Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jsDMCMmOBfTh-wRACNhSoqTaAPA.cer
File: jsDMCMmOBfTh-wRACNhSoqTaAPA.cer (raw, json)
Hash identifier: i5qW/r7bWpQmkJsXCJMaeUK3k49iE1duawmULcRHyKc=
Subject key identifier: 8E:C0:CC:08:C9:8E:05:F4:E1:FB:04:40:08:D8:52:A2:A4:DA:00:F0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942520C208DAB7DD66BFDB2C29BDF38DF6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:48:11 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.216.188.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:20:c2:08:da:b7:dd:66:bf:db:2c:29:bd:f3:8d:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ec0cc08c98e05f4e1fb044008d852a2a4da00f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0c:8c:88:dc:d5:9a:21:9b:36:7e:14:cc:51:
59:45:2f:5c:89:93:4c:a7:41:d4:df:c9:67:67:98:
08:d0:2d:ce:02:ac:e8:6a:47:a6:53:94:77:3a:25:
8b:f8:4a:14:7a:fb:4f:e9:fb:33:0d:0e:f4:31:52:
71:0b:3a:db:d6:29:15:59:a9:13:ac:f6:6c:00:ef:
e0:36:6c:37:f1:da:70:63:45:df:7a:57:89:b7:a6:
4c:9f:57:52:7e:2c:52:f4:d3:b2:75:35:26:8b:25:
80:33:6e:15:4c:f1:e9:7f:e8:b1:05:6b:ed:0d:df:
be:8e:9e:3f:54:4c:e5:36:d9:c1:80:a7:71:34:63:
a0:5a:8e:cd:12:6e:67:d5:43:de:43:13:ed:4a:a8:
8a:0c:24:7f:7b:c5:66:14:71:38:1b:b9:c0:2d:7d:
1e:21:49:24:87:9d:87:af:28:6b:35:4d:59:6a:26:
c1:bd:6c:1a:d0:2f:84:64:54:cd:a1:01:c0:ed:10:
76:0a:b4:95:56:3d:ab:b3:13:5b:16:11:ba:d5:15:
8d:42:25:a3:a3:43:16:ed:68:7b:6e:47:da:49:7e:
16:94:38:a3:72:7d:4f:84:9b:99:92:a7:c9:ab:ed:
9c:52:c2:3d:79:81:93:be:d0:21:8d:2e:c4:14:3d:
ee:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:C0:CC:08:C9:8E:05:F4:E1:FB:04:40:08:D8:52:A2:A4:DA:00:F0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.188.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:8b:2f:d3:f4:19:ce:6a:57:db:04:2b:18:db:da:e4:5c:81:
a8:f2:7b:60:3d:e8:b9:0f:2f:48:f9:c9:fb:b8:af:18:e3:31:
6f:d0:62:d0:7e:32:5c:c5:e3:02:58:6a:14:b5:b3:1d:68:cd:
7a:ee:a5:30:d9:72:ee:d6:f7:12:ce:b7:25:18:a2:ba:f6:4a:
6b:de:fd:7e:6d:d8:3a:e2:e2:56:e1:7e:81:67:77:37:95:4b:
d3:f0:18:35:08:30:20:51:c8:3b:1a:8f:2e:58:06:4d:e5:44:
38:a6:87:59:f4:ab:e3:9d:14:87:d6:57:2f:75:a6:ae:d6:a4:
05:dd:67:fe:e5:ac:e8:e7:43:c2:da:15:76:a6:14:92:b4:b2:
3b:3f:78:eb:f2:d7:9f:3b:4e:58:94:ad:eb:4e:d0:f7:03:4f:
4a:79:a8:75:12:c8:73:42:ff:14:e4:55:16:5b:c0:60:21:2b:
b1:dd:84:d3:4c:c2:f1:ab:9b:7e:9f:28:ed:a1:a1:f2:e1:b8:
c5:ad:4b:c6:3e:1e:a0:55:e3:c5:33:70:69:be:62:d6:35:05:
a9:8f:9d:31:53:a4:e1:4f:21:00:86:c5:7d:8f:b1:ee:b6:fd:
61:6d:4e:ec:ec:f1:14:5a:68:d2:53:d3:17:cc:86:ed:9d:39:
b3:b5:06:42
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQlIMII2rfdZr/bLCm98432MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDM0ODExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZWMwY2MwOGM5OGUwNWY0ZTFmYjA0NDAwOGQ4NTJhMmE0ZGEwMGYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAyMiNzVmiGbNn4UzFFZRS9ciZNM
p0HU38lnZ5gI0C3OAqzoakemU5R3OiWL+EoUevtP6fszDQ70MVJxCzrb1ikVWakT
rPZsAO/gNmw38dpwY0XfeleJt6ZMn1dSfixS9NOydTUmiyWAM24VTPHpf+ixBWvt
Dd++jp4/VEzlNtnBgKdxNGOgWo7NEm5n1UPeQxPtSqiKDCR/e8VmFHE4G7nALX0e
IUkkh52HryhrNU1ZaibBvWwa0C+EZFTNoQHA7RB2CrSVVj2rsxNbFhG61RWNQiWj
o0MW7Wh7bkfaSX4WlDijcn1PhJuZkqfJq+2cUsI9eYGTvtAhjS7EFD3uNwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFI7AzAjJjgX04fsEQAjYUqKk2gDwMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JkL2QwYmUw
Yi1iZmExLTQ2ZGEtYmMxMC0zNTc2OWYwNjI5OWEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmQvZDBiZTBi
LWJmYTEtNDZkYS1iYzEwLTM1NzY5ZjA2Mjk5YS8xL2pzRE1DTW1PQmZUaC13UkFD
TmhTb3FUYUFQQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAW9i8MA0GCSqGSIb3DQEBCwUAA4IBAQCiiy/T
9BnOalfbBCsY29rkXIGo8ntgPei5Dy9I+cn7uK8Y4zFv0GLQfjJcxeMCWGoUtbMd
aM167qUw2XLu1vcSzrclGKK69kpr3v1+bdg64uJW4X6BZ3c3lUvT8Bg1CDAgUcg7
Go8uWAZN5UQ4podZ9KvjnRSH1lcvdaau1qQF3Wf+5azo50PC2hV2phSStLI7P3jr
8tefO05YlK3rTtD3A09Keah1EshzQv8U5FUWW8BgISux3YTTTMLxq5t+nyjtoaHy
4bjFrUvGPh6gVePFM3BpvmLWNQWpj50xU6ThTyEAhsV9j7Hutv1hbU7s7PEUWmjS
U9MXzIbtnTmztQZC
-----END CERTIFICATE-----
Generated at Mon Apr 7 22:16:59 2025 by rpki-client