Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8XeBcSTyB3J0O9MFlKiFOyvexqo.cer
File: 8XeBcSTyB3J0O9MFlKiFOyvexqo.cer (raw, json)
Hash identifier: 4998ks/K6D3HWg5tk/UDneXDNzOwAxLrv57RsixNgSc=
Subject key identifier: F1:77:81:71:24:F2:07:72:74:3B:D3:05:94:A8:85:3B:2B:DE:C6:AA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FDA38434392C1955FDC4ADB909E905
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:49:27 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 49884
AS: 49935
IP: 83.172.140.0/23
IP: 83.172.144.0 -- 83.172.148.255
IP: 83.172.186.0/24
IP: 185.1.243.0/24
IP: 185.94.136.0/22
IP: 185.135.191.0/24
IP: 195.62.90.0/23
IP: 2001:678:9ac::/48
IP: 2001:7f8:12d::/48
IP: 2a10:1740::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:a3:84:34:39:2c:19:55:fd:c4:ad:b9:09:e9:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f177817124f20772743bd30594a8853b2bdec6aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7c:e4:a1:82:cb:ec:07:ba:0f:84:2e:88:52:
8d:30:3c:d3:be:18:34:2d:47:d0:44:0d:87:12:dd:
cc:7a:00:6b:87:b2:46:42:7f:be:ac:af:de:eb:6c:
a2:21:5f:f1:c6:50:29:74:21:fe:9d:51:4a:fc:74:
19:b8:2c:ac:b5:b4:3b:59:a5:bc:a2:b4:73:78:3c:
39:25:25:f6:92:83:90:b1:6a:62:dd:86:65:6f:8f:
51:99:d2:ca:81:3e:ba:f8:2b:e3:99:a5:0d:05:3d:
2c:a9:d4:2b:f9:73:ca:b9:15:42:26:ad:43:6a:36:
bd:1d:3a:c9:ad:8b:c2:f8:58:22:a5:dd:da:2f:e9:
12:c4:15:9a:b7:43:ca:63:0c:9d:9d:c4:44:6e:57:
6d:93:f9:fe:95:c1:e4:bf:a8:6f:56:6c:0b:ed:99:
66:9d:7b:bf:90:56:81:07:a6:75:2b:04:4e:13:c9:
ad:1e:58:95:a5:97:e1:3d:68:72:b8:70:95:4e:6b:
60:8a:c2:fc:7a:62:c5:74:7f:22:a5:cd:5c:62:e7:
f5:ae:90:fa:06:46:20:e6:ad:4e:e1:9f:d0:f6:90:
8c:70:36:0a:c0:2b:51:81:ba:aa:a8:f5:b5:73:b2:
a0:f0:60:36:b7:23:2c:e0:8f:3f:d9:ec:7a:13:18:
a1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:77:81:71:24:F2:07:72:74:3B:D3:05:94:A8:85:3B:2B:DE:C6:AA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/0044e2-a842-48ab-bc54-62542228291c/1/8XeBcSTyB3J0O9MFlKiFOyvexqo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.172.140.0/23
83.172.144.0-83.172.148.255
83.172.186.0/24
185.1.243.0/24
185.94.136.0/22
185.135.191.0/24
195.62.90.0/23
IPv6:
2001:678:9ac::/48
2001:7f8:12d::/48
2a10:1740::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49884
49935
Signature Algorithm: sha256WithRSAEncryption
81:d1:34:f3:61:01:f8:8b:bf:1a:94:dc:ec:f5:83:84:12:ea:
92:bf:45:6b:f6:93:1f:4c:c8:a4:d6:fd:b4:f7:71:c7:93:a7:
5b:38:22:a1:2e:62:3e:60:f0:72:a3:e2:d4:90:b3:55:bf:e3:
d1:ad:61:df:42:ff:c3:db:58:a7:5a:69:94:86:d5:fd:e0:ca:
a8:d9:26:fc:20:12:de:c2:58:20:a9:6c:9b:47:ad:da:d2:f9:
9d:8e:33:b5:5d:e8:ef:7b:83:33:94:d4:48:76:09:0d:ac:c1:
52:27:c0:74:0c:94:82:ea:0d:4d:e0:fc:ff:9f:68:de:9f:41:
0c:78:0c:a2:62:b6:ea:4d:9e:a9:e4:c5:ac:4e:87:32:2e:c3:
be:64:cd:78:28:9b:fe:b9:45:14:34:f2:ae:70:08:88:e6:43:
64:ec:c8:07:2d:9d:84:10:72:c5:8c:2d:39:00:1b:55:03:28:
70:a8:81:b3:51:97:ce:90:45:82:02:c9:f5:de:3e:0f:c6:2b:
24:3c:d4:90:40:52:01:b6:d9:6e:e1:91:fe:69:f0:94:20:66:
df:8c:d5:1e:2f:18:ec:1a:1c:f8:d4:3a:e7:b9:aa:90:54:64:
9c:e6:61:58:3e:f8:3d:fa:b7:c7:b1:49:c7:7e:fd:15:7e:bc:
a2:55:36:80
-----BEGIN CERTIFICATE-----
MIIF5jCCBM6gAwIBAgISAZQl/aOENDksGVX9xK25CekFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDc0OTI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMTc3ODE3MTI0ZjIwNzcyNzQzYmQzMDU5NGE4ODUzYjJiZGVjNmFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXzkoYLL7Ae6D4QuiFKNMDzTvhg0
LUfQRA2HEt3MegBrh7JGQn++rK/e62yiIV/xxlApdCH+nVFK/HQZuCystbQ7WaW8
orRzeDw5JSX2koOQsWpi3YZlb49RmdLKgT66+CvjmaUNBT0sqdQr+XPKuRVCJq1D
aja9HTrJrYvC+Fgipd3aL+kSxBWat0PKYwydncREbldtk/n+lcHkv6hvVmwL7Zlm
nXu/kFaBB6Z1KwROE8mtHliVpZfhPWhyuHCVTmtgisL8emLFdH8ipc1cYuf1rpD6
BkYg5q1O4Z/Q9pCMcDYKwCtRgbqqqPW1c7Kg8GA2tyMs4I8/2ex6ExihDQIDAQAB
o4IC8jCCAu4wHQYDVR0OBBYEFPF3gXEk8gdydDvTBZSohTsr3saqMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA2LzAwNDRl
Mi1hODQyLTQ4YWItYmM1NC02MjU0MjIyODI5MWMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDYvMDA0NGUy
LWE4NDItNDhhYi1iYzU0LTYyNTQyMjI4MjkxYy8xLzhYZUJjU1R5QjNKME85TUZs
S2lGT3l2ZXhxby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGwGCCsGAQUF
BwEHAQH/BF0wWzA4BAIAATAyAwQBU6yMMAwDBARTrJADBABTrJQDBABTrLoDBAC5
AfMDBAK5XogDBAC5h78DBAHDPlowHwQCAAIwGQMHACABBngJrAMHACABB/gBLQMF
AyoQF0AwHwYIKwYBBQUHAQgBAf8EEDAOoAwwCgIDAMLcAgMAww8wDQYJKoZIhvcN
AQELBQADggEBAIHRNPNhAfiLvxqU3Oz1g4QS6pK/RWv2kx9MyKTW/bT3cceTp1s4
IqEuYj5g8HKj4tSQs1W/49GtYd9C/8PbWKdaaZSG1f3gyqjZJvwgEt7CWCCpbJtH
rdrS+Z2OM7Vd6O97gzOU1Eh2CQ2swVInwHQMlILqDU3g/P+faN6fQQx4DKJitupN
nqnkxaxOhzIuw75kzXgom/65RRQ08q5wCIjmQ2TsyActnYQQcsWMLTkAG1UDKHCo
gbNRl86QRYICyfXePg/GKyQ81JBAUgG22W7hkf5p8JQgZt+M1R4vGOwaHPjUOue5
qpBUZJzmYVg++D36t8exScd+/RV+vKJVNoA=
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:09:20 2025 by rpki-client