Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer
File: C5NMNrdzAIhlucn7D9SGaTlaxzA.cer (raw, json)
Hash identifier: 0vkiXRf4WSkZPQMO8Ls3dG6GF2orwAbV7AUaZRr6CZ4=
Subject key identifier: 0B:93:4C:36:B7:73:00:88:65:B9:C9:FB:0F:D4:86:69:39:5A:C7:30
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194236A0E0E01ED96CD722D61C2A425A0F9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:49:00 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 37.77.184.0/21
IP: 185.2.220.0/22
IP: 2a00:86c0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:0e:0e:01:ed:96:cd:72:2d:61:c2:a4:25:a0:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b934c36b773008865b9c9fb0fd48669395ac730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:21:c2:8e:4e:28:31:1e:1f:b4:ef:29:72:c8:
d0:f7:b9:4e:a1:05:18:08:a7:7f:79:f5:d4:50:86:
66:4c:31:1a:dc:28:5e:fb:0e:d0:0f:bc:48:3d:fc:
a5:7e:8d:08:91:5e:61:92:99:f0:07:ef:dd:a0:fa:
53:b7:4f:9c:d7:fa:b1:c5:be:b4:a1:76:aa:f3:72:
86:d8:0e:1b:c6:98:ba:50:b8:b7:f7:35:ad:f7:82:
d8:e3:dd:0d:ac:81:64:dd:c6:54:71:26:31:66:98:
e2:ff:b3:50:84:9f:74:10:52:11:f2:96:7b:92:20:
1d:d6:23:de:99:6d:66:4d:a4:38:37:3c:83:ce:11:
d2:c6:a7:2c:ac:df:ee:37:e1:85:7e:fd:22:89:39:
80:a8:38:65:d9:d6:82:e4:a9:13:e2:2a:0e:e0:19:
9a:5b:cc:8e:0b:e0:4d:12:36:5e:b1:37:cd:b7:d2:
9e:ea:f7:b5:23:1c:c9:6e:9c:b2:df:30:80:ff:5b:
91:d5:45:db:aa:45:c7:ae:65:9a:13:2b:6d:94:7a:
d7:34:12:35:d5:1e:77:2b:93:8d:34:64:6d:48:70:
d8:12:14:af:eb:d0:ad:34:7c:bb:b4:b9:34:cc:a3:
b8:ba:18:2b:e9:10:cd:2c:46:19:58:8c:b3:00:46:
86:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:93:4C:36:B7:73:00:88:65:B9:C9:FB:0F:D4:86:69:39:5A:C7:30
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.77.184.0/21
185.2.220.0/22
IPv6:
2a00:86c0::/32
Signature Algorithm: sha256WithRSAEncryption
38:1a:f0:62:64:ac:0b:8b:1b:e9:e5:9c:a3:97:8c:7f:95:f1:
45:77:c4:29:a0:98:86:92:60:55:1e:fc:fb:a3:bd:7d:a9:d8:
d2:6d:63:08:9b:c8:99:2d:79:cc:9c:36:0e:35:81:71:14:4a:
10:ee:84:97:39:55:9e:1e:ed:c5:33:a1:c7:a8:ab:ea:25:4f:
cf:b4:08:03:65:d3:a5:80:e0:51:ff:97:ae:29:95:79:1c:d0:
28:eb:f7:59:01:db:c3:1c:ca:a3:0c:d4:da:0a:5b:a3:88:a2:
32:97:98:1e:55:63:35:4e:e9:ae:ab:4c:cb:6f:07:d3:b2:ca:
7d:4d:69:d0:0f:65:8c:4e:40:e5:90:7a:c9:98:1a:f3:1a:d7:
6c:e7:c6:02:f5:9f:5f:6e:fd:b0:c6:fb:e9:b0:d8:98:0a:96:
cb:d6:18:22:f7:7c:21:5a:89:42:e8:9d:7b:49:93:26:12:90:
ff:ec:c1:4e:83:7c:a2:b3:a4:b7:b9:2a:c9:42:0f:4e:1f:42:
1c:6e:17:09:2d:9b:b7:0e:49:cc:c5:5d:05:81:5b:69:f7:58:
85:39:a4:58:d9:ca:96:7e:6e:84:f5:ba:f9:db:c7:6a:14:93:
7f:96:cd:2b:a7:73:eb:cf:dc:8c:2b:3a:14:3e:89:c0:9f:26:
83:83:05:ec
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgISAZQjag4OAe2WzXItYcKkJaD5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTk0OTAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYjkzNGMzNmI3NzMwMDg4NjViOWM5ZmIwZmQ0ODY2OTM5NWFjNzMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCHCjk4oMR4ftO8pcsjQ97lOoQUY
CKd/efXUUIZmTDEa3Che+w7QD7xIPfylfo0IkV5hkpnwB+/doPpTt0+c1/qxxb60
oXaq83KG2A4bxpi6ULi39zWt94LY490NrIFk3cZUcSYxZpji/7NQhJ90EFIR8pZ7
kiAd1iPemW1mTaQ4NzyDzhHSxqcsrN/uN+GFfv0iiTmAqDhl2daC5KkT4ioO4Bma
W8yOC+BNEjZesTfNt9Ke6ve1IxzJbpyy3zCA/1uR1UXbqkXHrmWaEyttlHrXNBI1
1R53K5ONNGRtSHDYEhSv69CtNHy7tLk0zKO4uhgr6RDNLEYZWIyzAEaG5wIDAQAB
o4ICmTCCApUwHQYDVR0OBBYEFAuTTDa3cwCIZbnJ+w/Uhmk5WscwMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U0L2RlY2I3
ZC0wMzg4LTRlM2MtOGRiNC1hMzAyZjUxZDM4MmMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTQvZGVjYjdk
LTAzODgtNGUzYy04ZGI0LWEzMDJmNTFkMzgyYy8xL0M1Tk1OcmR6QUlobHVjbjdE
OVNHYVRsYXh6QS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQDJU24AwQCuQLcMA0EAgACMAcDBQAqAIbAMA0G
CSqGSIb3DQEBCwUAA4IBAQA4GvBiZKwLixvp5Zyjl4x/lfFFd8QpoJiGkmBVHvz7
o719qdjSbWMIm8iZLXnMnDYONYFxFEoQ7oSXOVWeHu3FM6HHqKvqJU/PtAgDZdOl
gOBR/5euKZV5HNAo6/dZAdvDHMqjDNTaClujiKIyl5geVWM1Tumuq0zLbwfTssp9
TWnQD2WMTkDlkHrJmBrzGtds58YC9Z9fbv2wxvvpsNiYCpbL1hgi93whWolC6J17
SZMmEpD/7MFOg3yis6S3uSrJQg9OH0IcbhcJLZu3DknMxV0FgVtp91iFOaRY2cqW
fm6E9br528dqFJN/ls0rp3Prz9yMKzoUPonAnyaDgwXs
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:49:58 2025 by rpki-client