Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CiINqbbilYVbYn_qYQ4cthZGiUs.cer
File: CiINqbbilYVbYn_qYQ4cthZGiUs.cer (raw, json)
Hash identifier: iKDOPh8vUHu6AQv41O6tux1boQW+0rOBlZrL4He9aJw=
Subject key identifier: 0A:22:0D:A9:B6:E2:95:85:5B:62:7F:EA:61:0E:1C:B6:16:46:89:4B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D6006D1757EDF3A7A1EE830A9F5D7B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:48:03 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 196754
IP: 195.88.248.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:00:6d:17:57:ed:f3:a7:a1:ee:83:0a:9f:5d:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a220da9b6e295855b627fea610e1cb61646894b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:a4:f5:9c:82:d5:4b:28:47:4f:b7:c4:c5:16:
74:62:17:ca:57:cd:f2:28:96:ea:19:a0:6b:b3:dc:
48:fb:ec:50:04:1b:bb:11:a0:63:56:c5:dd:70:5a:
2e:df:41:0b:29:e4:3f:23:a3:d0:e5:e7:0d:4c:b9:
83:7b:9f:05:af:26:e4:76:24:1a:91:85:40:bb:11:
92:cc:dc:64:d3:7a:4a:3f:3e:08:e0:1b:76:52:9a:
9c:91:df:a3:90:7c:bd:52:d2:18:92:69:c4:21:a1:
64:1d:b5:b5:9a:3f:9f:6b:12:19:33:bf:7a:69:c5:
b1:ba:d3:90:4d:d2:81:21:37:e8:18:c7:73:96:79:
5d:c7:63:99:fe:2f:42:bb:7c:36:5a:12:de:1e:a1:
1f:46:ce:6e:1e:e5:68:ff:d3:91:2b:3c:05:68:c4:
96:c9:7f:df:92:77:44:23:30:ee:84:b4:aa:63:03:
92:95:b0:2d:ee:36:c2:8f:2a:a2:e4:78:15:a9:bb:
a5:54:f4:68:66:37:07:b8:cb:82:4f:b4:06:71:8a:
de:a2:28:38:23:a5:88:67:18:d3:4f:c7:0a:04:fd:
ac:c2:c4:1f:35:bf:20:ff:b3:ca:56:3f:0c:ba:97:
e8:60:65:f0:3e:64:9c:0c:6f:38:03:c1:8f:93:dd:
06:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:22:0D:A9:B6:E2:95:85:5B:62:7F:EA:61:0E:1C:B6:16:46:89:4B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.88.248.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
196754
Signature Algorithm: sha256WithRSAEncryption
90:95:56:b0:db:62:42:f6:2e:1b:cb:f6:f0:1d:fd:71:b9:f8:
17:e3:71:57:3b:b5:c6:5f:ca:54:d8:71:78:e6:27:5d:25:26:
b1:8d:b8:cc:eb:4d:ac:33:95:d0:2e:65:be:26:3e:e3:c1:af:
09:bc:b2:18:26:33:a4:ac:3d:07:73:d9:5f:73:7e:3a:3a:54:
fe:92:cf:49:7e:07:7b:a4:38:8c:2f:8a:17:ab:01:21:3f:ff:
89:73:67:e5:d3:5c:5e:e5:ed:31:f5:0a:93:90:5f:bb:05:e9:
a1:2a:8b:90:61:81:89:04:80:2f:e6:45:3d:50:c9:17:cd:d9:
70:4d:b6:7b:10:b1:a6:f0:3e:2d:73:f3:47:af:f9:f8:5d:98:
74:0b:19:d4:d6:8a:d9:43:cf:ff:e1:37:43:5e:36:94:ec:63:
5d:2b:cd:1f:96:92:f2:80:a7:72:cc:1f:e0:d8:49:ed:d5:60:
38:c2:77:7e:4e:84:82:1b:65:49:02:88:d1:ea:b0:b1:42:10:
ee:41:26:1c:c7:40:d5:05:67:e2:cb:ea:b7:f3:bc:32:5f:53:
fa:ee:d2:4f:13:92:94:48:89:ba:54:be:24:0b:5c:97:b7:74:
96:62:b4:e7:da:0c:57:43:cb:9c:f8:3c:8e:65:20:f1:76:70:
95:57:de:97
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZQg1gBtF1ft86eh7oMKn117MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDc0ODAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYTIyMGRhOWI2ZTI5NTg1NWI2MjdmZWE2MTBlMWNiNjE2NDY4OTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7aT1nILVSyhHT7fExRZ0YhfKV83y
KJbqGaBrs9xI++xQBBu7EaBjVsXdcFou30ELKeQ/I6PQ5ecNTLmDe58FrybkdiQa
kYVAuxGSzNxk03pKPz4I4Bt2Upqckd+jkHy9UtIYkmnEIaFkHbW1mj+faxIZM796
acWxutOQTdKBITfoGMdzlnldx2OZ/i9Cu3w2WhLeHqEfRs5uHuVo/9ORKzwFaMSW
yX/fkndEIzDuhLSqYwOSlbAt7jbCjyqi5HgVqbulVPRoZjcHuMuCT7QGcYreoig4
I6WIZxjTT8cKBP2swsQfNb8g/7PKVj8MupfoYGXwPmScDG84A8GPk90GrwIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFAoiDam24pWFW2J/6mEOHLYWRolLMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA5Lzk4MTgz
OS05ZGZhLTQyZDMtYWNiMS02MjE4ODI4ZWQ4OTYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDkvOTgxODM5
LTlkZmEtNDJkMy1hY2IxLTYyMTg4MjhlZDg5Ni8xL0NpSU5xYmJpbFlWYlluX3FZ
UTRjdGhaR2lVcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQBw1j4MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwMAkjANBgkqhkiG9w0BAQsFAAOCAQEAkJVWsNtiQvYuG8v28B39cbn4F+NxVzu1
xl/KVNhxeOYnXSUmsY24zOtNrDOV0C5lviY+48GvCbyyGCYzpKw9B3PZX3N+OjpU
/pLPSX4He6Q4jC+KF6sBIT//iXNn5dNcXuXtMfUKk5BfuwXpoSqLkGGBiQSAL+ZF
PVDJF83ZcE22exCxpvA+LXPzR6/5+F2YdAsZ1NaK2UPP/+E3Q142lOxjXSvNH5aS
8oCncswf4NhJ7dVgOMJ3fk6EghtlSQKI0eqwsUIQ7kEmHMdA1QVn4svqt/O8Ml9T
+u7STxOSlEiJulS+JAtcl7d0lmK059oMV0PLnPg8jmUg8XZwlVfelw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:51:59 2025 by rpki-client