Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3mPrYxm6RU05dkWUXOVDlXb6x0E.cer
File: 3mPrYxm6RU05dkWUXOVDlXb6x0E.cer (raw, json)
Hash identifier: L2hbL2RNMBdBO2NNxBK7nhAtAGUu46EUc62NjI0caV4=
Subject key identifier: DE:63:EB:63:19:BA:45:4D:39:76:45:94:5C:E5:43:95:76:FA:C7:41
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FB291A4DDBC08E56A3FA6CA5ABEB7A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:47:52 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 8540
AS: 205629
IP: 185.211.216.0/22
IP: 185.228.32.0/22
IP: 2a0b:6c40::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:29:1a:4d:db:c0:8e:56:a3:fa:6c:a5:ab:eb:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=de63eb6319ba454d397645945ce5439576fac741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7d:96:5f:b9:14:f9:bb:00:49:82:bb:0a:03:
f6:f5:4f:7f:c5:63:4b:29:2c:e4:de:78:8d:18:65:
97:2e:1d:bd:b9:2d:71:a2:c8:a2:05:91:e3:bf:8e:
a6:dd:e0:83:cb:77:da:65:9c:96:e2:82:e9:35:54:
5f:ef:24:6e:50:55:f9:db:5e:51:dc:bf:cd:18:ac:
7b:48:60:09:6f:fb:9a:c9:ad:b7:86:53:4e:d6:56:
07:f9:74:ba:e7:43:14:f0:22:2d:15:1b:f8:6b:52:
8e:8a:a7:3d:a5:42:68:4f:ff:82:c7:3e:81:c1:e8:
4d:6c:93:91:fd:99:2d:2f:14:4e:c0:2e:db:7a:1f:
af:08:89:7b:13:8d:ba:57:19:cc:c3:37:94:bf:6f:
c8:65:2e:ab:73:81:50:f3:1d:dd:f1:d2:7b:7a:4b:
e4:8f:b2:04:30:8a:83:76:d3:ef:c3:c2:23:df:ba:
27:6f:8d:a5:46:af:fa:ec:c9:97:56:a2:d5:b9:6c:
0e:c0:f8:8b:e3:a7:11:f2:9c:25:c5:75:92:39:0c:
a7:cc:64:3f:35:a1:e6:c9:c2:29:23:ef:b9:64:d0:
23:a4:ef:0d:66:ec:4d:b4:7e:93:57:44:de:2a:f9:
52:d5:e6:b1:d6:58:cc:34:28:ae:df:2d:a5:bd:bc:
be:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:63:EB:63:19:BA:45:4D:39:76:45:94:5C:E5:43:95:76:FA:C7:41
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9327a7-81bf-4f7d-9f5c-1e18f5b4905d/1/3mPrYxm6RU05dkWUXOVDlXb6x0E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.211.216.0/22
185.228.32.0/22
IPv6:
2a0b:6c40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8540
205629
Signature Algorithm: sha256WithRSAEncryption
ad:83:c2:12:3d:c4:79:e7:67:1b:2c:c5:f9:14:71:54:94:df:
0c:68:fb:ef:86:1b:9f:eb:0f:5c:18:91:5e:ff:da:ca:6c:bb:
7a:fc:25:20:f5:60:fa:f0:2e:88:e7:72:ee:34:d9:a4:7f:4b:
b0:ed:ce:19:b3:19:2e:ae:da:42:52:ee:b4:87:5f:c5:07:d8:
90:77:14:81:41:d9:7a:6b:84:82:c8:2e:20:96:cd:69:c2:e4:
c5:3c:a3:f7:85:95:d3:18:c0:80:b3:66:10:09:fa:d1:4e:79:
9e:8f:cb:e9:38:3b:30:05:c3:cb:e5:ea:1e:e8:30:a9:3a:06:
55:67:29:64:15:ef:48:65:c7:2c:6c:d7:ad:94:55:54:f6:c5:
5c:1f:49:de:cd:aa:d8:0f:60:d8:98:ae:a8:9c:53:a1:f3:64:
e1:3a:ca:01:fe:1f:d7:fb:a5:58:57:f7:9e:72:d0:aa:47:58:
a0:92:a0:82:a3:a2:f9:75:8d:ca:43:dc:b4:6a:1a:07:30:97:
71:77:ac:fb:41:ac:cb:6f:53:f9:ae:b7:bb:a1:7f:0d:89:9c:
a9:ed:d3:05:b3:33:1b:e5:1b:7e:52:66:c5:c9:0a:35:d9:98:
8b:ef:4e:b4:6c:d8:30:de:52:2f:f5:78:74:cc:ac:7b:3d:95:
1b:f8:33:9b
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgISAZQi+ykaTdvAjlaj+mylq+t6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTc0NzUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZTYzZWI2MzE5YmE0NTRkMzk3NjQ1OTQ1Y2U1NDM5NTc2ZmFjNzQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtX2WX7kU+bsASYK7CgP29U9/xWNL
KSzk3niNGGWXLh29uS1xosiiBZHjv46m3eCDy3faZZyW4oLpNVRf7yRuUFX5215R
3L/NGKx7SGAJb/uaya23hlNO1lYH+XS650MU8CItFRv4a1KOiqc9pUJoT/+Cxz6B
wehNbJOR/ZktLxROwC7beh+vCIl7E426VxnMwzeUv2/IZS6rc4FQ8x3d8dJ7ekvk
j7IEMIqDdtPvw8Ij37onb42lRq/67MmXVqLVuWwOwPiL46cR8pwlxXWSOQynzGQ/
NaHmycIpI++5ZNAjpO8NZuxNtH6TV0TeKvlS1eax1ljMNCiu3y2lvby+XwIDAQAB
o4ICuTCCArUwHQYDVR0OBBYEFN5j62MZukVNOXZFlFzlQ5V2+sdBMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNlLzkzMjdh
Ny04MWJmLTRmN2QtOWY1Yy0xZTE4ZjViNDkwNWQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2UvOTMyN2E3
LTgxYmYtNGY3ZC05ZjVjLTFlMThmNWI0OTA1ZC8xLzNtUHJZeG02UlUwNWRrV1VY
T1ZEbFhiNngwRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQCudPYAwQCueQgMA0EAgACMAcDBQMqC2xAMB4G
CCsGAQUFBwEIAQH/BA8wDaALMAkCAiFcAgMDIz0wDQYJKoZIhvcNAQELBQADggEB
AK2DwhI9xHnnZxssxfkUcVSU3wxo+++GG5/rD1wYkV7/2spsu3r8JSD1YPrwLojn
cu402aR/S7DtzhmzGS6u2kJS7rSHX8UH2JB3FIFB2XprhILILiCWzWnC5MU8o/eF
ldMYwICzZhAJ+tFOeZ6Py+k4OzAFw8vl6h7oMKk6BlVnKWQV70hlxyxs162UVVT2
xVwfSd7NqtgPYNiYrqicU6HzZOE6ygH+H9f7pVhX955y0KpHWKCSoIKjovl1jcpD
3LRqGgcwl3F3rPtBrMtvU/mut7uhfw2JnKnt0wWzMxvlG35SZsXJCjXZmIvvTrRs
2DDeUi/1eHTMrHs9lRv4M5s=
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:39:16 2025 by rpki-client