Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/A86wnV7qahjljf3v6_KbQQXgJnw.cer
File: A86wnV7qahjljf3v6_KbQQXgJnw.cer (raw, json)
Hash identifier: 6/eLYBX0crj2HnCiysnKbVjOFFeDadd4No/ASH9TT+8=
Subject key identifier: 03:CE:B0:9D:5E:EA:6A:18:E5:8D:FD:EF:EB:F2:9B:41:05:E0:26:7C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423699E4EB754120C576753DFBE425520
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:48:31 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 95.215.72.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:9e:4e:b7:54:12:0c:57:67:53:df:be:42:55:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=03ceb09d5eea6a18e58dfdefebf29b4105e0267c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:15:78:5c:36:dc:19:45:18:9e:f5:f9:6c:2d:
44:a0:2d:9d:7c:13:24:86:dc:ef:bb:c3:4c:62:16:
9f:07:bc:b8:05:d8:39:f3:0e:ce:18:d1:6f:c2:0f:
3f:4f:37:fd:c0:19:6a:c1:b5:97:06:a1:19:f4:d1:
9c:e2:c8:ae:00:95:d2:91:81:6e:75:ae:7d:9e:ee:
6c:b7:68:6f:9a:a4:0f:25:5e:61:8f:70:75:e0:73:
77:44:ec:49:f0:0d:40:18:08:1a:20:ce:ee:fe:10:
ec:30:a9:7d:3b:7f:41:68:97:b9:3c:4b:d8:5e:35:
54:85:d7:6c:c3:a5:df:c3:a1:c7:f3:49:22:2c:5c:
71:fb:20:22:bd:97:fd:63:9f:39:87:fd:57:ce:8f:
4a:77:14:c4:21:3c:c8:dd:51:6d:50:47:e5:11:07:
80:ef:0d:ae:f9:a0:dd:3b:8d:60:20:1c:62:45:92:
b9:af:49:e8:8e:46:4d:d7:e7:44:c6:f0:7b:67:17:
86:66:4e:58:0e:0c:0a:50:ad:9b:fb:9e:c3:cb:bc:
b4:79:20:f3:26:63:e6:66:62:9f:bd:c5:b0:91:71:
75:a7:1f:c7:7c:bc:4b:88:fb:d9:0b:a2:1b:14:51:
29:37:ff:71:19:20:02:ed:5c:9f:40:08:71:e6:22:
91:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:CE:B0:9D:5E:EA:6A:18:E5:8D:FD:EF:EB:F2:9B:41:05:E0:26:7C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0c4650-7964-48af-985a-34018d5c9df5/1/A86wnV7qahjljf3v6_KbQQXgJnw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.215.72.0/22
Signature Algorithm: sha256WithRSAEncryption
15:49:7a:5d:89:e7:75:8f:f3:a2:d1:5d:0f:9a:90:1b:7d:05:
99:70:ad:fb:17:73:8e:82:06:37:d6:b2:a4:a9:74:bb:14:c4:
f1:b8:d0:20:90:f1:32:32:40:1f:62:dc:cc:21:83:3f:f6:a0:
9e:e6:ab:10:fe:b4:44:ba:d3:97:3d:d5:a0:71:b1:37:36:cb:
e4:c7:b5:74:db:d4:57:4a:49:30:ad:0e:6b:1b:6b:58:52:7b:
ad:6f:00:db:df:7f:1c:00:f0:20:eb:86:3f:1d:1c:25:ba:d5:
18:99:3f:ee:99:96:0e:87:20:41:b9:e4:8f:57:27:22:b3:25:
fb:cb:71:c3:fe:d3:4f:07:19:26:8b:8a:73:94:e4:2e:83:b8:
b8:e9:ca:4d:ab:14:eb:26:4a:bc:a0:c2:53:17:a1:57:d3:a2:
93:ed:ed:dc:e7:27:59:a8:46:bb:d8:a4:a0:df:90:5f:31:cb:
b4:1b:4b:0e:7d:aa:b1:e4:18:61:0a:15:14:cd:97:c1:70:31:
de:ae:bb:7b:66:2d:7b:1c:8a:70:1f:f1:cb:a5:47:32:f8:5a:
82:c4:36:c8:20:b1:6c:17:81:5c:59:41:34:f5:3a:a4:6c:8a:
29:d5:ee:e7:53:1a:65:49:90:be:39:6e:76:46:50:c7:cc:02:
df:df:ba:83
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQjaZ5Ot1QSDFdnU9++QlUgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTk0ODMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwM2NlYjA5ZDVlZWE2YTE4ZTU4ZGZkZWZlYmYyOWI0MTA1ZTAyNjdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxV4XDbcGUUYnvX5bC1EoC2dfBMk
htzvu8NMYhafB7y4Bdg58w7OGNFvwg8/Tzf9wBlqwbWXBqEZ9NGc4siuAJXSkYFu
da59nu5st2hvmqQPJV5hj3B14HN3ROxJ8A1AGAgaIM7u/hDsMKl9O39BaJe5PEvY
XjVUhddsw6Xfw6HH80kiLFxx+yAivZf9Y585h/1Xzo9KdxTEITzI3VFtUEflEQeA
7w2u+aDdO41gIBxiRZK5r0nojkZN1+dExvB7ZxeGZk5YDgwKUK2b+57Dy7y0eSDz
JmPmZmKfvcWwkXF1px/HfLxLiPvZC6IbFFEpN/9xGSAC7VyfQAhx5iKRcwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFAPOsJ1e6moY5Y397+vym0EF4CZ8MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzM2LzBjNDY1
MC03OTY0LTQ4YWYtOTg1YS0zNDAxOGQ1YzlkZjUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzYvMGM0NjUw
LTc5NjQtNDhhZi05ODVhLTM0MDE4ZDVjOWRmNS8xL0E4NnduVjdxYWhqbGpmM3Y2
X0tiUVFYZ0pudy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCX9dIMA0GCSqGSIb3DQEBCwUAA4IBAQAVSXpd
ied1j/Oi0V0PmpAbfQWZcK37F3OOggY31rKkqXS7FMTxuNAgkPEyMkAfYtzMIYM/
9qCe5qsQ/rREutOXPdWgcbE3Nsvkx7V029RXSkkwrQ5rG2tYUnutbwDb338cAPAg
64Y/HRwlutUYmT/umZYOhyBBueSPVycisyX7y3HD/tNPBxkmi4pzlOQug7i46cpN
qxTrJkq8oMJTF6FX06KT7e3c5ydZqEa72KSg35BfMcu0G0sOfaqx5BhhChUUzZfB
cDHerrt7Zi17HIpwH/HLpUcy+FqCxDbIILFsF4FcWUE09TqkbIop1e7nUxplSZC+
OW52RlDHzALf37qD
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:41:32 2025 by rpki-client