Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.cer
File: CLDxLxFa1A8sK0qtRU0uQ2EcmgY.cer (raw, json)
Hash identifier: 3NYUUw5CLFv4F1bFyMHsTHaCJyIfef1kVr3JbDIxXSw=
Subject key identifier: 08:B0:F1:2F:11:5A:D4:0F:2C:2B:4A:AD:45:4D:2E:43:61:1C:9A:06
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942067B5CB9CF1F472312ACBDDAC2116FE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:47:35 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 195.225.176.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:b5:cb:9c:f1:f4:72:31:2a:cb:dd:ac:21:16:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:47:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=08b0f12f115ad40f2c2b4aad454d2e43611c9a06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ef:07:34:8e:b1:10:24:77:03:3e:e3:9f:ab:
76:5a:89:1b:a6:c2:ae:26:94:0d:28:99:1f:14:35:
5a:fa:af:a5:25:0a:02:d5:7d:d6:fa:98:49:1c:12:
33:9d:37:45:2b:f6:50:66:bb:60:61:8f:63:68:b8:
22:97:04:dd:23:e8:22:67:c1:49:22:19:98:95:6f:
65:f7:07:23:83:66:ce:36:07:37:5b:e8:80:10:1a:
81:bb:79:12:9c:db:80:38:4e:33:47:a9:0c:85:75:
1c:79:22:03:3a:1f:7e:20:08:d2:02:6d:d4:5e:84:
5f:08:0c:ab:1e:fd:53:ed:e1:af:3b:7e:5f:1e:b0:
81:a1:d2:ce:a6:ed:be:a3:da:c6:eb:ad:26:3e:8f:
83:9e:34:d0:11:1f:bd:5e:b2:70:4c:62:88:85:e5:
5a:ad:dd:25:cd:64:2c:8c:62:35:77:cf:3f:b2:2b:
09:35:d2:87:9b:68:12:1b:c4:44:f2:c6:bf:55:29:
03:57:9f:f2:52:f5:af:47:27:59:bf:07:13:2e:3a:
f5:6b:36:f4:a0:67:7a:4d:bc:0c:77:6b:aa:20:c3:
0a:b7:57:60:4e:38:70:f4:ad:a6:bd:59:47:8d:72:
d3:d8:df:da:ec:df:1a:f2:39:19:88:6c:13:ad:19:
42:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B0:F1:2F:11:5A:D4:0F:2C:2B:4A:AD:45:4D:2E:43:61:1C:9A:06
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.225.176.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:58:6d:7c:ae:a9:46:ee:5c:ca:8f:ea:20:39:5f:b8:32:27:
ab:aa:44:fd:58:ad:e8:d2:d1:7b:bc:ce:fc:a6:41:b1:94:34:
68:37:ca:7e:6c:1a:fd:93:85:dc:de:01:01:79:f0:1d:11:c0:
cf:ec:72:86:5e:52:06:67:2b:16:43:96:68:ab:10:d5:68:b4:
05:2a:46:c4:73:6e:fe:53:27:24:95:6d:f6:8c:9c:5f:4b:5c:
c5:ce:47:ce:ec:c9:cf:32:53:d5:2a:a6:53:39:33:3e:a5:db:
dd:5d:a5:6e:4c:f7:fd:81:7b:aa:0b:f6:ea:a9:24:5b:40:f7:
06:3d:0c:b3:b0:9c:de:4c:84:9e:f4:0b:dc:9e:f1:e6:57:f2:
b6:55:ce:88:68:b8:29:66:12:99:69:26:7d:18:28:36:4f:02:
a0:3b:57:bf:54:23:a0:42:f3:bc:03:33:1a:c1:1e:04:ae:74:
93:3e:5e:fe:47:ef:78:b4:d9:29:52:49:9a:2e:4e:db:89:75:
2a:5a:9e:09:44:8f:0d:8b:71:d9:f6:a1:50:23:9e:41:3c:cb:
a0:b8:af:37:40:76:e0:82:c4:5f:51:59:56:06:17:21:da:5a:
f1:47:4a:c3:7e:1a:d4:a4:d8:8c:ad:4e:de:bf:7b:d7:83:d4:
5e:38:a3:50
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQgZ7XLnPH0cjEqy92sIRb+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDU0NzM1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOGIwZjEyZjExNWFkNDBmMmMyYjRhYWQ0NTRkMmU0MzYxMWM5YTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApO8HNI6xECR3Az7jn6t2WokbpsKu
JpQNKJkfFDVa+q+lJQoC1X3W+phJHBIznTdFK/ZQZrtgYY9jaLgilwTdI+giZ8FJ
IhmYlW9l9wcjg2bONgc3W+iAEBqBu3kSnNuAOE4zR6kMhXUceSIDOh9+IAjSAm3U
XoRfCAyrHv1T7eGvO35fHrCBodLOpu2+o9rG660mPo+DnjTQER+9XrJwTGKIheVa
rd0lzWQsjGI1d88/sisJNdKHm2gSG8RE8sa/VSkDV5/yUvWvRydZvwcTLjr1azb0
oGd6TbwMd2uqIMMKt1dgTjhw9K2mvVlHjXLT2N/a7N8a8jkZiGwTrRlCgQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFAiw8S8RWtQPLCtKrUVNLkNhHJoGMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFjLzUwMzYw
My0xYTVkLTQ5MDAtOTgyOS00OGRlYTEwMjFhNjkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWMvNTAzNjAz
LTFhNWQtNDkwMC05ODI5LTQ4ZGVhMTAyMWE2OS8xL0NMRHhMeEZhMUE4c0swcXRS
VTB1UTJFY21nWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCw+GwMA0GCSqGSIb3DQEBCwUAA4IBAQBNWG18
rqlG7lzKj+ogOV+4MierqkT9WK3o0tF7vM78pkGxlDRoN8p+bBr9k4Xc3gEBefAd
EcDP7HKGXlIGZysWQ5ZoqxDVaLQFKkbEc27+UycklW32jJxfS1zFzkfO7MnPMlPV
KqZTOTM+pdvdXaVuTPf9gXuqC/bqqSRbQPcGPQyzsJzeTISe9AvcnvHmV/K2Vc6I
aLgpZhKZaSZ9GCg2TwKgO1e/VCOgQvO8AzMawR4ErnSTPl7+R+94tNkpUkmaLk7b
iXUqWp4JRI8Ni3HZ9qFQI55BPMuguK83QHbggsRfUVlWBhch2lrxR0rDfhrUpNiM
rU7ev3vXg9ReOKNQ
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:42:19 2025 by rpki-client