Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.cer
File: EPHQ2-CTxyI1Bhj0BFwlupQxf4c.cer (raw, json)
Hash identifier: 1HfY4BCnVs3W5UhFxIZKtejIEdeSzs2tnB8t6JLarmk=
Subject key identifier: 10:F1:D0:DB:E0:93:C7:22:35:06:18:F4:04:5C:25:BA:94:31:7F:87
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942067EEA4FD7ED997AA4F6C9AF3E5A9A0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:47:49 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 9120
AS: 211633
AS: 213054
AS: 215782
IP: 80.70.8.0/21
IP: 92.43.88.0/21
IP: 185.221.244.0/22
IP: 185.238.192.0/22
IP: 212.97.136.0/22
IP: 212.97.144.0/20
IP: 2a04:3f80::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:ee:a4:fd:7e:d9:97:aa:4f:6c:9a:f3:e5:a9:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=10f1d0dbe093c722350618f4045c25ba94317f87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b9:9b:93:29:95:08:56:72:2f:4c:b3:ce:89:
bf:aa:2f:7b:fb:13:5f:6b:96:16:02:1f:64:8a:74:
6b:f5:a4:ec:82:7f:e4:d4:4f:6e:1c:dd:35:78:33:
15:85:c6:a6:fb:d2:af:f6:18:3f:8a:c9:af:ac:f4:
45:f7:4b:ca:4d:c9:cb:73:21:b4:30:ee:42:d9:37:
a2:7f:c9:9e:21:63:43:65:74:7d:f4:98:a3:c8:5d:
75:7c:b6:84:79:b9:d3:e9:59:b1:83:3d:7f:9e:23:
dc:90:e7:4c:0b:da:b5:ec:5d:b7:56:01:86:65:54:
df:1c:3f:89:a6:f7:2c:81:ea:a3:bf:ca:f4:30:dd:
01:f0:3f:40:8a:40:b7:d8:a3:5a:1d:28:60:71:a7:
51:3e:92:98:2d:7a:d6:97:27:7e:08:af:14:58:e5:
a3:8f:fb:ee:27:ab:08:7c:37:3a:ad:b6:a3:2f:a2:
0b:ce:39:2f:34:47:f1:d7:a0:c8:20:6c:52:58:fb:
89:11:fb:4f:9b:83:24:89:39:d0:1c:75:0e:db:a2:
f1:46:aa:70:5e:53:dd:3d:fb:f2:0b:ba:e2:64:b9:
21:7b:22:32:8d:b4:f6:46:55:26:cd:fa:b3:48:67:
e9:20:c1:78:74:12:18:95:e1:f1:83:db:54:a5:3f:
f0:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F1:D0:DB:E0:93:C7:22:35:06:18:F4:04:5C:25:BA:94:31:7F:87
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.70.8.0/21
92.43.88.0/21
185.221.244.0/22
185.238.192.0/22
212.97.136.0/22
212.97.144.0/20
IPv6:
2a04:3f80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9120
211633
213054
215782
Signature Algorithm: sha256WithRSAEncryption
28:70:af:a5:d2:7b:b0:35:ab:4a:42:69:08:09:1d:53:59:0b:
00:b2:99:7b:c4:f7:de:64:f6:eb:7b:0a:12:36:fa:a0:29:64:
8b:43:8e:e4:95:48:4f:58:f8:cc:31:da:e4:58:14:23:7d:a9:
e5:51:19:b6:84:65:0c:d3:79:94:b8:05:27:e2:d1:9f:8d:a8:
44:ed:56:2d:c6:2b:a3:7a:86:72:d7:81:41:66:d9:5f:e3:7a:
fb:4b:21:50:fe:7c:8c:b2:a1:f7:32:c9:88:29:e3:9d:88:c5:
64:74:f6:f4:68:cd:f8:87:12:d2:6c:a7:66:28:82:54:12:27:
5f:8b:6a:d6:fc:6f:93:51:6e:d9:f5:df:98:8d:fc:43:09:f5:
e3:06:f2:6c:da:e9:27:d3:62:07:b1:cd:8a:81:02:84:05:39:
e1:9a:3d:3e:3f:34:20:da:cf:b8:60:43:8e:80:eb:72:14:f7:
64:08:f9:10:3e:a0:31:70:85:a3:b4:ae:92:c5:27:1f:8f:fb:
6a:08:45:e2:b7:75:c0:f8:1a:9a:c3:e3:c5:7d:e9:75:c7:77:
42:14:77:a6:3d:76:6d:80:71:83:90:34:f8:db:a0:96:66:da:
ed:68:39:d2:c6:40:a9:5d:56:25:3e:0e:e9:f6:d9:44:67:a6:
52:09:7f:ab
-----BEGIN CERTIFICATE-----
MIIFzzCCBLegAwIBAgISAZQgZ+6k/X7Zl6pPbJrz5amgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDU0NzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMGYxZDBkYmUwOTNjNzIyMzUwNjE4ZjQwNDVjMjViYTk0MzE3Zjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbmbkymVCFZyL0yzzom/qi97+xNf
a5YWAh9kinRr9aTsgn/k1E9uHN01eDMVhcam+9Kv9hg/ismvrPRF90vKTcnLcyG0
MO5C2Teif8meIWNDZXR99JijyF11fLaEebnT6Vmxgz1/niPckOdMC9q17F23VgGG
ZVTfHD+Jpvcsgeqjv8r0MN0B8D9AikC32KNaHShgcadRPpKYLXrWlyd+CK8UWOWj
j/vuJ6sIfDc6rbajL6ILzjkvNEfx16DIIGxSWPuJEftPm4MkiTnQHHUO26LxRqpw
XlPdPfvyC7riZLkheyIyjbT2RlUmzfqzSGfpIMF4dBIYleHxg9tUpT/wHQIDAQAB
o4IC2zCCAtcwHQYDVR0OBBYEFBDx0Nvgk8ciNQYY9ARcJbqUMX+HMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhkLzYwNWYx
Yy0wZDdhLTRiZDMtODhiNi0yZjBhNmJkYmJlNTEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGQvNjA1ZjFj
LTBkN2EtNGJkMy04OGI2LTJmMGE2YmRiYmU1MS8xL0VQSFEyLUNUeHlJMUJoajBC
RndsdXBReGY0Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEwGCCsGAQUF
BwEHAQH/BD0wOzAqBAIAATAkAwQDUEYIAwQDXCtYAwQCud30AwQCue7AAwQC1GGI
AwQE1GGQMA0EAgACMAcDBQMqBD+AMCgGCCsGAQUFBwEIAQH/BBkwF6AVMBMCAiOg
AgMDOrECAwNAPgIDA0rmMA0GCSqGSIb3DQEBCwUAA4IBAQAocK+l0nuwNatKQmkI
CR1TWQsAspl7xPfeZPbrewoSNvqgKWSLQ47klUhPWPjMMdrkWBQjfanlURm2hGUM
03mUuAUn4tGfjahE7VYtxiujeoZy14FBZtlf43r7SyFQ/nyMsqH3MsmIKeOdiMVk
dPb0aM34hxLSbKdmKIJUEidfi2rW/G+TUW7Z9d+YjfxDCfXjBvJs2ukn02IHsc2K
gQKEBTnhmj0+PzQg2s+4YEOOgOtyFPdkCPkQPqAxcIWjtK6SxScfj/tqCEXit3XA
+Bqaw+PFfel1x3dCFHemPXZtgHGDkDT426CWZtrtaDnSxkCpXVYlPg7p9tlEZ6ZS
CX+r
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:47:00 2025 by rpki-client