Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Bc9q2cvp97KGPgzsNsFTxdBzauI.cer
File: Bc9q2cvp97KGPgzsNsFTxdBzauI.cer (raw, json)
Hash identifier: Z4oHc8ZQFDN7twKPR+xm1vHlKQoN0WA5XSYPYEnfY48=
Subject key identifier: 05:CF:6A:D9:CB:E9:F7:B2:86:3E:0C:EC:36:C1:53:C5:D0:73:6A:E2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B274AD1E4D0B319A7E01A59775CE38
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:47:42 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 149.132.0.0/16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:74:ad:1e:4d:0b:31:9a:7e:01:a5:97:75:ce:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=05cf6ad9cbe9f7b2863e0cec36c153c5d0736ae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f7:d8:d7:d7:96:7a:97:67:f4:09:55:3f:b0:
30:8a:88:80:66:24:e6:96:08:c2:1c:9a:39:d4:cc:
8f:a4:4d:9c:b2:56:86:6d:d5:b4:c4:ad:d2:aa:3d:
51:a9:29:8d:d2:0b:1b:d5:ad:cf:5c:2c:a1:22:07:
c5:41:5e:9a:ff:aa:c9:fa:1f:9f:ee:e3:6f:89:13:
1e:a8:f4:d6:60:b4:b7:37:69:c3:c3:f0:f5:bf:e0:
ea:8d:79:7e:d3:cc:d4:f6:c5:76:73:87:16:b8:d7:
6e:6c:3f:24:71:cb:ad:6f:7b:fd:3d:15:38:4b:b3:
c2:e9:52:13:08:22:d1:7a:ca:b6:c9:3f:95:3e:53:
fe:53:57:fb:76:7c:64:ca:87:56:d1:96:cd:68:51:
fd:49:ad:6a:e9:2f:31:55:68:15:a6:9f:9c:8a:55:
33:24:69:17:51:04:89:a6:df:5a:b1:3c:60:41:6b:
9d:f2:df:ca:66:f7:e3:57:fe:c3:66:65:14:64:93:
b3:2a:e8:08:50:5e:ea:16:07:c0:e8:d0:fb:b4:b1:
34:f8:98:e1:44:16:6b:91:16:28:03:dc:08:8c:33:
92:37:9d:08:59:db:ec:dd:23:93:1d:ad:02:d0:4c:
60:d4:f2:00:de:2f:2a:f5:bb:9f:89:dc:2e:25:6a:
f2:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:CF:6A:D9:CB:E9:F7:B2:86:3E:0C:EC:36:C1:53:C5:D0:73:6A:E2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.132.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2b:b2:65:df:be:ad:15:a6:d0:8d:02:4f:31:e3:a5:47:d5:3e:
c4:bb:a9:be:a3:1b:c7:8f:7e:6f:27:66:46:83:66:fa:93:05:
57:c2:93:f5:d5:a8:64:16:77:ac:2f:d8:64:7d:c8:13:b2:f4:
9d:8c:00:09:1a:e9:98:86:36:45:ac:19:87:d5:83:8b:98:3c:
7e:ff:d3:79:8f:9b:6c:63:f7:a2:f0:b7:af:fd:9b:82:a2:e4:
d6:2e:76:c5:6c:88:9b:3b:9a:73:9c:c0:bd:b0:42:cb:a5:2b:
fa:b0:3b:38:a9:4c:58:d9:be:f9:4f:3f:4f:79:da:f2:98:4e:
79:10:26:fd:26:50:a3:34:f8:58:b7:53:1a:61:8b:1c:ce:4c:
f7:a3:e5:b9:84:7b:9c:40:d7:75:fc:42:c8:f7:be:e7:8a:a1:
9b:90:43:ef:6d:d3:16:ad:38:b3:6d:02:c8:e6:50:76:ca:1c:
27:1c:ba:b4:c5:22:a9:ac:cc:cc:06:2b:d7:dd:43:79:c6:2b:
38:ad:93:ea:c6:4c:13:0d:bd:a8:18:4a:6d:b7:dd:62:8a:21:
86:10:ce:a8:f1:b3:51:28:8a:18:38:30:43:2e:03:97:88:b4:
1a:c4:a7:ae:df:a3:1f:3d:86:84:bb:a3:77:2d:e7:b6:e7:99:
5f:55:63:85
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgISAZQksnStHk0LMZp+AaWXdc44MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDE0NzQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNWNmNmFkOWNiZTlmN2IyODYzZTBjZWMzNmMxNTNjNWQwNzM2YWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApffY19eWepdn9AlVP7AwioiAZiTm
lgjCHJo51MyPpE2cslaGbdW0xK3Sqj1RqSmN0gsb1a3PXCyhIgfFQV6a/6rJ+h+f
7uNviRMeqPTWYLS3N2nDw/D1v+DqjXl+08zU9sV2c4cWuNdubD8kccutb3v9PRU4
S7PC6VITCCLResq2yT+VPlP+U1f7dnxkyodW0ZbNaFH9Sa1q6S8xVWgVpp+cilUz
JGkXUQSJpt9asTxgQWud8t/KZvfjV/7DZmUUZJOzKugIUF7qFgfA6ND7tLE0+Jjh
RBZrkRYoA9wIjDOSN50IWdvs3SOTHa0C0Exg1PIA3i8q9bufidwuJWryOwIDAQAB
o4ICgzCCAn8wHQYDVR0OBBYEFAXPatnL6feyhj4M7DbBU8XQc2riMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzU1LzRiZWMz
Yi00ZjU3LTQ4ZDYtYmRjZi03NDhhZjFmODQwMGUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTUvNGJlYzNi
LTRmNTctNDhkNi1iZGNmLTc0OGFmMWY4NDAwZS8xL0JjOXEyY3ZwOTdLR1BnenNO
c0ZUeGRCemF1SS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUF
BwEHAQH/BA8wDTALBAIAATAFAwMAlYQwDQYJKoZIhvcNAQELBQADggEBACuyZd++
rRWm0I0CTzHjpUfVPsS7qb6jG8ePfm8nZkaDZvqTBVfCk/XVqGQWd6wv2GR9yBOy
9J2MAAka6ZiGNkWsGYfVg4uYPH7/03mPm2xj96Lwt6/9m4Ki5NYudsVsiJs7mnOc
wL2wQsulK/qwOzipTFjZvvlPP0952vKYTnkQJv0mUKM0+Fi3UxphixzOTPej5bmE
e5xA13X8Qsj3vueKoZuQQ+9t0xatOLNtAsjmUHbKHCccurTFIqmszMwGK9fdQ3nG
Kzitk+rGTBMNvagYSm233WKKIYYQzqjxs1Eoihg4MEMuA5eItBrEp67fox89hoS7
o3ct57bnmV9VY4U=
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:53:03 2025 by rpki-client