Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7-aRQnxuQYBvbOseIYp9xjIP3u0.cer
File: 7-aRQnxuQYBvbOseIYp9xjIP3u0.cer (raw, json)
Hash identifier: sDa4Su8pBAW9wuUDu8NF2NTZQTX4MSPX/eIoPXG3V6w=
Subject key identifier: EF:E6:91:42:7C:6E:41:80:6F:6C:EB:1E:21:8A:7D:C6:32:0F:DE:ED
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FD3D4911ECE80218DF15085F9820A4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:49:00 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 51262
IP: 185.147.8.0/22
IP: 195.191.240.0/23
IP: 2a0a:dc00::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:3d:49:11:ec:e8:02:18:df:15:08:5f:98:20:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=efe691427c6e41806f6ceb1e218a7dc6320fdeed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:55:97:b8:71:ec:96:4a:f6:a6:25:31:49:e1:
15:00:0d:2a:a8:e4:21:bb:b4:b2:8a:d5:3e:74:a5:
04:d2:e1:19:4e:e2:c0:cd:ac:13:bb:4b:ca:f3:cf:
0a:18:ea:1c:cc:f2:00:b2:d9:48:db:4c:35:5c:bd:
f5:b3:91:20:6e:08:4d:93:87:26:3c:1e:c9:98:0e:
6e:b0:83:cc:6f:97:54:6b:8e:14:90:a5:c6:e8:fc:
a1:71:fc:48:8b:59:ec:f1:83:e9:49:58:34:7f:b3:
e9:fd:3d:81:96:9e:21:a2:8e:19:37:f2:72:3a:62:
e5:b8:c5:5d:39:fa:c2:9a:36:87:d6:1b:2c:6d:c1:
42:62:ae:ff:b2:c1:a4:32:a3:51:ae:1b:e3:ce:2b:
10:39:2d:d3:58:d9:2f:a7:61:67:5a:e0:20:e4:ff:
02:7b:e7:57:06:c3:3a:b5:47:c0:bd:0b:9d:d0:02:
5d:67:40:69:f8:85:66:0a:2e:88:f6:e0:6e:dc:e1:
ed:9d:16:64:b8:ac:4e:bc:79:fb:c4:7c:8a:91:5f:
a3:88:aa:fd:cf:a6:24:d5:6f:67:3d:61:da:a0:42:
5c:29:94:ca:f2:80:89:bb:54:63:80:c5:ec:1a:58:
18:1a:ee:72:e8:aa:25:f8:7e:26:c2:7c:dd:d0:5c:
25:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E6:91:42:7C:6E:41:80:6F:6C:EB:1E:21:8A:7D:C6:32:0F:DE:ED
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/059975-ef90-421b-8af3-3814c57fe9bb/1/7-aRQnxuQYBvbOseIYp9xjIP3u0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.147.8.0/22
195.191.240.0/23
IPv6:
2a0a:dc00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51262
Signature Algorithm: sha256WithRSAEncryption
1a:c9:91:d6:76:a9:cd:2d:1c:f1:b6:03:06:3f:a0:6b:8d:62:
74:9d:54:7a:7f:62:e2:21:0f:e4:4c:41:f9:d3:5c:0d:6d:6d:
72:09:85:91:31:d5:0f:85:d4:4c:4e:a6:64:ef:3e:29:85:7e:
4a:27:72:3e:a4:46:cf:a2:22:07:99:2f:29:2f:8d:d4:97:66:
29:3f:00:4c:95:0c:2b:3b:39:c0:73:fd:9b:d2:85:29:94:6b:
36:23:dc:04:67:6f:a7:79:66:95:c1:5e:dc:fe:33:05:f1:6d:
0e:34:14:e9:cb:5b:2d:17:fd:fb:2e:01:e0:be:ae:d9:f1:eb:
f8:d2:96:75:78:8f:55:37:9d:47:29:a9:60:f6:b9:fa:dd:bd:
9a:40:c7:34:f6:52:6b:6f:5d:c3:1c:76:44:ac:48:97:eb:24:
0d:0d:45:cd:c6:81:b4:9c:fa:b9:78:d0:22:2d:75:ae:d8:28:
c8:15:21:e2:2a:42:0b:d5:d7:73:99:01:cc:25:0e:d0:51:01:
45:83:ee:3e:e7:83:67:61:af:54:2a:ef:1b:bb:36:fd:02:e6:
c5:b4:76:ad:1b:30:a5:82:19:a2:4d:b5:0b:87:76:ea:fa:89:
f9:c6:3c:f9:d8:03:1e:e0:0d:5e:a9:d7:53:9d:17:77:02:03:
58:92:bd:c2
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgISAZQl/T1JEezoAhjfFQhfmCCkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDc0OTAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZmU2OTE0MjdjNmU0MTgwNmY2Y2ViMWUyMThhN2RjNjMyMGZkZWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVWXuHHslkr2piUxSeEVAA0qqOQh
u7SyitU+dKUE0uEZTuLAzawTu0vK888KGOoczPIAstlI20w1XL31s5EgbghNk4cm
PB7JmA5usIPMb5dUa44UkKXG6PyhcfxIi1ns8YPpSVg0f7Pp/T2Blp4hoo4ZN/Jy
OmLluMVdOfrCmjaH1hssbcFCYq7/ssGkMqNRrhvjzisQOS3TWNkvp2FnWuAg5P8C
e+dXBsM6tUfAvQud0AJdZ0Bp+IVmCi6I9uBu3OHtnRZkuKxOvHn7xHyKkV+jiKr9
z6Yk1W9nPWHaoEJcKZTK8oCJu1RjgMXsGlgYGu5y6Kol+H4mwnzd0Fwl0wIDAQAB
o4ICtTCCArEwHQYDVR0OBBYEFO/mkUJ8bkGAb2zrHiGKfcYyD97tMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FhLzA1OTk3
NS1lZjkwLTQyMWItOGFmMy0zODE0YzU3ZmU5YmIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWEvMDU5OTc1
LWVmOTAtNDIxYi04YWYzLTM4MTRjNTdmZTliYi8xLzctYVJRbnh1UVlCdmJPc2VJ
WXA5eGpJUDN1MC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQCuZMIAwQBw7/wMA0EAgACMAcDBQMqCtwAMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDIPjANBgkqhkiG9w0BAQsFAAOCAQEAGsmR
1napzS0c8bYDBj+ga41idJ1Uen9i4iEP5ExB+dNcDW1tcgmFkTHVD4XUTE6mZO8+
KYV+SidyPqRGz6IiB5kvKS+N1JdmKT8ATJUMKzs5wHP9m9KFKZRrNiPcBGdvp3lm
lcFe3P4zBfFtDjQU6ctbLRf9+y4B4L6u2fHr+NKWdXiPVTedRympYPa5+t29mkDH
NPZSa29dwxx2RKxIl+skDQ1FzcaBtJz6uXjQIi11rtgoyBUh4ipCC9XXc5kBzCUO
0FEBRYPuPueDZ2GvVCrvG7s2/QLmxbR2rRswpYIZok21C4d26vqJ+cY8+dgDHuAN
XqnXU50XdwIDWJK9wg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 20:03:57 2025 by rpki-client