Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer
File: D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer (raw, json)
Hash identifier: Vkb3greLoapReqQiIgiFDxFXRfiR0xThtX/5h38B1Qw=
Subject key identifier: 0F:91:E5:B5:8D:A3:26:E6:54:E9:94:FE:F2:19:52:76:75:95:79:BE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B38362BC38F5424EA00F6839394C2E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:47:43 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 41638
AS: 214391
IP: 91.195.217.0/24
IP: 195.138.222.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:83:62:bc:38:f5:42:4e:a0:0f:68:39:39:4c:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0f91e5b58da326e654e994fef2195276759579be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c8:8a:e9:2e:2c:a8:30:70:b9:59:bb:2d:32:
2c:92:e3:47:1f:36:a6:e2:08:ef:e6:45:2d:99:c8:
b4:be:8f:d6:7d:de:1d:2e:03:f0:74:04:8d:8a:4d:
9a:61:3a:7e:e8:8d:22:88:6c:23:5a:df:0f:55:c2:
16:64:f3:7d:11:5e:75:40:fd:e6:d4:61:f8:86:fb:
47:40:a5:36:75:bb:01:31:0c:84:45:11:54:e3:84:
67:e8:43:d3:6f:37:a0:57:88:9a:b4:8d:15:11:8e:
f8:f5:fa:cd:c1:10:5d:a1:b1:42:ad:a5:4b:48:ec:
28:a3:fa:11:cf:ab:72:f1:6b:2c:d5:9d:b1:16:c4:
75:25:0c:5f:01:f5:e6:5c:96:30:c7:45:e5:73:1b:
29:4f:57:a9:23:65:a0:0e:45:d0:9c:a2:a3:b5:da:
91:25:44:22:9e:54:47:5d:4b:b7:3d:84:6b:0c:c8:
a3:69:4d:12:2d:0c:5b:83:b8:4c:22:63:e5:cc:80:
78:b9:d8:12:93:c5:c7:31:33:f2:ed:41:ed:48:04:
88:86:32:b2:10:9b:bb:d5:bb:48:5f:80:8c:e5:b4:
8d:95:7b:8c:41:fd:8a:2f:d0:65:7a:e3:c3:d5:66:
1d:3b:01:26:7f:06:89:e7:32:43:f9:5e:36:99:1f:
1e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:91:E5:B5:8D:A3:26:E6:54:E9:94:FE:F2:19:52:76:75:95:79:BE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.195.217.0/24
195.138.222.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
41638
214391
Signature Algorithm: sha256WithRSAEncryption
14:56:f1:53:33:82:73:23:19:b8:bb:d6:fa:82:af:2b:95:e1:
66:73:fd:21:0f:ce:0c:4e:31:38:87:b7:34:75:17:79:d6:65:
88:a8:b8:0d:a0:af:22:3e:c7:4d:24:1d:82:c0:36:a5:42:e8:
53:0f:be:4b:35:69:b5:ad:c8:a1:12:96:ef:49:ac:69:4b:e3:
82:15:02:6f:e9:38:6d:d3:3a:35:78:a2:8c:15:0e:fb:c7:d3:
aa:a4:19:fc:89:15:e9:3a:23:91:83:32:bb:ea:79:69:25:dd:
80:c3:77:49:8c:50:57:6f:97:99:5d:22:3b:2b:30:6e:2a:56:
6f:95:04:69:14:1f:ac:b8:07:d6:00:c2:8a:43:5b:8c:4e:fa:
fd:0d:2b:21:30:61:0b:fc:b8:85:f4:2a:2b:1a:e3:ac:43:f1:
71:b2:4e:2f:9e:63:22:b9:5e:c2:2b:68:dd:af:74:87:dd:c8:
ad:ec:a6:c7:d2:0f:56:40:ff:a2:2d:2e:81:41:3f:95:fc:05:
2b:05:c3:e0:c1:15:db:6f:55:2c:96:f4:2b:1a:ca:99:a3:cd:
b7:ac:f6:46:92:cc:8f:e1:72:73:1e:0b:b4:dc:b5:8d:67:37:
51:33:a7:b0:af:95:0d:0d:f7:84:94:04:58:70:f5:8f:10:48:
43:cc:2e:cb
-----BEGIN CERTIFICATE-----
MIIFnzCCBIegAwIBAgISAZQns4NivDj1Qk6gD2g5OUwuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTU0NzQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZjkxZTViNThkYTMyNmU2NTRlOTk0ZmVmMjE5NTI3Njc1OTU3OWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqciK6S4sqDBwuVm7LTIskuNHHzam
4gjv5kUtmci0vo/Wfd4dLgPwdASNik2aYTp+6I0iiGwjWt8PVcIWZPN9EV51QP3m
1GH4hvtHQKU2dbsBMQyERRFU44Rn6EPTbzegV4iatI0VEY749frNwRBdobFCraVL
SOwoo/oRz6ty8Wss1Z2xFsR1JQxfAfXmXJYwx0XlcxspT1epI2WgDkXQnKKjtdqR
JUQinlRHXUu3PYRrDMijaU0SLQxbg7hMImPlzIB4udgSk8XHMTPy7UHtSASIhjKy
EJu71btIX4CM5bSNlXuMQf2KL9BleuPD1WYdOwEmfwaJ5zJD+V42mR8e4QIDAQAB
o4ICqzCCAqcwHQYDVR0OBBYEFA+R5bWNoybmVOmU/vIZUnZ1lXm+MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QyLzI2NWVm
YS1mMDQ5LTQ2NDctOGNmMS04MjRjY2VmZDljODEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDIvMjY1ZWZh
LWYwNDktNDY0Ny04Y2YxLTgyNGNjZWZkOWM4MS8xL0Q1SGx0WTJqSnVaVTZaVC04
aGxTZG5XVmViNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF
BwEHAQH/BBYwFDASBAIAATAMAwQAW8PZAwQAw4reMB8GCCsGAQUFBwEIAQH/BBAw
DqAMMAoCAwCipgIDA0V3MA0GCSqGSIb3DQEBCwUAA4IBAQAUVvFTM4JzIxm4u9b6
gq8rleFmc/0hD84MTjE4h7c0dRd51mWIqLgNoK8iPsdNJB2CwDalQuhTD75LNWm1
rcihEpbvSaxpS+OCFQJv6Tht0zo1eKKMFQ77x9OqpBn8iRXpOiORgzK76nlpJd2A
w3dJjFBXb5eZXSI7KzBuKlZvlQRpFB+suAfWAMKKQ1uMTvr9DSshMGEL/LiF9Cor
GuOsQ/Fxsk4vnmMiuV7CK2jdr3SH3cit7KbH0g9WQP+iLS6BQT+V/AUrBcPgwRXb
b1UslvQrGsqZo823rPZGksyP4XJzHgu03LWNZzdRM6ewr5UNDfeElARYcPWPEEhD
zC7L
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:17:58 2025 by rpki-client