Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5xhnDMKBDk0YFTtuTnhBPBz0748.cer
File: 5xhnDMKBDk0YFTtuTnhBPBz0748.cer (raw, json)
Hash identifier: ZLgfwplF/A1UFfCAKfH1ZB/+xCXEFSQ+ybw7yqGclJ0=
Subject key identifier: E7:18:67:0C:C2:81:0E:4D:18:15:3B:6E:4E:78:41:3C:1C:F4:EF:8F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B3D082D2D320A71A3BF7320EAEA3F2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6d/e5c7e6-a57b-4c57-b5a5-58ac05f4d954/1/5xhnDMKBDk0YFTtuTnhBPBz0748.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6d/e5c7e6-a57b-4c57-b5a5-58ac05f4d954/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:49:11 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 195.68.234.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:d0:82:d2:d3:20:a7:1a:3b:f7:32:0e:ae:a3:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e718670cc2810e4d18153b6e4e78413c1cf4ef8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ad:a2:ce:36:47:7c:02:fc:56:62:48:17:33:
54:49:a8:2e:43:17:c9:06:62:2b:0e:84:43:17:bb:
1f:c1:da:93:43:05:37:c3:e6:ef:c6:f7:b1:f3:21:
e0:c1:ae:ed:ea:41:b1:0c:97:de:a3:24:ed:fd:72:
ca:bd:e9:bb:bb:54:bf:bc:08:97:82:c4:7d:9b:0e:
58:28:1c:7e:b3:cc:c7:20:d0:fc:4a:88:41:bc:b6:
79:52:8e:e8:b1:57:62:ef:84:c9:ce:ac:ab:be:d6:
44:ad:75:74:bb:bd:de:ec:1e:c3:d4:90:a4:42:aa:
82:f6:7f:00:01:04:2b:f1:a8:b0:a5:80:56:e6:b5:
d6:a2:5e:e1:47:fe:be:fd:18:e5:a2:87:46:3f:e0:
80:a6:87:37:77:9c:91:55:bd:66:3a:7f:56:ef:b4:
c9:1a:45:ae:4c:be:6b:34:8f:6e:ca:0d:05:d9:f5:
a3:7a:3b:ec:f2:1d:68:01:e1:48:8c:61:a9:c1:f3:
cf:02:bc:bb:ff:76:31:5d:a5:7c:13:f9:16:71:a2:
18:2d:97:74:d2:16:c5:b2:07:16:c7:a2:5c:a8:d3:
af:fa:70:32:23:18:ac:ce:6e:13:8b:b8:c2:86:45:
41:61:67:bc:2c:69:e9:cf:75:43:d5:b7:46:35:6e:
1d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:18:67:0C:C2:81:0E:4D:18:15:3B:6E:4E:78:41:3C:1C:F4:EF:8F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e5c7e6-a57b-4c57-b5a5-58ac05f4d954/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e5c7e6-a57b-4c57-b5a5-58ac05f4d954/1/5xhnDMKBDk0YFTtuTnhBPBz0748.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.68.234.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:64:d3:66:03:1c:8a:02:c5:96:20:3c:04:03:b7:a4:90:14:
72:99:68:4d:5b:34:cf:60:4e:36:67:d7:f1:65:db:ed:d8:c4:
55:df:23:57:50:c3:bd:de:42:61:1a:fb:ed:7e:7e:4f:41:40:
c9:e5:48:13:08:06:67:2a:76:8d:93:dd:95:8c:25:f0:5d:5b:
e7:48:b9:72:37:1f:68:4d:33:e7:c3:f6:b7:ea:2a:0d:c1:7e:
5b:d5:ec:b8:60:3f:d8:c9:37:67:e9:3b:6b:d5:83:63:44:95:
52:29:fd:7b:af:2f:f7:0d:19:5f:a6:c5:b4:42:dc:20:c9:92:
33:63:4c:a8:99:f5:e3:ae:3c:a0:dc:99:a0:bc:8b:9b:f3:16:
7a:fb:4e:d7:22:35:02:a8:89:59:95:8b:9d:af:ba:3e:f3:5b:
0f:50:0b:d1:62:78:68:0c:5f:7b:be:18:82:a0:9f:81:cc:a0:
60:fc:c5:8d:12:8d:bb:b5:b9:40:6e:12:6c:32:a8:7a:4b:a3:
14:63:a3:59:fe:00:c1:58:1c:29:4e:d0:a3:ab:0a:eb:8a:8c:
62:3d:91:d4:e3:a6:da:89:33:a5:b8:8e:5d:ad:96:a2:2e:9d:
8c:b6:3c:b1:fa:7d:c9:84:58:b2:70:48:b4:82:6b:66:c0:9a:
89:e0:fe:f2
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQks9CC0tMgpxo79zIOrqPyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDE0OTExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNzE4NjcwY2MyODEwZTRkMTgxNTNiNmU0ZTc4NDEzYzFjZjRlZjhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA662izjZHfAL8VmJIFzNUSaguQxfJ
BmIrDoRDF7sfwdqTQwU3w+bvxvex8yHgwa7t6kGxDJfeoyTt/XLKvem7u1S/vAiX
gsR9mw5YKBx+s8zHIND8SohBvLZ5Uo7osVdi74TJzqyrvtZErXV0u73e7B7D1JCk
QqqC9n8AAQQr8aiwpYBW5rXWol7hR/6+/RjloodGP+CApoc3d5yRVb1mOn9W77TJ
GkWuTL5rNI9uyg0F2fWjejvs8h1oAeFIjGGpwfPPAry7/3YxXaV8E/kWcaIYLZd0
0hbFsgcWx6JcqNOv+nAyIxiszm4Ti7jChkVBYWe8LGnpz3VD1bdGNW4dTQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFOcYZwzCgQ5NGBU7bk54QTwc9O+PMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZkL2U1Yzdl
Ni1hNTdiLTRjNTctYjVhNS01OGFjMDVmNGQ5NTQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmQvZTVjN2U2
LWE1N2ItNGM1Ny1iNWE1LTU4YWMwNWY0ZDk1NC8xLzV4aG5ETUtCRGswWUZUdHVU
bmhCUEJ6MDc0OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQBw0TqMA0GCSqGSIb3DQEBCwUAA4IBAQBOZNNm
AxyKAsWWIDwEA7ekkBRymWhNWzTPYE42Z9fxZdvt2MRV3yNXUMO93kJhGvvtfn5P
QUDJ5UgTCAZnKnaNk92VjCXwXVvnSLlyNx9oTTPnw/a36ioNwX5b1ey4YD/YyTdn
6Ttr1YNjRJVSKf17ry/3DRlfpsW0QtwgyZIzY0yomfXjrjyg3JmgvIub8xZ6+07X
IjUCqIlZlYudr7o+81sPUAvRYnhoDF97vhiCoJ+BzKBg/MWNEo27tblAbhJsMqh6
S6MUY6NZ/gDBWBwpTtCjqwrrioxiPZHU46baiTOluI5drZaiLp2Mtjyx+n3JhFiy
cEi0gmtmwJqJ4P7y
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:36:17 2025 by rpki-client