Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.cer
File: 1-tpaqmyZRi_rFZ9WscCvLdP0Yls.cer (raw, json)
Hash identifier: 102JqjlGSkT8xZ80UWRYOVBVMNfY1+5uYAKrjRCvmag=
Subject key identifier: FA:DA:5A:AA:6C:99:46:2F:EB:15:9F:56:B1:C0:AF:2D:D3:F4:62:5B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FBF9F6413C979C968B5D5C54FC0D07
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:47:38 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 170.13.246.0/24
IP: 185.158.76.0/22
IP: 2a07:aac0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fb:f9:f6:41:3c:97:9c:96:8b:5d:5c:54:fc:0d:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fada5aaa6c99462feb159f56b1c0af2dd3f4625b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bc:93:51:51:04:20:09:6c:ab:25:c2:b9:c8:
ee:78:ef:81:6b:41:35:d3:6b:26:3d:28:c2:1e:60:
cb:25:36:f1:9f:01:e3:99:ad:87:55:d9:e7:7f:83:
c9:28:4f:19:52:25:bd:62:88:11:b0:7a:41:28:5e:
22:df:cf:11:8d:39:26:65:1e:95:12:17:e8:15:89:
38:79:45:2c:8e:04:c8:8e:18:50:b1:38:62:be:c5:
33:8f:25:28:8f:ed:9e:d2:6d:0a:66:fd:88:62:6f:
09:66:4b:72:40:78:62:08:7b:be:c3:83:cf:63:7f:
ce:21:77:63:5d:9d:05:6c:18:55:39:c1:11:a7:77:
bc:2a:e4:56:9b:ac:ac:a6:4f:f7:a9:ad:cd:20:d7:
9f:28:1d:77:0f:ea:03:55:df:86:cd:5a:49:5a:8b:
88:e3:17:3e:f3:f8:91:6e:a9:7f:40:d7:1b:b4:dc:
6c:cb:ad:51:09:dc:2d:24:2c:9a:27:4a:f9:fe:b0:
07:bb:e3:4c:56:dd:e7:f8:b8:ff:e4:42:7e:6d:ba:
52:29:86:2a:b9:3c:6f:5d:c2:8a:6c:91:ff:37:e9:
47:4f:a9:c0:65:1a:b4:4d:3c:79:68:30:0c:98:20:
b5:de:b7:ba:67:66:ab:4c:ab:be:5a:de:70:b4:3e:
95:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:DA:5A:AA:6C:99:46:2F:EB:15:9F:56:B1:C0:AF:2D:D3:F4:62:5B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.13.246.0/24
185.158.76.0/22
IPv6:
2a07:aac0::/29
Signature Algorithm: sha256WithRSAEncryption
7d:e5:6f:48:8d:f9:5c:62:27:b6:d8:44:9a:99:73:17:8f:47:
4d:94:f8:91:78:28:9a:75:6c:ea:4b:01:68:e9:82:3e:6d:5e:
55:5c:8c:04:f6:7f:59:33:c5:86:65:9c:dd:98:d0:d4:55:0c:
c6:ae:83:56:0d:af:af:8f:59:a8:ec:a2:ac:55:ee:f8:e0:93:
3f:a0:bf:0c:82:82:fd:b5:4a:3a:b8:70:bc:11:d7:ce:43:cb:
f6:e4:70:d5:e7:ec:86:b0:bf:5c:a5:81:70:b6:59:69:97:34:
d3:12:17:73:f8:95:5a:72:c7:0d:30:0d:54:38:45:37:48:19:
97:06:4d:dc:36:83:40:33:8c:54:5c:16:21:88:88:26:08:3f:
52:fc:16:af:a7:1b:a3:93:b0:da:ad:0d:8d:a9:24:a1:f2:fa:
6b:e4:f6:60:1d:23:0d:d3:27:6a:be:a4:97:38:a4:48:e3:74:
a5:ae:41:91:5d:06:4b:80:37:df:dc:0a:76:20:6c:32:4f:52:
06:eb:2f:59:36:d2:e6:a1:47:9b:7d:8e:00:71:12:5d:60:67:
a1:ca:c0:99:d5:68:d9:b3:0a:9d:ac:80:f7:c7:84:56:ab:86:
dc:d1:f4:8b:26:c9:7d:bc:79:c4:af:b0:b8:7b:9b:c9:04:74:
31:f5:7d:75
-----BEGIN CERTIFICATE-----
MIIFjjCCBHagAwIBAgISAZQl+/n2QTyXnJaLXVxU/A0HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDc0NzM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYWRhNWFhYTZjOTk0NjJmZWIxNTlmNTZiMWMwYWYyZGQzZjQ2MjViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLyTUVEEIAlsqyXCucjueO+Ba0E1
02smPSjCHmDLJTbxnwHjma2HVdnnf4PJKE8ZUiW9YogRsHpBKF4i388RjTkmZR6V
EhfoFYk4eUUsjgTIjhhQsThivsUzjyUoj+2e0m0KZv2IYm8JZktyQHhiCHu+w4PP
Y3/OIXdjXZ0FbBhVOcERp3e8KuRWm6yspk/3qa3NINefKB13D+oDVd+GzVpJWouI
4xc+8/iRbql/QNcbtNxsy61RCdwtJCyaJ0r5/rAHu+NMVt3n+Lj/5EJ+bbpSKYYq
uTxvXcKKbJH/N+lHT6nAZRq0TTx5aDAMmCC13re6Z2arTKu+Wt5wtD6VqwIDAQAB
o4ICmjCCApYwHQYDVR0OBBYEFPraWqpsmUYv6xWfVrHAry3T9GJbMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEkBggrBgEFBQcBCwSCARYwggESMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FjLzA2MTUw
Ni1lZGYwLTQ4ZDctYmU3ZC02ZjFiMDM3YmE2ZTIvMS8wfQYIKwYBBQUHMAqGcXJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWMvMDYxNTA2
LWVkZjAtNDhkNy1iZTdkLTZmMWIwMzdiYTZlMi8xLzEtdHBhcW15WlJpX3JGWjlX
c2NDdkxkUDBZbHMubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAucmlwZS5u
ZXQvbm90aWZpY2F0aW9uLnhtbDBZBgNVHR8EUjBQME6gTKBKhkhyc3luYzovL3Jw
a2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0twU28zVlZLNXdFSElKbkhD
MlFIVlYzZDVtay5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEF
BQcBBwEB/wQlMCMwEgQCAAEwDAMEAKoN9gMEArmeTDANBAIAAjAHAwUDKgeqwDAN
BgkqhkiG9w0BAQsFAAOCAQEAfeVvSI35XGIntthEmplzF49HTZT4kXgomnVs6ksB
aOmCPm1eVVyMBPZ/WTPFhmWc3ZjQ1FUMxq6DVg2vr49ZqOyirFXu+OCTP6C/DIKC
/bVKOrhwvBHXzkPL9uRw1efshrC/XKWBcLZZaZc00xIXc/iVWnLHDTANVDhFN0gZ
lwZN3DaDQDOMVFwWIYiIJgg/UvwWr6cbo5Ow2q0NjakkofL6a+T2YB0jDdMnar6k
lzikSON0pa5BkV0GS4A339wKdiBsMk9SBusvWTbS5qFHm32OAHESXWBnocrAmdVo
2bMKnayA98eEVquG3NH0iybJfbx5xK+wuHubyQR0MfV9dQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:57:30 2025 by rpki-client