Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-LGChfQu1nwR2Pg99IixD8h_F78.cer
File: 1-LGChfQu1nwR2Pg99IixD8h_F78.cer (raw, json)
Hash identifier: R5krPUO62mkx56Rp3vrxIM+P1xdbTcHrSXppvFAGQWA=
Subject key identifier: F8:B1:82:85:F4:2E:D6:7C:11:D8:F8:3D:F4:88:B1:0F:C8:7F:17:BF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FB6943312CA617A557806707D44573
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:48:09 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 210238
IP: 81.22.224.0/22
IP: 185.132.228.0/22
IP: 2a06:e580::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:69:43:31:2c:a6:17:a5:57:80:67:07:d4:45:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8b18285f42ed67c11d8f83df488b10fc87f17bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:5d:ac:90:89:f7:13:16:b3:8d:99:5d:b6:16:
2c:44:2b:a3:0d:54:3d:88:19:6f:7e:77:9c:52:86:
14:cf:aa:a6:0f:2a:e7:82:00:0e:2b:a3:06:f7:48:
b8:49:08:fa:fc:dd:ce:17:53:7a:2d:83:65:25:d2:
dc:6c:96:34:c3:9d:2a:95:e0:06:3d:0e:97:74:78:
4c:e1:20:3f:85:b6:59:49:18:d4:53:0e:2d:a6:a3:
b8:7f:e0:a7:0b:f7:5c:4f:84:4a:21:b3:12:63:3c:
6a:b6:fb:a2:c8:19:13:7c:0e:e8:e2:72:13:45:2b:
cc:20:aa:32:b8:e2:92:ca:fb:be:d7:15:7e:95:93:
7a:00:7d:3d:5d:fd:bb:4c:c9:e2:c2:e9:57:8e:e2:
15:b4:e0:43:7f:00:ad:57:f8:91:8d:f0:77:9f:91:
9b:70:7d:32:b9:51:1b:9e:67:94:72:10:e2:3a:39:
5e:7f:08:67:7b:69:a9:07:ae:c7:f1:61:df:99:9f:
56:ab:e2:a1:db:d5:a4:f0:62:10:7d:4e:5a:bd:81:
c5:89:83:15:24:86:df:43:c6:74:bc:65:2a:87:7f:
52:d5:f2:4b:5c:0b:03:c7:b2:df:db:09:48:90:a8:
a6:ab:ea:13:0e:33:f2:c5:95:b5:f5:dc:99:e8:be:
2b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B1:82:85:F4:2E:D6:7C:11:D8:F8:3D:F4:88:B1:0F:C8:7F:17:BF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/b331cc-6b6d-4693-9267-b422779160bb/1/1-LGChfQu1nwR2Pg99IixD8h_F78.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.224.0/22
185.132.228.0/22
IPv6:
2a06:e580::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210238
Signature Algorithm: sha256WithRSAEncryption
0c:7e:38:d4:8f:07:1c:61:31:52:fd:93:d2:dc:d8:5d:c0:99:
84:6c:b3:4d:f6:7d:43:60:fb:4d:9e:4d:67:3b:d1:e4:4f:42:
ff:30:48:bb:d7:b4:bd:53:7d:27:46:cb:8f:ec:5f:55:71:48:
1c:11:40:65:d3:bf:37:ca:fc:43:0f:5d:73:13:1a:c1:2f:b7:
eb:47:2d:5b:47:17:59:a0:48:35:c0:6a:63:1c:02:cd:e1:7a:
87:17:31:c2:ac:0b:5a:e8:52:a6:d6:cb:5c:b9:a8:aa:b0:63:
6d:44:df:42:65:df:82:14:3a:30:40:9c:1b:58:8f:61:b0:91:
81:36:4a:05:04:69:5f:94:58:a7:3d:86:94:4a:5a:81:ac:bf:
77:49:63:77:b7:55:c2:8d:57:41:05:ac:87:bb:4d:2e:63:54:
c0:dc:97:bc:89:61:ed:3f:a4:f1:0d:cc:ea:cc:18:5c:41:12:
f8:b5:b2:86:e0:18:9a:47:78:1a:ba:4c:4d:80:b2:10:e5:c3:
5b:20:b4:d1:70:8c:cc:b8:72:ec:42:d7:98:d9:11:79:61:0f:
98:64:fa:01:b8:3f:79:06:c0:83:a8:46:be:f7:0f:a6:14:10:
b9:70:19:9e:83:8d:0a:a7:91:af:44:a3:86:f1:91:43:74:5f:
0b:da:d2:81
-----BEGIN CERTIFICATE-----
MIIFqjCCBJKgAwIBAgISAZQi+2lDMSymF6VXgGcH1EVzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTc0ODA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOGIxODI4NWY0MmVkNjdjMTFkOGY4M2RmNDg4YjEwZmM4N2YxN2JmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4F2skIn3ExazjZldthYsRCujDVQ9
iBlvfnecUoYUz6qmDyrnggAOK6MG90i4SQj6/N3OF1N6LYNlJdLcbJY0w50qleAG
PQ6XdHhM4SA/hbZZSRjUUw4tpqO4f+CnC/dcT4RKIbMSYzxqtvuiyBkTfA7o4nIT
RSvMIKoyuOKSyvu+1xV+lZN6AH09Xf27TMniwulXjuIVtOBDfwCtV/iRjfB3n5Gb
cH0yuVEbnmeUchDiOjlefwhne2mpB67H8WHfmZ9Wq+Kh29Wk8GIQfU5avYHFiYMV
JIbfQ8Z0vGUqh39S1fJLXAsDx7Lf2wlIkKimq+oTDjPyxZW19dyZ6L4rFwIDAQAB
o4ICtjCCArIwHQYDVR0OBBYEFPixgoX0LtZ8Edj4PfSIsQ/Ifxe/MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2EyL2IzMzFj
Yy02YjZkLTQ2OTMtOTI2Ny1iNDIyNzc5MTYwYmIvMS8wfQYIKwYBBQUHMAqGcXJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTIvYjMzMWNj
LTZiNmQtNDY5My05MjY3LWI0MjI3NzkxNjBiYi8xLzEtTEdDaGZRdTFud1IyUGc5
OUlpeEQ4aF9GNzgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u
ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD
MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEF
BQcBBwEB/wQlMCMwEgQCAAEwDAMEAlEW4AMEArmE5DANBAIAAjAHAwUDKgblgDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMDNT4wDQYJKoZIhvcNAQELBQADggEBAAx+
ONSPBxxhMVL9k9Lc2F3AmYRss032fUNg+02eTWc70eRPQv8wSLvXtL1TfSdGy4/s
X1VxSBwRQGXTvzfK/EMPXXMTGsEvt+tHLVtHF1mgSDXAamMcAs3heocXMcKsC1ro
UqbWy1y5qKqwY21E30Jl34IUOjBAnBtYj2GwkYE2SgUEaV+UWKc9hpRKWoGsv3dJ
Y3e3VcKNV0EFrIe7TS5jVMDcl7yJYe0/pPENzOrMGFxBEvi1sobgGJpHeBq6TE2A
shDlw1sgtNFwjMy4cuxC15jZEXlhD5hk+gG4P3kGwIOoRr73D6YUELlwGZ6DjQqn
ka9Eo4bxkUN0Xwva0oE=
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:57:20 2025 by rpki-client