Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/156keuFhy7Pa75d4lzDXDEy6idA.cer
File: 156keuFhy7Pa75d4lzDXDEy6idA.cer (raw, json)
Hash identifier: MyRyTX88WPLyQF2GA2O2B+MXjK0qfBRDHg+sDwpntX8=
Subject key identifier: D7:9E:A4:7A:E1:61:CB:B3:DA:EF:97:78:97:30:D7:0C:4C:BA:89:D0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D5F78F955F19663BA827663EB88C96
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:48:01 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 129.88.0.0/16
IP: 147.171.0.0/16
IP: 152.77.0.0/16
IP: 192.33.171.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:f7:8f:95:5f:19:66:3b:a8:27:66:3e:b8:8c:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d79ea47ae161cbb3daef97789730d70c4cba89d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:be:11:ae:5c:e1:51:92:2d:b5:e4:a6:e8:33:
9d:41:b9:97:fd:7f:e0:85:17:a9:22:c2:b2:52:9c:
db:8b:a8:7c:31:e2:bd:0d:e6:fd:b4:3e:21:70:c9:
8e:2d:41:cc:7a:4c:7b:98:24:bd:a2:f6:79:9a:5f:
80:a1:01:bc:99:53:0d:c5:1a:8e:fe:9b:0d:cf:f1:
8c:2f:35:a0:b8:cc:14:b9:89:a1:b5:1f:8e:db:63:
35:71:94:05:c9:40:d7:8d:b9:19:ab:dd:55:14:ca:
78:d2:11:0a:38:6c:d1:9a:fc:64:da:00:47:a0:d0:
b8:27:be:90:c3:2b:ea:40:64:56:cb:61:33:c0:3e:
67:7b:b3:39:5d:c5:13:2d:be:12:f2:f3:38:f4:ef:
29:2e:6b:7a:e8:ef:d9:9b:20:da:53:86:03:60:bd:
7d:58:70:42:ff:cd:0e:ab:21:49:90:69:d6:b7:d3:
df:b3:51:c8:c9:60:8b:67:0a:bb:ea:41:d4:d3:bb:
52:91:4e:ec:0b:20:da:71:cd:e1:2d:11:fa:f1:d7:
67:c5:96:65:32:73:ed:9b:f9:9b:fa:2b:ac:7c:98:
01:29:87:bf:78:81:6c:38:34:35:88:7a:59:4b:e6:
1c:65:96:96:be:04:e7:dd:00:5e:42:1f:32:a1:f5:
03:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:9E:A4:7A:E1:61:CB:B3:DA:EF:97:78:97:30:D7:0C:4C:BA:89:D0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d9cb41-1c3b-46ab-a993-3c3e50dda6cc/1/156keuFhy7Pa75d4lzDXDEy6idA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
129.88.0.0/16
147.171.0.0/16
152.77.0.0/16
192.33.171.0/24
Signature Algorithm: sha256WithRSAEncryption
92:a2:00:7f:16:19:3a:96:4e:a6:e1:62:64:a0:be:d6:24:3b:
13:ff:11:3b:ba:04:dc:8e:1e:ba:9e:9f:d4:3a:9b:bc:4a:3c:
e1:ca:6f:65:38:c9:81:b1:f6:1e:64:b8:89:2d:6a:2b:22:fb:
6c:87:b0:12:7c:5e:45:cf:8c:2d:2d:c0:91:0a:2c:4e:e6:65:
23:b0:ed:08:36:96:dc:37:82:7e:2e:88:2e:be:f7:de:e9:7b:
2a:25:57:e0:f5:73:c6:c3:1b:66:71:98:0e:42:f8:79:73:51:
84:c2:78:33:3e:0d:52:f8:d9:39:8e:9e:39:4b:81:6b:40:6e:
ed:17:53:da:68:a4:1c:d0:2a:b0:c6:3f:6e:6a:3a:2c:e1:f1:
e1:dd:91:79:63:1e:0e:c9:0d:b0:19:f3:f5:e5:68:de:b5:a9:
20:6d:3e:7b:9b:b4:ab:d6:71:9e:35:97:df:0c:83:76:9b:68:
5d:31:da:17:ed:52:35:28:2e:f0:ef:8c:51:fe:d2:1f:8a:6f:
62:fd:46:2f:8d:98:db:8c:4c:4c:bb:6b:a1:29:e3:7b:52:d5:
6e:22:a4:e0:f7:62:b3:54:9a:1d:86:24:14:d5:7a:20:ef:60:
c6:38:ac:83:b3:15:d5:c2:1b:d6:e1:25:02:44:79:90:db:ff:
0d:9a:94:f0
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZQg1fePlV8ZZjuoJ2Y+uIyWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDc0ODAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNzllYTQ3YWUxNjFjYmIzZGFlZjk3Nzg5NzMwZDcwYzRjYmE4OWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA174RrlzhUZItteSm6DOdQbmX/X/g
hRepIsKyUpzbi6h8MeK9Deb9tD4hcMmOLUHMekx7mCS9ovZ5ml+AoQG8mVMNxRqO
/psNz/GMLzWguMwUuYmhtR+O22M1cZQFyUDXjbkZq91VFMp40hEKOGzRmvxk2gBH
oNC4J76QwyvqQGRWy2EzwD5ne7M5XcUTLb4S8vM49O8pLmt66O/ZmyDaU4YDYL19
WHBC/80OqyFJkGnWt9Pfs1HIyWCLZwq76kHU07tSkU7sCyDacc3hLRH68ddnxZZl
MnPtm/mb+iusfJgBKYe/eIFsODQ1iHpZS+YcZZaWvgTn3QBeQh8yofUDoQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFNeepHrhYcuz2u+XeJcw1wxMuonQMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZmL2Q5Y2I0
MS0xYzNiLTQ2YWItYTk5My0zYzNlNTBkZGE2Y2MvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmYvZDljYjQx
LTFjM2ItNDZhYi1hOTkzLTNjM2U1MGRkYTZjYy8xLzE1NmtldUZoeTdQYTc1ZDRs
ekRYREV5NmlkQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAbBAIAATAVAwMAgVgDAwCTqwMDAJhNAwQAwCGrMA0GCSqGSIb3
DQEBCwUAA4IBAQCSogB/Fhk6lk6m4WJkoL7WJDsT/xE7ugTcjh66np/UOpu8Sjzh
ym9lOMmBsfYeZLiJLWorIvtsh7ASfF5Fz4wtLcCRCixO5mUjsO0INpbcN4J+Logu
vvfe6XsqJVfg9XPGwxtmcZgOQvh5c1GEwngzPg1S+Nk5jp45S4FrQG7tF1PaaKQc
0Cqwxj9uajos4fHh3ZF5Yx4OyQ2wGfP15WjetakgbT57m7Sr1nGeNZffDIN2m2hd
MdoX7VI1KC7w74xR/tIfim9i/UYvjZjbjExMu2uhKeN7UtVuIqTg92KzVJodhiQU
1Xog72DGOKyDsxXVwhvW4SUCRHmQ2/8NmpTw
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:33:16 2025 by rpki-client