Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5XB6RVkqydFxmoV2lgMXeCm0bgo.cer
File: 5XB6RVkqydFxmoV2lgMXeCm0bgo.cer (raw, json)
Hash identifier: bYVREbFQnMlKyqgj13DCrXBUB4rEQ/yru7Az0c2Rrk8=
Subject key identifier: E5:70:7A:45:59:2A:C9:D1:71:9A:85:76:96:03:17:78:29:B4:6E:0A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942067DA18B67E4B832643C6CDE60A20BF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:47:44 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 12347
IP: 93.189.64.0/21
IP: 2a02:410::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:da:18:b6:7e:4b:83:26:43:c6:cd:e6:0a:20:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e5707a45592ac9d1719a85769603177829b46e0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:15:1f:f0:ba:a3:4b:2c:e1:ed:18:4c:26:15:
d8:a7:9d:eb:14:bf:fe:2f:69:12:0d:e8:60:3f:6b:
bf:d7:c1:39:aa:46:c2:4a:40:77:d0:fe:cb:cc:37:
94:10:b0:2d:80:85:e0:1f:79:a5:d3:58:f0:0b:a1:
2a:5f:8c:61:f3:0d:c5:c1:1e:ff:63:cb:76:7c:88:
16:cd:4c:5e:54:11:93:72:e6:13:76:0a:6c:30:59:
c8:71:a5:53:b2:4d:e9:ba:af:df:d5:aa:44:ff:e6:
a5:3d:b4:66:3d:5f:24:49:19:97:78:70:2f:8a:eb:
de:c6:47:16:b7:d9:38:f1:b9:ab:ba:a6:99:07:c3:
4f:34:fe:1d:be:e1:cb:df:57:50:13:72:7a:f4:ab:
97:be:25:9b:ca:60:0c:d8:71:5b:df:ca:e7:8e:04:
ca:fe:8c:2c:d1:bf:a7:14:17:23:71:70:03:28:b7:
68:b6:07:13:db:46:f6:66:87:5c:e2:b2:a9:ee:65:
8b:bf:c4:98:5f:bd:d2:67:eb:94:28:ea:fd:67:1d:
ff:e8:85:d1:cd:a1:b9:52:da:df:a7:68:78:46:d3:
d9:8d:3d:e4:46:30:db:27:57:01:50:39:2a:bf:12:
d8:2f:99:6a:a9:99:b3:4b:11:2f:bb:4e:3e:95:6d:
38:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:70:7A:45:59:2A:C9:D1:71:9A:85:76:96:03:17:78:29:B4:6E:0A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1446aa-6e41-45c0-b09a-32c3658b25be/1/5XB6RVkqydFxmoV2lgMXeCm0bgo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.189.64.0/21
IPv6:
2a02:410::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12347
Signature Algorithm: sha256WithRSAEncryption
59:1d:d9:9b:7e:17:2d:19:39:7b:8b:a8:3e:39:ac:76:3e:93:
11:f5:ac:e3:14:72:cf:6f:a3:fa:6e:f5:ad:92:ab:71:dd:0f:
4a:c3:9a:0f:b6:48:e3:45:3c:5f:1a:64:9b:cb:b3:be:2b:7e:
55:4e:18:0a:66:27:49:b4:22:5d:a3:5e:ca:a0:15:52:da:89:
53:ad:9b:e2:8c:02:b1:05:f8:0d:92:e0:21:da:aa:e8:23:cb:
db:cc:e4:54:6a:94:4d:a8:b8:f2:d2:d8:b1:e0:1e:5e:e8:71:
50:02:66:c6:13:3c:18:36:e9:78:d5:80:bc:03:9a:84:99:89:
2c:b1:56:a7:f6:e2:f0:9e:3c:e7:1c:fa:8f:c7:eb:b4:83:1e:
7d:c9:dc:81:af:86:2e:e0:5e:56:c3:29:d5:ac:05:e3:b2:de:
4b:2c:e3:e3:6b:08:40:72:af:ac:41:cd:20:72:93:6e:18:7a:
1b:e4:ea:69:a1:88:41:cd:67:45:57:f6:e4:71:3e:07:ee:78:
b4:49:39:46:a1:53:a4:25:e8:9a:7a:5f:74:c2:f6:bb:77:62:
bf:2e:0e:fc:a8:06:9c:da:00:e8:58:0d:73:05:f1:d1:62:f2:
48:f0:77:7f:91:c8:ea:f2:ea:2f:b7:4c:46:06:2f:af:e6:27:
a9:5e:1b:c2
-----BEGIN CERTIFICATE-----
MIIFojCCBIqgAwIBAgISAZQgZ9oYtn5LgyZDxs3mCiC/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDU0NzQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNTcwN2E0NTU5MmFjOWQxNzE5YTg1NzY5NjAzMTc3ODI5YjQ2ZTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRUf8LqjSyzh7RhMJhXYp53rFL/+
L2kSDehgP2u/18E5qkbCSkB30P7LzDeUELAtgIXgH3ml01jwC6EqX4xh8w3FwR7/
Y8t2fIgWzUxeVBGTcuYTdgpsMFnIcaVTsk3puq/f1apE/+alPbRmPV8kSRmXeHAv
iuvexkcWt9k48bmruqaZB8NPNP4dvuHL31dQE3J69KuXviWbymAM2HFb38rnjgTK
/ows0b+nFBcjcXADKLdotgcT20b2Zodc4rKp7mWLv8SYX73SZ+uUKOr9Zx3/6IXR
zaG5Utrfp2h4RtPZjT3kRjDbJ1cBUDkqvxLYL5lqqZmzSxEvu04+lW04PQIDAQAB
o4ICrjCCAqowHQYDVR0OBBYEFOVwekVZKsnRcZqFdpYDF3gptG4KMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YxLzE0NDZh
YS02ZTQxLTQ1YzAtYjA5YS0zMmMzNjU4YjI1YmUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjEvMTQ0NmFh
LTZlNDEtNDVjMC1iMDlhLTMyYzM2NThiMjViZS8xLzVYQjZSVmtxeWRGeG1vVjJs
Z01YZUNtMGJnby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQDXb1AMA0EAgACMAcDBQAqAgQQMBkGCCsGAQUF
BwEIAQH/BAowCKAGMAQCAjA7MA0GCSqGSIb3DQEBCwUAA4IBAQBZHdmbfhctGTl7
i6g+Oax2PpMR9azjFHLPb6P6bvWtkqtx3Q9Kw5oPtkjjRTxfGmSby7O+K35VThgK
ZidJtCJdo17KoBVS2olTrZvijAKxBfgNkuAh2qroI8vbzORUapRNqLjy0tix4B5e
6HFQAmbGEzwYNul41YC8A5qEmYkssVan9uLwnjznHPqPx+u0gx59ydyBr4Yu4F5W
wynVrAXjst5LLOPjawhAcq+sQc0gcpNuGHob5OppoYhBzWdFV/bkcT4H7ni0STlG
oVOkJeiael90wva7d2K/Lg78qAac2gDoWA1zBfHRYvJI8Hd/kcjq8uovt0xGBi+v
5iepXhvC
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:26:09 2025 by rpki-client