Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CiebQDjgAue9ZOUHbRo56-lvI8Q.cer
File: CiebQDjgAue9ZOUHbRo56-lvI8Q.cer (raw, json)
Hash identifier: WK7aEmpMfBVItdC/JvARQtLtkaXKM/EetenPDZwi+c4=
Subject key identifier: 0A:27:9B:40:38:E0:02:E7:BD:64:E5:07:6D:1A:39:EB:E9:6F:23:C4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194252168EBD742C01EB6587EA640AA9802
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:48:54 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.88.112.0/22
IP: 2a03:7f20::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:68:eb:d7:42:c0:1e:b6:58:7e:a6:40:aa:98:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a279b4038e002e7bd64e5076d1a39ebe96f23c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:df:76:1d:4e:47:ba:0d:84:0d:f2:b0:32:73:
d5:f4:b6:12:97:d9:12:f8:ca:91:eb:86:b8:cf:c0:
68:c7:44:c3:ff:8a:b2:60:ba:b1:df:38:33:dc:3d:
9c:70:2a:57:ac:4c:c8:f7:a1:bb:15:8c:27:2f:4d:
af:fa:15:68:b2:02:10:82:8f:87:c4:25:4e:74:71:
90:a9:53:0d:50:b2:2c:7e:60:d7:1a:5c:72:7a:d5:
4b:e4:ef:e2:bb:5c:aa:f2:8b:dd:4d:49:c6:20:b8:
c2:6b:d6:61:44:da:1b:1c:e6:4a:8b:9a:c9:66:2b:
3c:65:1d:bb:e5:9f:df:f8:c7:d3:2d:d7:d6:b7:48:
39:f8:3c:78:3c:80:76:2d:e2:43:4d:eb:a2:f7:bd:
ad:5d:b3:52:81:df:c0:13:cf:f8:cb:02:ec:17:55:
af:47:78:5b:7a:f4:2a:c9:d8:0e:25:9f:e8:26:56:
06:06:d7:d0:93:8d:c9:72:bf:9b:9d:89:dd:53:a9:
5b:51:82:3d:be:94:4d:7c:0c:da:5c:4f:ff:9a:21:
26:f3:df:f5:24:01:bf:1e:03:96:ab:1b:6e:47:84:
bd:bb:62:5e:76:9c:ba:90:ff:49:40:5c:e0:88:ef:
14:66:39:63:38:e1:2c:b6:00:21:22:08:e9:4e:71:
76:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:27:9B:40:38:E0:02:E7:BD:64:E5:07:6D:1A:39:EB:E9:6F:23:C4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/851d45-1422-4b31-bd8f-7993b9e03b0f/1/CiebQDjgAue9ZOUHbRo56-lvI8Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.88.112.0/22
IPv6:
2a03:7f20::/29
Signature Algorithm: sha256WithRSAEncryption
73:4b:4a:56:f3:5e:cb:04:31:fa:f2:24:b5:30:b1:98:e9:13:
bb:d5:09:1d:c5:ff:8e:d4:79:32:c6:ab:80:49:22:c0:5f:b9:
09:92:bf:a5:04:8d:fa:a3:00:e8:03:60:bd:04:b2:88:85:f6:
1d:17:89:ad:31:6a:0d:13:f1:56:f0:ca:cb:0f:78:cc:64:c2:
22:d1:3b:2a:90:25:3e:56:e9:06:f3:e2:c6:f1:00:98:99:28:
34:62:2d:43:4b:36:ca:f1:e3:39:e5:4c:e8:c0:84:e8:a0:2f:
fc:b7:07:97:cd:92:9b:4a:2f:31:ac:50:f4:97:dd:6d:ce:12:
05:df:c5:30:83:3b:64:d0:73:67:e1:5e:48:0f:09:66:69:a3:
44:44:8c:14:21:bd:2a:85:60:90:f7:0f:9a:cc:ab:65:5a:01:
27:b6:18:3d:b6:3f:fa:6d:94:a2:63:74:7b:8e:96:60:b6:65:
2b:9e:43:ba:4b:96:0e:e8:90:3c:98:fc:e3:df:45:50:90:01:
04:4a:48:f0:c4:67:72:5d:fc:6b:f9:13:90:2c:c8:a0:38:26:
d5:5f:04:74:44:44:dd:6a:72:4a:44:68:0b:dc:da:75:c7:fe:
5f:f9:fc:3f:04:dd:2c:6c:ac:1d:b0:18:dc:5e:6e:1b:2f:35:
c8:50:ae:66
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZQlIWjr10LAHrZYfqZAqpgCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDM0ODU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYTI3OWI0MDM4ZTAwMmU3YmQ2NGU1MDc2ZDFhMzllYmU5NmYyM2M0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy992HU5Hug2EDfKwMnPV9LYSl9kS
+MqR64a4z8Box0TD/4qyYLqx3zgz3D2ccCpXrEzI96G7FYwnL02v+hVosgIQgo+H
xCVOdHGQqVMNULIsfmDXGlxyetVL5O/iu1yq8ovdTUnGILjCa9ZhRNobHOZKi5rJ
Zis8ZR275Z/f+MfTLdfWt0g5+Dx4PIB2LeJDTeui972tXbNSgd/AE8/4ywLsF1Wv
R3hbevQqydgOJZ/oJlYGBtfQk43Jcr+bnYndU6lbUYI9vpRNfAzaXE//miEm89/1
JAG/HgOWqxtuR4S9u2Jedpy6kP9JQFzgiO8UZjljOOEstgAhIgjpTnF2JwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFAonm0A44ALnvWTlB20aOevpbyPEMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzMwLzg1MWQ0
NS0xNDIyLTRiMzEtYmQ4Zi03OTkzYjllMDNiMGYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMzAvODUxZDQ1
LTE0MjItNGIzMS1iZDhmLTc5OTNiOWUwM2IwZi8xL0NpZWJRRGpnQXVlOVpPVUhi
Um81Ni1sdkk4US5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuVhwMA0EAgACMAcDBQMqA38gMA0GCSqGSIb3
DQEBCwUAA4IBAQBzS0pW817LBDH68iS1MLGY6RO71Qkdxf+O1HkyxquASSLAX7kJ
kr+lBI36owDoA2C9BLKIhfYdF4mtMWoNE/FW8MrLD3jMZMIi0TsqkCU+VukG8+LG
8QCYmSg0Yi1DSzbK8eM55UzowITooC/8tweXzZKbSi8xrFD0l91tzhIF38Uwgztk
0HNn4V5IDwlmaaNERIwUIb0qhWCQ9w+azKtlWgEnthg9tj/6bZSiY3R7jpZgtmUr
nkO6S5YO6JA8mPzj30VQkAEESkjwxGdyXfxr+ROQLMigOCbVXwR0RETdanJKRGgL
3Np1x/5f+fw/BN0sbKwdsBjcXm4bLzXIUK5m
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:58:29 2025 by rpki-client