Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2mCZ5_86FxvOO2_pnrtNJMuF5GE.cer
File: 2mCZ5_86FxvOO2_pnrtNJMuF5GE.cer (raw, json)
Hash identifier: 9YbE21qfjZEkt3BXSB+fqne79a45gbvPjSWVonWGmHk=
Subject key identifier: DA:60:99:E7:FF:3A:17:1B:CE:3B:6F:E9:9E:BB:4D:24:CB:85:E4:61
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221FE1F126DF388EF8DD5436D3F82E04
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:22 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 8787
IP: 212.9.128.0/19
IP: 2a03:1f60::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:e1:f1:26:df:38:8e:f8:dd:54:36:d3:f8:2e:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=da6099e7ff3a171bce3b6fe99ebb4d24cb85e461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:78:38:ee:f2:5f:40:d1:8a:4a:3c:a2:1c:25:
e3:0b:3c:b5:81:dd:58:e1:e1:75:4b:1b:d8:c2:37:
85:3c:51:51:c5:e6:f9:43:40:18:80:78:b1:ef:5b:
16:57:da:d5:d3:74:2e:df:5a:2b:a9:ba:a0:a4:c7:
5c:30:a0:8a:29:21:b1:0f:a3:ec:76:dd:d3:c0:b3:
32:7e:36:14:ce:8e:d5:da:5b:12:0d:c0:99:6f:5c:
2d:fe:7a:a9:23:22:a3:49:ec:e3:86:67:f8:65:98:
51:f9:2d:9a:14:33:77:e6:78:9b:ef:ed:71:ef:ec:
2b:12:83:c1:2e:92:75:d0:44:d1:b4:2d:e5:fc:55:
dc:25:d9:f8:9b:91:08:11:c4:77:93:97:7d:44:4b:
67:04:c6:87:31:d8:b7:de:6e:a5:0b:f6:9e:7c:49:
1e:ef:57:0d:b5:ea:30:5d:a0:58:23:cf:44:b0:fd:
6c:eb:ea:58:14:d0:96:21:60:eb:3d:2d:a3:83:b0:
d2:b7:53:78:18:95:a7:17:72:8c:a3:43:d4:05:3b:
f9:0d:7b:11:1c:4c:d2:18:5f:54:b4:43:02:df:19:
ce:ae:c9:ba:ce:24:60:4a:f1:4b:39:8a:79:83:14:
3a:2e:34:aa:ca:5a:7f:74:6c:00:36:09:46:53:77:
6c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:60:99:E7:FF:3A:17:1B:CE:3B:6F:E9:9E:BB:4D:24:CB:85:E4:61
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6c3741-cf8c-4d5d-bb8e-4598689d551e/1/2mCZ5_86FxvOO2_pnrtNJMuF5GE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.9.128.0/19
IPv6:
2a03:1f60::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8787
Signature Algorithm: sha256WithRSAEncryption
22:37:db:87:41:fd:40:b3:26:77:7f:3d:0d:b9:c2:d2:fe:0f:
69:04:c1:d6:f2:b0:30:5d:ff:06:26:9c:4d:4b:8b:1a:d8:2c:
dc:15:96:b8:59:91:38:60:bf:86:1b:eb:1e:04:48:96:4a:a4:
7f:5f:fd:e0:cf:f4:5b:55:22:99:95:a3:0c:e1:9d:64:cf:7f:
e8:1b:c6:52:d2:a5:48:30:bf:56:ff:11:43:7f:e1:cf:d3:12:
c6:a2:13:4b:2e:25:5b:3e:19:a1:24:ec:80:40:5d:29:c6:3c:
ea:d2:be:67:77:17:48:ad:58:07:db:5d:0e:8d:72:92:f0:f8:
3b:23:2e:47:d8:54:2b:73:35:52:45:5e:3a:c6:66:8f:83:40:
55:4d:bd:62:06:d1:42:56:5d:a8:45:3c:7a:85:3f:d7:cf:04:
de:7e:23:14:1f:5c:20:0d:53:d1:05:01:57:82:24:24:f8:b7:
da:a5:27:3b:7b:50:99:29:bf:5e:d8:49:44:af:67:fb:0b:50:
64:d5:35:96:68:4e:c6:f8:44:05:67:98:aa:02:7a:25:44:4e:
51:51:e3:36:d5:31:04:78:03:13:aa:0e:84:cb:87:df:f9:66:
94:66:3c:38:4d:60:dd:4d:da:47:66:16:16:9d:17:33:82:c5:
18:41:1c:fb
-----BEGIN CERTIFICATE-----
MIIFojCCBIqgAwIBAgISAZQiH+HxJt84jvjdVDbT+C4EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTM0ODIyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYTYwOTllN2ZmM2ExNzFiY2UzYjZmZTk5ZWJiNGQyNGNiODVlNDYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ng47vJfQNGKSjyiHCXjCzy1gd1Y
4eF1SxvYwjeFPFFRxeb5Q0AYgHix71sWV9rV03Qu31orqbqgpMdcMKCKKSGxD6Ps
dt3TwLMyfjYUzo7V2lsSDcCZb1wt/nqpIyKjSezjhmf4ZZhR+S2aFDN35nib7+1x
7+wrEoPBLpJ10ETRtC3l/FXcJdn4m5EIEcR3k5d9REtnBMaHMdi33m6lC/aefEke
71cNteowXaBYI89EsP1s6+pYFNCWIWDrPS2jg7DSt1N4GJWnF3KMo0PUBTv5DXsR
HEzSGF9UtEMC3xnOrsm6ziRgSvFLOYp5gxQ6LjSqylp/dGwANglGU3ds8QIDAQAB
o4ICrjCCAqowHQYDVR0OBBYEFNpgmef/Ohcbzjtv6Z67TSTLheRhMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIzLzZjMzc0
MS1jZjhjLTRkNWQtYmI4ZS00NTk4Njg5ZDU1MWUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjMvNmMzNzQx
LWNmOGMtNGQ1ZC1iYjhlLTQ1OTg2ODlkNTUxZS8xLzJtQ1o1Xzg2Rnh2T08yX3Bu
cnROSk11RjVHRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQF1AmAMA0EAgACMAcDBQAqAx9gMBkGCCsGAQUF
BwEIAQH/BAowCKAGMAQCAiJTMA0GCSqGSIb3DQEBCwUAA4IBAQAiN9uHQf1AsyZ3
fz0NucLS/g9pBMHW8rAwXf8GJpxNS4sa2CzcFZa4WZE4YL+GG+seBEiWSqR/X/3g
z/RbVSKZlaMM4Z1kz3/oG8ZS0qVIML9W/xFDf+HP0xLGohNLLiVbPhmhJOyAQF0p
xjzq0r5ndxdIrVgH210OjXKS8Pg7Iy5H2FQrczVSRV46xmaPg0BVTb1iBtFCVl2o
RTx6hT/XzwTefiMUH1wgDVPRBQFXgiQk+LfapSc7e1CZKb9e2ElEr2f7C1Bk1TWW
aE7G+EQFZ5iqAnolRE5RUeM21TEEeAMTqg6Ey4ff+WaUZjw4TWDdTdpHZhYWnRcz
gsUYQRz7
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:53:42 2025 by rpki-client