Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9X3FmWyBeMDeLqIEme696t5AI-s.cer
File: 9X3FmWyBeMDeLqIEme696t5AI-s.cer (raw, json)
Hash identifier: DMiWAq+Mjzk9KMojpt+gu1sp/l00mycJMHjnD9jjEfw=
Subject key identifier: F5:7D:C5:99:6C:81:78:C0:DE:2E:A2:04:99:EE:BD:EA:DE:40:23:EB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D91A565E18ABF5389E53FC859D8E1D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:09 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 59755
IP: 185.71.8.0/22
IP: 2a03:37a0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:1a:56:5e:18:ab:f5:38:9e:53:fc:85:9d:8e:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f57dc5996c8178c0de2ea20499eebdeade4023eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:aa:7d:96:a2:78:38:0b:ec:29:35:fd:e8:5f:
bd:bb:7e:ce:4c:fc:9a:5d:da:fd:26:3a:04:e9:1e:
02:41:97:48:c8:a4:c7:c1:3b:88:44:ce:73:9c:79:
ee:de:a4:0e:ce:bd:1b:b1:df:f1:b6:9d:48:fd:c3:
a4:3a:e2:63:93:33:1a:b6:89:72:38:50:32:11:51:
e2:b8:f5:08:23:3b:3e:ba:6f:3b:22:9d:11:a3:fa:
98:cf:67:75:79:0f:20:70:23:d0:a0:71:08:58:18:
8d:f4:e8:6c:17:a9:6b:f8:f3:64:be:3e:dd:0d:1f:
bc:0e:b5:ae:7f:a7:a6:dd:e8:8a:12:da:40:98:87:
56:d0:86:32:5f:04:de:b9:b3:48:31:2d:e0:33:90:
23:f9:55:27:11:e3:a5:77:b3:a9:a5:a8:ae:97:af:
fa:9d:c2:d0:ef:02:cc:47:5c:08:43:af:9d:4b:bb:
36:af:5c:74:77:f4:a0:7d:54:4c:79:77:c0:b8:f0:
52:15:89:d7:fc:0b:46:0d:14:b0:20:b1:fa:f7:ff:
95:f5:00:80:85:81:a1:f6:4b:1a:51:76:de:61:12:
fa:b9:37:df:8c:5e:76:a0:19:88:9c:6c:29:fe:49:
3d:b5:7c:b9:5d:41:53:65:2c:4d:13:c3:fb:2e:db:
a9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:7D:C5:99:6C:81:78:C0:DE:2E:A2:04:99:EE:BD:EA:DE:40:23:EB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/67e3ac-c332-4d13-83ef-c7b10d505cfe/1/9X3FmWyBeMDeLqIEme696t5AI-s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.71.8.0/22
IPv6:
2a03:37a0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59755
Signature Algorithm: sha256WithRSAEncryption
91:f3:13:e8:10:64:2a:f3:a6:db:e0:a0:30:a6:99:e3:a2:cc:
17:b8:10:5d:87:c5:c4:3e:5c:d5:2f:e2:17:c6:49:6e:4b:09:
1a:3e:e1:72:b0:ba:41:63:68:f6:7e:d5:99:83:34:07:45:92:
39:6c:a8:eb:75:8d:70:41:c0:87:fa:bd:fa:bd:11:27:a8:c5:
8b:b9:93:5f:80:b4:43:e4:c0:08:3e:23:de:f9:75:c3:e0:8a:
c5:15:6b:a5:7f:b9:2f:70:78:82:2e:d6:a6:83:2a:fb:94:42:
6d:ee:dd:91:2b:de:92:61:ff:7c:04:23:fe:b2:42:5f:c6:92:
c4:8b:98:18:7f:0a:31:d5:31:a7:ea:52:62:96:d1:f7:a0:66:
f5:cb:a0:6b:1d:83:0d:3f:9c:3c:9f:d8:70:29:c8:f1:04:b0:
c3:44:20:1b:4a:1b:9e:ee:e0:ad:40:af:70:c3:68:35:a1:4f:
3c:80:0f:ce:93:8f:d7:77:3d:a0:8f:f3:07:76:91:b6:82:68:
48:2b:b0:c1:09:1f:a0:20:ef:39:52:a9:87:da:55:fc:dc:e7:
f6:d0:88:f0:ed:65:83:09:c6:9a:3a:ce:86:64:5f:84:f9:ca:
80:88:d9:f0:e3:9d:65:1c:a9:db:89:47:19:50:6f:f8:16:32:
4d:1c:3d:e0
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQm2RpWXhir9TieU/yFnY4dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTE0OTA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNTdkYzU5OTZjODE3OGMwZGUyZWEyMDQ5OWVlYmRlYWRlNDAyM2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoap9lqJ4OAvsKTX96F+9u37OTPya
Xdr9JjoE6R4CQZdIyKTHwTuIRM5znHnu3qQOzr0bsd/xtp1I/cOkOuJjkzMatoly
OFAyEVHiuPUIIzs+um87Ip0Ro/qYz2d1eQ8gcCPQoHEIWBiN9OhsF6lr+PNkvj7d
DR+8DrWuf6em3eiKEtpAmIdW0IYyXwTeubNIMS3gM5Aj+VUnEeOld7Oppaiul6/6
ncLQ7wLMR1wIQ6+dS7s2r1x0d/SgfVRMeXfAuPBSFYnX/AtGDRSwILH69/+V9QCA
hYGh9ksaUXbeYRL6uTffjF52oBmInGwp/kk9tXy5XUFTZSxNE8P7LtupTQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFPV9xZlsgXjA3i6iBJnuvereQCPrMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzgzLzY3ZTNh
Yy1jMzMyLTRkMTMtODNlZi1jN2IxMGQ1MDVjZmUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODMvNjdlM2Fj
LWMzMzItNGQxMy04M2VmLWM3YjEwZDUwNWNmZS8xLzlYM0ZtV3lCZU1EZUxxSUVt
ZTY5NnQ1QUktcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuUcIMA0EAgACMAcDBQAqAzegMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwDpazANBgkqhkiG9w0BAQsFAAOCAQEAkfMT6BBkKvOm
2+CgMKaZ46LMF7gQXYfFxD5c1S/iF8ZJbksJGj7hcrC6QWNo9n7VmYM0B0WSOWyo
63WNcEHAh/q9+r0RJ6jFi7mTX4C0Q+TACD4j3vl1w+CKxRVrpX+5L3B4gi7WpoMq
+5RCbe7dkSvekmH/fAQj/rJCX8aSxIuYGH8KMdUxp+pSYpbR96Bm9cugax2DDT+c
PJ/YcCnI8QSww0QgG0obnu7grUCvcMNoNaFPPIAPzpOP13c9oI/zB3aRtoJoSCuw
wQkfoCDvOVKph9pV/Nzn9tCI8O1lgwnGmjrOhmRfhPnKgIjZ8OOdZRyp24lHGVBv
+BYyTRw94A==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:42:40 2025 by rpki-client