Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4Dlkn6qPnePa6RvnmaJ-LKZih4k.cer
File: 4Dlkn6qPnePa6RvnmaJ-LKZih4k.cer (raw, json)
Hash identifier: y5Xxa+8C7eg7VaxiotFlGMekZis1VYLUTDuyD34oSis=
Subject key identifier: E0:39:64:9F:AA:8F:9D:E3:DA:E9:1B:E7:99:A2:7E:2C:A6:62:87:89
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FB55D5B096A46473CC8D609A566FF8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:48:04 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 42396
IP: 77.109.0.0/18
IP: 94.248.0.0/18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:55:d5:b0:96:a4:64:73:cc:8d:60:9a:56:6f:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e039649faa8f9de3dae91be799a27e2ca6628789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:04:40:38:db:94:9f:36:1f:02:da:ee:78:d6:
64:82:71:cb:e8:46:ab:c9:c5:1e:57:67:5b:3b:07:
f0:ec:00:5b:2a:28:10:c6:48:e3:05:b4:53:9f:e7:
ac:9e:0a:42:ca:9a:bb:02:c7:de:92:b9:0e:63:41:
7e:6c:ac:23:3c:ac:9c:e8:91:c4:af:13:c2:ec:2b:
b3:76:82:f2:a4:0a:2f:46:55:43:76:84:ac:5a:ec:
ce:f9:ba:e9:cf:9b:2f:da:d6:32:7d:a9:70:1f:8e:
ca:28:4e:67:fa:de:f6:bb:37:34:d0:1c:54:8c:48:
e9:22:73:4a:c9:c3:90:78:61:f6:d4:64:4c:b4:85:
b1:6e:52:d7:9b:39:0d:7a:9e:e8:55:ce:93:42:48:
b1:41:ca:cc:08:b1:02:e1:ed:82:d6:61:53:66:90:
fc:4a:42:85:1d:ef:46:ea:20:2b:23:3f:dc:fb:62:
b2:03:26:17:f9:1c:d8:80:5e:b1:65:b9:50:16:f4:
d4:fd:37:c0:4c:87:89:9f:57:23:6a:67:b0:9a:a5:
7c:81:96:15:2d:dc:7d:11:2f:d3:69:c2:af:d7:76:
70:16:98:ad:6d:d8:90:ef:73:e0:76:06:af:37:c6:
c8:27:78:a9:22:8b:5b:b8:4f:5e:ae:d1:ae:45:d9:
e5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:39:64:9F:AA:8F:9D:E3:DA:E9:1B:E7:99:A2:7E:2C:A6:62:87:89
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.109.0.0/18
94.248.0.0/18
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42396
Signature Algorithm: sha256WithRSAEncryption
71:47:24:a0:6e:aa:9b:95:58:65:41:60:23:58:a6:90:9e:69:
ad:2d:2c:50:4c:44:cc:19:bd:ca:26:36:00:8f:70:bc:2b:d9:
dc:92:5f:58:74:dc:fa:54:09:09:9c:e1:18:dd:aa:4a:3c:43:
42:5c:11:83:fa:ea:1f:13:b2:66:06:1a:a1:80:1a:d9:ec:9d:
16:ec:10:48:9c:c3:f5:ed:dd:b8:57:06:b3:11:62:50:1b:9b:
6b:c7:e4:90:57:f1:e3:f7:e3:85:1c:9e:8f:cb:a2:46:7b:b6:
bd:bc:f8:ba:11:03:29:c1:3f:20:a1:c2:a9:85:34:01:9e:e4:
40:42:b4:23:df:0e:b2:d8:1c:19:7e:1b:40:a9:6c:be:7a:a0:
2b:86:4e:96:53:06:71:c0:75:50:0a:21:d7:7d:94:e3:bf:cf:
8a:42:f6:3b:d7:f8:68:b7:7b:46:56:a4:f2:51:ae:f6:2e:37:
c7:09:b7:d4:aa:ef:fb:ed:1c:19:92:d0:13:66:b2:33:6a:16:
66:24:7d:ab:7e:55:2f:9c:16:67:93:be:70:2e:a0:2e:29:c2:
65:b8:28:77:a6:82:4a:47:ab:72:4a:06:ed:56:85:68:5d:ea:
1e:9f:b3:fb:83:44:ad:16:64:da:64:b9:9f:73:06:e7:4a:d4:
57:43:41:ef
-----BEGIN CERTIFICATE-----
MIIFmjCCBIKgAwIBAgISAZQi+1XVsJakZHPMjWCaVm/4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTc0ODA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMDM5NjQ5ZmFhOGY5ZGUzZGFlOTFiZTc5OWEyN2UyY2E2NjI4Nzg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQRAONuUnzYfAtrueNZkgnHL6Ear
ycUeV2dbOwfw7ABbKigQxkjjBbRTn+esngpCypq7AsfekrkOY0F+bKwjPKyc6JHE
rxPC7CuzdoLypAovRlVDdoSsWuzO+brpz5sv2tYyfalwH47KKE5n+t72uzc00BxU
jEjpInNKycOQeGH21GRMtIWxblLXmzkNep7oVc6TQkixQcrMCLEC4e2C1mFTZpD8
SkKFHe9G6iArIz/c+2KyAyYX+RzYgF6xZblQFvTU/TfATIeJn1cjamewmqV8gZYV
Ldx9ES/TacKv13ZwFpitbdiQ73PgdgavN8bIJ3ipIotbuE9ertGuRdnl2wIDAQAB
o4ICpjCCAqIwHQYDVR0OBBYEFOA5ZJ+qj53j2ukb55mifiymYoeJMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJhLzJlZmFj
ZS1kMGEzLTQzMzktODA2OC1kNzY3OGEwNzg3ZDEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmEvMmVmYWNl
LWQwYTMtNDMzOS04MDY4LWQ3Njc4YTA3ODdkMS8xLzREbGtuNnFQbmVQYTZSdm5t
YUotTEtaaWg0ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF
BwEHAQH/BBYwFDASBAIAATAMAwQGTW0AAwQGXvgAMBoGCCsGAQUFBwEIAQH/BAsw
CaAHMAUCAwClnDANBgkqhkiG9w0BAQsFAAOCAQEAcUckoG6qm5VYZUFgI1imkJ5p
rS0sUExEzBm9yiY2AI9wvCvZ3JJfWHTc+lQJCZzhGN2qSjxDQlwRg/rqHxOyZgYa
oYAa2eydFuwQSJzD9e3duFcGsxFiUBuba8fkkFfx4/fjhRyej8uiRnu2vbz4uhED
KcE/IKHCqYU0AZ7kQEK0I98OstgcGX4bQKlsvnqgK4ZOllMGccB1UAoh132U47/P
ikL2O9f4aLd7Rlak8lGu9i43xwm31Krv++0cGZLQE2ayM2oWZiR9q35VL5wWZ5O+
cC6gLinCZbgod6aCSkerckoG7VaFaF3qHp+z+4NErRZk2mS5n3MG50rUV0NB7w==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:32:30 2025 by rpki-client