3e:65:15:62:3c:
45:b4:41:28:64:b3:6e:c1:f7:54:49:72:3f:2c:b6:
56:b3:53:af:7f:0a:ce:f3:f5:20:be:3d:25:7f:01:
a0:1d:bd:c9:70:18:ff:6c:52:c3:0d:d3:82:c6:d6:
2a:77:c4:4b:55:6e:80:4d:98:33:6a:44:fa:fa:22:
69:d6:3f:b3:5b:5d:73:4d:cd:55:13:2d:9c:61:8a:
1f:80:05:a1:b9:94:f3:3c:66:a2:7f:2b:d1:72:8b:
88:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:26:7F:5A:6C:F4:9B:C4:3F:23:04:DE:00:F7:70:5E:C5:B7:9F:CA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5fe0df-b008-4e94-99c6-b22695c703a9/1/QiZ_Wmz0m8Q_IwTeAPdwXsW3n8o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.58.0-193.8.60.255
Signature Algorithm: sha256WithRSAEncryption
80:06:03:d0:d5:43:bf:1a:4f:48:a2:e6:17:83:3c:f5:f9:1c:
c6:61:c8:11:a1:05:b2:2c:f7:ec:5c:1b:9b:b4:2c:fe:9b:5c:
25:b7:f1:15:dd:c7:1f:39:a9:5d:57:e5:be:ed:01:90:cd:7f:
77:9d:5f:5e:18:09:92:3f:a0:74:ed:50:f3:e5:aa:7d:f8:43:
0f:5d:d6:ef:4b:72:ba:5d:59:e0:5f:5c:62:d4:77:3c:b4:9b:
36:14:e6:64:60:64:de:ce:4d:ed:fa:bd:06:19:43:da:9c:d0:
d4:6f:80:4d:cf:d6:53:02:35:e8:91:be:38:8e:e3:f4:7d:30:
cf:1d:34:7f:6d:96:a4:3f:19:80:e2:49:98:4a:28:3c:c2:7e:
13:04:c2:c1:9f:eb:bf:43:c4:eb:c9:41:12:c7:45:69:4b:27:
ed:3b:42:fc:25:08:a2:b4:bc:09:2a:64:da:7c:3c:76:83:e6:
8c:7a:f8:2e:5a:20:74:99:c6:10:c7:55:fb:e3:dc:11:26:4a:
15:ad:0f:f0:79:83:0a:d4:dd:f4:a5:a3:7b:02:5d:25:4a:89:
18:23:45:81:08:5f:1a:42:32:d5:31:04:b9:8d:1f:16:a0:8d:
ea:3a:46:6c:cf:9a:81:33:cd:63:17:57:29:35:21:9b:a1:f7:
c6:09:7a:18
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgISAZQhsecG+vDEvYg0six63n4sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTE0ODE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MjI2N2Y1YTZjZjQ5YmM0M2YyMzA0ZGUwMGY3NzA1ZWM1Yjc5ZmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprg5nWypKv40rYVArht+RF3O9RBC
HycKyjgiqRNBpgjOS2dNiRe+8V9MFAlFHNCBDe5ZaEdds4CNcUHZVF6Xb3PI6SyV
qUtIjsq10iVR+QzTFAdFRAplyme7d0mty/1qJiT8+Ge/EgfHH/hsw+kpnfM+vs9z
+5Ldz2evLY16018yyaR6CZjBbPQUtKiBf+VsaUc1pFlBkmFhqq9wwYFfPmUVYjxF
tEEoZLNuwfdUSXI/LLZWs1OvfwrO8/Ugvj0lfwGgHb3JcBj/bFLDDdOCxtYqd8RL
VW6ATZgzakT6+iJp1j+zW11zTc1VEy2cYYofgAWhuZTzPGaifyvRcouIGQIDAQAB
o4ICjDCCAogwHQYDVR0OBBYEFEImf1ps9JvEPyME3gD3cF7Ft5/KMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM0LzVmZTBk
Zi1iMDA4LTRlOTQtOTljNi1iMjI2OTVjNzAzYTkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzQvNWZlMGRm
LWIwMDgtNGU5NC05OWM2LWIyMjY5NWM3MDNhOS8xL1FpWl9XbXowbThRX0l3VGVB
UGR3WHNXM244by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCcGCCsGAQUF
BwEHAQH/BBgwFjAUBAIAATAOMAwDBAHBCDoDBADBCDwwDQYJKoZIhvcNAQELBQAD
ggEBAIAGA9DVQ78aT0ii5heDPPX5HMZhyBGhBbIs9+xcG5u0LP6bXCW38RXdxx85
qV1X5b7tAZDNf3edX14YCZI/oHTtUPPlqn34Qw9d1u9LcrpdWeBfXGLUdzy0mzYU
5mRgZN7OTe36vQYZQ9qc0NRvgE3P1lMCNeiRvjiO4/R9MM8dNH9tlqQ/GYDiSZhK
KDzCfhMEwsGf679DxOvJQRLHRWlLJ+07QvwlCKK0vAkqZNp8PHaD5ox6+C5aIHSZ
xhDHVfvj3BEmShWtD/B5gwrU3fSlo3sCXSVKiRgjRYEIXxpCMtUxBLmNHxagjeo6
RmzPmoEzzWMXVyk1IZuh98YJehg=
-----END CERTIFICATE-----
Generated at Tue Apr 8 07:21:33 2025 by rpki-client