Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94GtMjPZwsGJ2UmdoRd7VxAaXvQ.cer
File: 94GtMjPZwsGJ2UmdoRd7VxAaXvQ.cer (raw, json)
Hash identifier: q7XrDtfTli//dPwwYmt5ApXdm2W4TNnMWQ8ZYgkfoFY=
Subject key identifier: F7:81:AD:32:33:D9:C2:C1:89:D9:49:9D:A1:17:7B:57:10:1A:5E:F4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194236A23BBD7CB320314C1F4061AAF2BDB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/80/df75a7-ed57-4ed0-a12e-9564a4722e78/1/94GtMjPZwsGJ2UmdoRd7VxAaXvQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/80/df75a7-ed57-4ed0-a12e-9564a4722e78/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:49:06 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 12853
IP: 79.98.224.0/21
IP: 185.251.4.0/22
IP: 212.68.96.0/19
IP: 2001:940::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:23:bb:d7:cb:32:03:14:c1:f4:06:1a:af:2b:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f781ad3233d9c2c189d9499da1177b57101a5ef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4e:bb:fe:fd:52:60:91:ca:65:13:41:e3:28:
72:1f:ba:e8:9d:92:c9:69:27:49:2a:7a:1d:2d:f1:
36:fb:29:df:95:0e:45:6e:9b:8f:3a:a0:33:37:e2:
d2:8c:5c:7e:02:b8:0f:48:82:68:db:40:df:84:6f:
62:ec:e8:d7:52:d5:a0:78:89:72:50:72:33:cf:37:
d1:a5:e2:28:73:18:5b:12:3b:31:fa:34:84:06:8b:
3f:76:00:73:24:23:93:ac:87:91:58:96:3d:2c:be:
0d:e8:b0:13:03:5b:d7:99:30:3a:b4:ca:3f:d8:ba:
36:84:51:a5:68:0e:04:39:b0:d6:9a:0e:12:0c:92:
3d:99:77:bb:19:2f:5f:7d:d2:e5:00:e6:40:85:ac:
41:f1:2c:3a:b2:6c:d2:92:91:41:c0:80:3e:17:06:
55:61:74:6a:ce:50:06:64:19:12:94:d8:b1:f1:d4:
85:14:39:6d:cd:c8:26:24:48:a8:10:9e:a4:1b:d6:
d7:4c:7c:fa:40:69:dc:1a:a4:b2:b3:03:61:df:8d:
14:9f:7c:81:9d:64:78:09:48:f1:be:bb:19:d0:11:
12:3c:6d:b5:60:ab:c7:9b:86:15:b2:31:1a:9d:8c:
f3:b5:76:36:b1:45:48:89:be:46:35:f3:41:bf:52:
0e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:81:AD:32:33:D9:C2:C1:89:D9:49:9D:A1:17:7B:57:10:1A:5E:F4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/df75a7-ed57-4ed0-a12e-9564a4722e78/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/df75a7-ed57-4ed0-a12e-9564a4722e78/1/94GtMjPZwsGJ2UmdoRd7VxAaXvQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.224.0/21
185.251.4.0/22
212.68.96.0/19
IPv6:
2001:940::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12853
Signature Algorithm: sha256WithRSAEncryption
7f:7e:95:88:08:05:dd:37:27:09:54:b6:cc:f1:9c:f6:50:49:
45:8b:22:67:ed:e4:2f:db:89:ac:87:54:80:b2:fa:48:08:5b:
6b:5f:b6:e1:a8:5d:8c:db:b5:04:88:1b:3c:99:88:eb:bb:44:
02:f0:7c:28:cf:4a:d5:cd:d1:db:33:d0:e7:29:7e:e1:67:63:
eb:ef:9c:c1:36:34:6e:a8:b6:8e:f5:19:7e:92:b4:6f:39:d4:
22:40:f6:f9:7d:f4:f0:3d:ae:6f:42:a5:b7:4d:ef:a3:00:8e:
51:c1:52:fd:15:17:10:e3:8b:fb:84:42:3f:ac:22:82:1a:94:
b9:04:df:4a:f6:e7:27:cf:68:d2:ff:e3:9e:5b:02:c6:e3:5f:
e9:2c:aa:cc:79:5a:e3:23:19:2b:cd:40:3b:75:96:de:6f:a1:
f0:d6:bc:1b:9e:22:c1:48:e0:92:12:bd:06:d6:db:d8:89:d7:
5a:ed:38:a7:63:30:98:b3:f1:e1:7d:67:bf:cd:3c:ec:fd:1d:
1c:98:87:a7:9e:da:35:e8:b6:6a:f6:1e:29:e6:a7:31:99:ff:
00:43:a1:7b:45:fb:2a:5d:5d:29:9f:f1:a6:4c:bb:10:29:0a:
7b:91:1f:c4:c2:62:19:72:f8:be:66:36:76:1c:91:07:6e:68:
0d:7e:0f:e6
-----BEGIN CERTIFICATE-----
MIIFrjCCBJagAwIBAgISAZQjaiO718syAxTB9AYaryvbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTk0OTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzgxYWQzMjMzZDljMmMxODlkOTQ5OWRhMTE3N2I1NzEwMWE1ZWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuk67/v1SYJHKZRNB4yhyH7ronZLJ
aSdJKnodLfE2+ynflQ5FbpuPOqAzN+LSjFx+ArgPSIJo20DfhG9i7OjXUtWgeIly
UHIzzzfRpeIocxhbEjsx+jSEBos/dgBzJCOTrIeRWJY9LL4N6LATA1vXmTA6tMo/
2Lo2hFGlaA4EObDWmg4SDJI9mXe7GS9ffdLlAOZAhaxB8Sw6smzSkpFBwIA+FwZV
YXRqzlAGZBkSlNix8dSFFDltzcgmJEioEJ6kG9bXTHz6QGncGqSyswNh340Un3yB
nWR4CUjxvrsZ0BESPG21YKvHm4YVsjEanYzztXY2sUVIib5GNfNBv1IORwIDAQAB
o4ICujCCArYwHQYDVR0OBBYEFPeBrTIz2cLBidlJnaEXe1cQGl70MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgwL2RmNzVh
Ny1lZDU3LTRlZDAtYTEyZS05NTY0YTQ3MjJlNzgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODAvZGY3NWE3
LWVkNTctNGVkMC1hMTJlLTk1NjRhNDcyMmU3OC8xLzk0R3RNalBad3NHSjJVbWRv
UmQ3VnhBYVh2US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF
BwEHAQH/BCswKTAYBAIAATASAwQDT2LgAwQCufsEAwQF1ERgMA0EAgACMAcDBQAg
AQlAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAjI1MA0GCSqGSIb3DQEBCwUAA4IB
AQB/fpWICAXdNycJVLbM8Zz2UElFiyJn7eQv24msh1SAsvpICFtrX7bhqF2M27UE
iBs8mYjru0QC8Hwoz0rVzdHbM9DnKX7hZ2Pr75zBNjRuqLaO9Rl+krRvOdQiQPb5
ffTwPa5vQqW3Te+jAI5RwVL9FRcQ44v7hEI/rCKCGpS5BN9K9ucnz2jS/+OeWwLG
41/pLKrMeVrjIxkrzUA7dZbeb6Hw1rwbniLBSOCSEr0G1tvYidda7TinYzCYs/Hh
fWe/zTzs/R0cmIennto16LZq9h4p5qcxmf8AQ6F7RfsqXV0pn/GmTLsQKQp7kR/E
wmIZcvi+ZjZ2HJEHbmgNfg/m
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:25:17 2025 by rpki-client