Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yjuG5lRw-ZTfptb-6OJk22LiSvk.cer
File: yjuG5lRw-ZTfptb-6OJk22LiSvk.cer (raw, json)
Hash identifier: SyTIz9wrnSSNyexS2os0OjMtTqpC5in5E62jkKzzRrk=
Subject key identifier: CA:3B:86:E6:54:70:F9:94:DF:A6:D6:FE:E8:E2:64:DB:62:E2:4A:F9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425220C4A935B82B4B0670D1AC4D5F9AA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/yjuG5lRw-ZTfptb-6OJk22LiSvk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:49:35 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 60442
AS: 61148
IP: 2.57.212.0/23
IP: 31.169.73.0/24
IP: 46.28.233.0/24
IP: 185.11.248.0/22
IP: 185.33.60.0/24
IP: 185.33.62.0/24
IP: 2a02:ed40::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:0c:4a:93:5b:82:b4:b0:67:0d:1a:c4:d5:f9:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:49:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca3b86e65470f994dfa6d6fee8e264db62e24af9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7b:ce:91:17:89:79:58:c0:f3:6a:e4:af:07:
a1:78:07:f0:e7:2c:96:b7:f6:b3:a9:98:9e:d5:ff:
86:0a:44:62:27:ef:96:c9:6c:23:c9:cc:08:4f:62:
a3:9e:40:ab:54:d6:64:9b:a8:81:49:0d:be:99:32:
d2:63:bb:4e:de:77:d1:0c:46:fe:da:26:6c:ff:ac:
da:e2:36:c3:ef:03:41:03:c9:d8:a5:75:af:c6:47:
e2:c7:42:93:45:49:c6:5e:cb:7d:df:07:c5:12:03:
ca:14:0c:ca:87:a9:da:72:96:11:9f:54:7d:26:c4:
86:0a:05:07:59:20:ed:00:06:69:0a:d7:3f:d7:4d:
9c:88:36:29:12:77:d1:84:68:fd:cf:5b:fe:a0:23:
4c:ee:7c:0c:77:ef:8d:17:5a:f2:1e:d0:25:97:07:
57:ba:2c:e5:01:ed:db:53:e5:f9:f4:de:f6:e1:db:
1b:93:89:52:29:c3:50:d3:8a:7f:ad:0d:6f:f9:99:
ef:27:d1:96:7f:52:8d:9d:6b:b5:d9:07:16:23:89:
34:9e:5a:60:20:f1:92:6f:cc:71:ab:1f:70:c9:57:
d1:27:88:fc:3e:bc:34:58:26:9a:44:ed:62:05:42:
c8:df:6b:e9:80:1e:f4:dc:5c:46:4e:3c:39:5f:40:
6f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:3B:86:E6:54:70:F9:94:DF:A6:D6:FE:E8:E2:64:DB:62:E2:4A:F9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/3dae71-1acf-4196-9608-9531d24e0610/1/yjuG5lRw-ZTfptb-6OJk22LiSvk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.212.0/23
31.169.73.0/24
46.28.233.0/24
185.11.248.0/22
185.33.60.0/24
185.33.62.0/24
IPv6:
2a02:ed40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60442
61148
Signature Algorithm: sha256WithRSAEncryption
3c:a7:8a:fd:97:c4:88:fe:5c:2a:82:b6:0e:a7:47:f8:13:30:
46:26:94:67:68:f0:bc:c2:96:55:94:61:b3:b6:8c:ff:9a:ad:
f5:19:16:94:ff:f9:02:e5:8d:64:da:64:f1:ea:cc:6e:44:7e:
6b:3c:53:7b:73:37:80:00:80:00:59:7a:62:ce:25:f9:91:6e:
84:db:d4:fd:9a:cd:f7:9e:49:5e:6a:c4:bf:98:52:cc:5a:a9:
bc:52:16:3b:80:89:d9:12:f9:43:0e:26:82:38:07:a5:e3:52:
e6:cc:a8:82:16:a7:5b:c1:c5:4f:12:e4:41:a1:0e:61:f2:ce:
01:57:c3:2e:68:d9:e0:e8:22:af:6b:1f:44:1f:e7:7f:ed:4f:
f9:cb:6e:ae:f7:45:0e:be:a2:62:c6:79:50:f2:78:10:5f:85:
64:96:45:50:34:64:1a:cd:1c:e3:3e:7a:7a:69:c8:11:f6:5a:
01:23:d2:0c:19:99:ce:49:70:af:d7:d1:5b:d4:7f:fc:6c:b1:
26:e5:74:ce:a1:98:0c:ab:8c:46:a3:de:53:81:43:a3:aa:ec:
43:f5:5d:c1:4d:63:5f:7e:68:82:60:f0:f5:84:5d:3e:df:44:
70:e7:52:24:00:f8:35:13:40:7b:cb:2b:23:5c:57:c6:e2:77:
52:52:88:aa
-----BEGIN CERTIFICATE-----
MIIFxjCCBK6gAwIBAgISAZQlIgxKk1uCtLBnDRrE1fmqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDM0OTM1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYTNiODZlNjU0NzBmOTk0ZGZhNmQ2ZmVlOGUyNjRkYjYyZTI0YWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HvOkReJeVjA82rkrweheAfw5yyW
t/azqZie1f+GCkRiJ++WyWwjycwIT2KjnkCrVNZkm6iBSQ2+mTLSY7tO3nfRDEb+
2iZs/6za4jbD7wNBA8nYpXWvxkfix0KTRUnGXst93wfFEgPKFAzKh6nacpYRn1R9
JsSGCgUHWSDtAAZpCtc/102ciDYpEnfRhGj9z1v+oCNM7nwMd++NF1ryHtAllwdX
uizlAe3bU+X59N724dsbk4lSKcNQ04p/rQ1v+ZnvJ9GWf1KNnWu12QcWI4k0nlpg
IPGSb8xxqx9wyVfRJ4j8Prw0WCaaRO1iBULI32vpgB703FxGTjw5X0BvfwIDAQAB
o4IC0jCCAs4wHQYDVR0OBBYEFMo7huZUcPmU36bW/ujiZNti4kr5MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg2LzNkYWU3
MS0xYWNmLTQxOTYtOTYwOC05NTMxZDI0ZTA2MTAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODYvM2RhZTcx
LTFhY2YtNDE5Ni05NjA4LTk1MzFkMjRlMDYxMC8xL3lqdUc1bFJ3LVpUZnB0Yi02
T0prMjJMaVN2ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUF
BwEHAQH/BD0wOzAqBAIAATAkAwQBAjnUAwQAH6lJAwQALhzpAwQCuQv4AwQAuSE8
AwQAuSE+MA0EAgACMAcDBQMqAu1AMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwDs
GgIDAO7cMA0GCSqGSIb3DQEBCwUAA4IBAQA8p4r9l8SI/lwqgrYOp0f4EzBGJpRn
aPC8wpZVlGGztoz/mq31GRaU//kC5Y1k2mTx6sxuRH5rPFN7czeAAIAAWXpiziX5
kW6E29T9ms33nkleasS/mFLMWqm8UhY7gInZEvlDDiaCOAel41LmzKiCFqdbwcVP
EuRBoQ5h8s4BV8MuaNng6CKvax9EH+d/7U/5y26u90UOvqJixnlQ8ngQX4VklkVQ
NGQazRzjPnp6acgR9loBI9IMGZnOSXCv19Fb1H/8bLEm5XTOoZgMq4xGo95TgUOj
quxD9V3BTWNffmiCYPD1hF0+30Rw51IkAPg1E0B7yysjXFfG4ndSUoiq
-----END CERTIFICATE-----
Generated at Mon Apr 7 04:15:44 2025 by rpki-client