Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4sVVsgW63NgpS9MyW5wvvViNIZA.cer
File: 4sVVsgW63NgpS9MyW5wvvViNIZA.cer (raw, json)
Hash identifier: FyGRtT+AME3+jjQyiLzMEZkW4j9uumxOS/CnOK/k/l0=
Subject key identifier: E2:C5:55:B2:05:BA:DC:D8:29:4B:D3:32:5B:9C:2F:BD:58:8D:21:90
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228E25732B829059C1224D8B9FBEDF0B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:48 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2001:678:910::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:25:73:2b:82:90:59:c1:22:4d:8b:9f:be:df:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e2c555b205badcd8294bd3325b9c2fbd588d2190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:5c:f3:3e:69:59:b7:1d:fa:cd:40:2d:d8:82:
b0:3c:55:31:4b:0d:84:b1:5b:07:c4:d8:95:9f:9d:
37:58:d4:99:7d:b0:36:4b:a4:90:dc:f9:15:30:01:
80:3b:f7:03:dc:cb:9f:29:6e:ba:44:a4:d2:83:c0:
40:11:f0:24:c4:45:84:0e:ed:37:7a:79:9a:f3:51:
45:6c:29:1c:31:70:36:da:d4:e5:76:bd:5b:57:eb:
47:6d:0c:24:c5:47:a1:f4:1b:d9:15:83:ff:60:8f:
64:ea:3f:19:47:bc:8f:d9:3e:21:76:ba:0a:ee:91:
a1:04:34:f8:c2:4b:36:2b:09:71:e6:4f:aa:0c:7f:
d7:40:92:29:e1:b2:9b:ea:cd:0e:6f:35:53:1c:94:
d0:63:6a:b5:60:4d:0f:16:cd:d4:b4:09:b7:17:55:
85:0c:6d:14:95:df:75:da:9c:10:2a:0c:89:38:5f:
29:e4:6b:06:47:8b:80:87:71:02:57:3d:03:03:9c:
06:ae:bd:f3:df:a1:5e:eb:a0:42:ef:16:47:e0:9f:
8b:56:ff:6c:bb:3d:72:54:7d:6c:73:3d:a8:cf:21:
6d:85:5d:95:56:6f:ed:ca:36:51:ff:8b:21:d9:72:
48:6a:6b:f6:01:93:60:24:42:10:a3:19:21:c4:79:
93:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:C5:55:B2:05:BA:DC:D8:29:4B:D3:32:5B:9C:2F:BD:58:8D:21:90
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:910::/48
Signature Algorithm: sha256WithRSAEncryption
52:45:d1:11:db:94:16:38:0c:05:43:27:4f:90:f5:52:7f:8b:
b1:1d:95:d6:cb:d6:37:d1:7c:e4:41:f5:8b:8b:68:1b:c3:a6:
46:00:74:ea:51:57:62:03:b1:a1:7d:36:a8:3c:6d:bd:8b:fb:
61:be:83:87:68:33:c4:a4:ed:06:a7:0c:6b:20:01:4f:e1:a2:
1a:aa:2c:b4:b0:cb:69:82:41:26:21:b2:3b:87:3e:a8:a3:9d:
bd:7d:80:38:c9:25:95:ff:d3:1c:3b:88:66:7c:6d:7e:98:f9:
b7:f3:c9:39:ff:d7:0d:33:cc:36:f7:cb:6c:40:a3:2b:8b:b6:
40:f1:20:91:72:51:1d:97:bf:8e:73:3c:53:41:24:19:46:45:
12:c5:dd:cf:33:7e:48:15:c5:8e:b4:2c:bf:f6:cb:39:91:3f:
8b:c2:71:02:64:d6:a4:91:57:bc:f3:a1:23:dc:8a:3b:97:c9:
4a:ab:fc:e3:fb:60:71:94:8a:f0:8e:01:10:52:ee:b3:9d:ae:
24:24:4a:d9:8f:09:d6:32:a2:6e:3c:15:ec:c1:6a:10:c0:70:
d0:46:77:30:64:12:d9:07:6a:b8:ca:81:fc:2e:ea:c3:7c:ea:
1b:a0:4d:fb:f3:16:30:30:d0:35:dc:ce:e5:74:84:2b:ff:f6:
b2:a5:00:2e
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgISAZQijiVzK4KQWcEiTYufvt8LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTU0ODQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMmM1NTViMjA1YmFkY2Q4Mjk0YmQzMzI1YjljMmZiZDU4OGQyMTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9FzzPmlZtx36zUAt2IKwPFUxSw2E
sVsHxNiVn503WNSZfbA2S6SQ3PkVMAGAO/cD3MufKW66RKTSg8BAEfAkxEWEDu03
enma81FFbCkcMXA22tTldr1bV+tHbQwkxUeh9BvZFYP/YI9k6j8ZR7yP2T4hdroK
7pGhBDT4wks2Kwlx5k+qDH/XQJIp4bKb6s0ObzVTHJTQY2q1YE0PFs3UtAm3F1WF
DG0Uld912pwQKgyJOF8p5GsGR4uAh3ECVz0DA5wGrr3z36Fe66BC7xZH4J+LVv9s
uz1yVH1scz2ozyFthV2VVm/tyjZR/4sh2XJIamv2AZNgJEIQoxkhxHmTJwIDAQAB
o4IChzCCAoMwHQYDVR0OBBYEFOLFVbIFutzYKUvTMlucL71YjSGQMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y1LzE1Yzlm
MC0wZWM0LTQxMjktOTg0Zi00NDg3MWU2ODUyZjcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjUvMTVjOWYw
LTBlYzQtNDEyOS05ODRmLTQ0ODcxZTY4NTJmNy8xLzRzVlZzZ1c2M05ncFM5TXlX
NXd2dlZpTklaQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAkQMA0GCSqGSIb3DQEBCwUAA4IBAQBS
RdER25QWOAwFQydPkPVSf4uxHZXWy9Y30XzkQfWLi2gbw6ZGAHTqUVdiA7GhfTao
PG29i/thvoOHaDPEpO0GpwxrIAFP4aIaqiy0sMtpgkEmIbI7hz6oo529fYA4ySWV
/9McO4hmfG1+mPm388k5/9cNM8w298tsQKMri7ZA8SCRclEdl7+OczxTQSQZRkUS
xd3PM35IFcWOtCy/9ss5kT+LwnECZNakkVe886Ej3Io7l8lKq/zj+2BxlIrwjgEQ
Uu6zna4kJErZjwnWMqJuPBXswWoQwHDQRncwZBLZB2q4yoH8LurDfOoboE378xYw
MNA13M7ldIQr//aypQAu
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:46:00 2025 by rpki-client