Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jygkxhNX3DRLvfNbg1d0WbnT_EQ.cer
File: jygkxhNX3DRLvfNbg1d0WbnT_EQ.cer (raw, json)
Hash identifier: 7T7Ki5OyEEj22cNaDFyX3QhBpDWsF5vGCqln//2e1ck=
Subject key identifier: 8F:28:24:C6:13:57:DC:34:4B:BD:F3:5B:83:57:74:59:B9:D3:FC:44
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FD9CF25916A4110D9680A527A0C6C0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:49:25 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 31004
AS: 48263
IP: 91.230.140.0/23
IP: 93.157.32.0/21
IP: 185.95.65.0/24
IP: 193.203.120.0/23
IP: 194.116.210.0/23
IP: 194.150.244.0/23
IP: 2a00:4bc0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:9c:f2:59:16:a4:11:0d:96:80:a5:27:a0:c6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f2824c61357dc344bbdf35b83577459b9d3fc44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b7:f5:8c:a4:ed:b3:a3:1f:bf:df:58:67:b6:
53:b6:fe:0b:34:29:47:64:5b:ee:2e:20:04:85:7d:
7e:3a:8d:8f:4d:3e:fa:5f:19:e7:e2:06:be:8a:a9:
e7:e4:6b:1f:33:11:34:00:83:62:e2:c1:11:f0:0b:
85:c9:69:e9:4e:8c:e2:da:39:d4:58:5d:6e:54:bb:
ee:54:50:0f:64:ae:14:e3:36:a0:6a:3a:75:0b:6b:
28:ee:d4:a2:a9:05:a6:52:9a:5e:40:79:0a:e1:c1:
c3:09:49:de:77:f3:ad:49:99:b8:88:62:ba:ec:d6:
04:e5:1a:b4:28:18:b4:cc:e0:ae:b5:7d:cd:82:b4:
30:8d:d1:be:ed:3f:d1:51:30:ee:75:f3:69:f1:f4:
7c:38:ba:36:e7:92:5c:39:0a:d1:99:aa:f4:4e:d7:
b2:ec:05:b7:0e:9c:e6:27:1c:ea:ac:93:88:74:ff:
e3:69:ce:15:5a:c3:2f:58:6a:46:01:11:82:87:17:
85:64:a2:28:e2:c1:59:59:7d:db:99:f6:65:2a:75:
86:9c:e2:67:12:8e:f9:7d:11:db:24:d9:05:e4:86:
fd:7d:5e:97:22:ba:27:cf:56:0f:b4:c7:c1:7b:4e:
70:6d:8b:41:01:ae:67:07:c3:57:51:c9:87:60:3d:
2f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:28:24:C6:13:57:DC:34:4B:BD:F3:5B:83:57:74:59:B9:D3:FC:44
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.140.0/23
93.157.32.0/21
185.95.65.0/24
193.203.120.0/23
194.116.210.0/23
194.150.244.0/23
IPv6:
2a00:4bc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
31004
48263
Signature Algorithm: sha256WithRSAEncryption
67:46:14:a8:56:0d:be:e5:ec:1a:6a:52:b0:d6:0c:95:ee:e6:
04:fa:ff:d4:7c:7b:a0:e1:5a:59:64:31:e2:88:ee:dc:a2:4a:
05:ff:57:3c:ac:4b:17:c2:bd:c4:03:0f:c1:13:2d:15:43:2f:
c5:a2:fe:25:8b:35:c0:e4:10:f4:e1:11:77:1e:53:d3:65:8d:
5f:d0:c9:8b:55:f2:e7:f3:97:41:34:4f:26:d1:36:51:7e:c6:
6f:70:e3:37:c9:9d:82:da:d3:fc:c6:aa:94:15:3a:bd:0e:f7:
55:f5:b7:27:de:d6:92:57:b7:05:c1:52:e3:12:53:22:52:26:
02:1c:cb:ea:0b:f2:b1:d3:4b:6c:3f:74:cc:49:50:0c:60:41:
01:68:f2:79:bf:8f:b4:07:16:90:b0:5e:ee:3b:1e:2c:80:fc:
18:c4:f7:cd:19:e6:ef:93:68:2c:03:c2:39:d8:d1:48:69:28:
12:c7:65:a7:d0:3b:d3:0c:5d:05:e5:08:f6:d5:56:80:e6:89:
d6:ba:eb:30:f1:fc:d7:13:4d:e2:ef:9b:94:2e:24:11:38:33:
a9:c7:b7:3d:b5:9c:15:ad:6d:3c:e8:dc:76:b8:fa:42:5a:c7:
5a:aa:07:5c:87:a0:79:cb:6c:35:20:b8:19:e5:d3:71:fb:84:
b1:b1:79:d2
-----BEGIN CERTIFICATE-----
MIIFxTCCBK2gAwIBAgISAZQl/ZzyWRakEQ2WgKUnoMbAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDc0OTI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZjI4MjRjNjEzNTdkYzM0NGJiZGYzNWI4MzU3NzQ1OWI5ZDNmYzQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLf1jKTts6Mfv99YZ7ZTtv4LNClH
ZFvuLiAEhX1+Oo2PTT76Xxnn4ga+iqnn5GsfMxE0AINi4sER8AuFyWnpTozi2jnU
WF1uVLvuVFAPZK4U4zagajp1C2so7tSiqQWmUppeQHkK4cHDCUned/OtSZm4iGK6
7NYE5Rq0KBi0zOCutX3NgrQwjdG+7T/RUTDudfNp8fR8OLo255JcOQrRmar0Ttey
7AW3DpzmJxzqrJOIdP/jac4VWsMvWGpGARGChxeFZKIo4sFZWX3bmfZlKnWGnOJn
Eo75fRHbJNkF5Ib9fV6XIronz1YPtMfBe05wbYtBAa5nB8NXUcmHYD0vRQIDAQAB
o4IC0TCCAs0wHQYDVR0OBBYEFI8oJMYTV9w0S73zW4NXdFm50/xEMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU5LzY1MmVi
NC0zMjFjLTQ4YzAtOTI3Mi0zYWU3MTFhZjAzNGIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTkvNjUyZWI0
LTMyMWMtNDhjMC05MjcyLTNhZTcxMWFmMDM0Yi8xL2p5Z2t4aE5YM0RSTHZmTmJn
MWQwV2JuVF9FUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUF
BwEHAQH/BD0wOzAqBAIAATAkAwQBW+aMAwQDXZ0gAwQAuV9BAwQBwct4AwQBwnTS
AwQBwpb0MA0EAgACMAcDBQMqAEvAMB4GCCsGAQUFBwEIAQH/BA8wDaALMAkCAnkc
AgMAvIcwDQYJKoZIhvcNAQELBQADggEBAGdGFKhWDb7l7BpqUrDWDJXu5gT6/9R8
e6DhWllkMeKI7tyiSgX/VzysSxfCvcQDD8ETLRVDL8Wi/iWLNcDkEPThEXceU9Nl
jV/QyYtV8ufzl0E0TybRNlF+xm9w4zfJnYLa0/zGqpQVOr0O91X1tyfe1pJXtwXB
UuMSUyJSJgIcy+oL8rHTS2w/dMxJUAxgQQFo8nm/j7QHFpCwXu47HiyA/BjE980Z
5u+TaCwDwjnY0UhpKBLHZafQO9MMXQXlCPbVVoDmida66zDx/NcTTeLvm5QuJBE4
M6nHtz21nBWtbTzo3Ha4+kJax1qqB1yHoHnLbDUguBnl03H7hLGxedI=
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:22:06 2025 by rpki-client