Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/F1rTPU9qTQU5wncOK0-7qU_PHx0.cer
File: F1rTPU9qTQU5wncOK0-7qU_PHx0.cer (raw, json)
Hash identifier: V03SyKhgqJWpnhWwWoccJWF/9U70v1gL0cYMCdy9Jw0=
Subject key identifier: 17:5A:D3:3D:4F:6A:4D:05:39:C2:77:0E:2B:4F:BB:A9:4F:CF:1F:1D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA341449A865863DAC89AB44CD1E22
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6c/0ac77f-dce6-4eb2-808a-07203cd816b8/1/F1rTPU9qTQU5wncOK0-7qU_PHx0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6c/0ac77f-dce6-4eb2-808a-07203cd816b8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:47:58 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 176.103.208.0/22
IP: 195.216.210.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:34:14:49:a8:65:86:3d:ac:89:ab:44:cd:1e:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=175ad33d4f6a4d0539c2770e2b4fbba94fcf1f1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a8:85:d5:9d:6e:6b:55:bb:b3:36:ce:cf:6f:
c9:2c:06:d3:1f:2e:41:ae:6b:c3:29:d5:98:25:46:
d6:d9:6f:e8:62:18:d0:07:be:3c:b4:b0:9c:cc:91:
5a:22:6b:e5:bc:2c:e9:f6:85:e0:62:6e:7b:33:7d:
7f:0c:fc:9c:6e:3b:ee:b0:19:59:7e:c0:94:75:41:
1d:e4:77:61:8e:a8:b3:29:55:f7:99:91:91:c3:2a:
86:f6:0e:2e:07:ff:ce:b6:ee:3b:8f:7c:fe:15:9d:
5a:7a:6f:f5:11:36:8e:71:6a:55:f6:9a:dd:8f:87:
33:70:6d:37:94:50:7b:91:f9:43:3c:5e:ec:9c:bc:
a4:e5:83:a2:2f:98:47:bc:45:fb:27:dc:89:4f:25:
3b:1c:22:10:ba:8a:96:b1:04:06:a7:0e:9e:a6:dc:
68:3d:13:cc:69:7a:ef:0a:ce:a2:1f:0d:7b:32:74:
a5:a9:59:90:35:44:88:8a:e6:5e:07:3e:84:ba:d0:
0c:d8:58:90:fb:d8:9e:3c:e3:09:b0:73:fd:ca:73:
a6:5a:ad:e4:e9:41:83:20:5f:c9:be:38:56:1a:d8:
67:c8:e7:be:02:0f:25:7d:42:84:22:ba:aa:06:96:
54:36:f2:18:51:ab:ae:79:8c:d4:2d:b8:2b:78:cc:
74:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:5A:D3:3D:4F:6A:4D:05:39:C2:77:0E:2B:4F:BB:A9:4F:CF:1F:1D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/0ac77f-dce6-4eb2-808a-07203cd816b8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/0ac77f-dce6-4eb2-808a-07203cd816b8/1/F1rTPU9qTQU5wncOK0-7qU_PHx0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.103.208.0/22
195.216.210.0/23
Signature Algorithm: sha256WithRSAEncryption
29:87:e4:c0:49:e5:85:47:c7:da:25:5b:a5:80:0e:2e:f7:38:
65:17:d9:9f:24:51:79:e6:3c:d1:f0:28:75:e6:80:6d:5e:cf:
c3:16:b8:df:67:fb:d7:c8:97:63:38:a0:66:ba:a4:d9:2c:ac:
02:43:b8:49:0c:95:9c:2d:28:90:d7:73:9c:f1:f4:d2:b6:40:
bb:79:9c:9c:2e:14:b3:bb:98:ed:ff:5e:78:3a:1c:e8:a2:ca:
55:fe:0b:26:62:df:38:a1:96:1c:43:31:19:06:70:d6:67:d0:
73:61:c4:b4:41:a1:ea:62:e7:89:9e:4f:53:84:c7:cb:2a:15:
a4:da:2c:5c:a3:f0:a6:7a:29:0f:81:18:84:fe:6c:11:03:14:
59:95:2e:64:2e:67:a5:89:ab:f9:2d:2f:6f:b8:1d:f2:6a:64:
ae:23:4f:e1:f3:05:26:14:8a:69:0d:76:45:bc:6f:92:85:5c:
46:18:f5:86:a7:ed:12:0e:39:d0:60:51:37:70:4d:67:8b:9c:
7d:0c:29:f9:77:e7:d4:8f:1e:9a:cd:3d:d4:a6:4e:f5:94:4c:
82:24:ac:b5:e1:31:fe:e5:b2:04:fb:ae:96:76:ad:85:8a:b9:
c1:3b:2f:6c:e9:3d:7c:67:20:bf:4d:cb:76:13:3b:e7:95:70:
1b:ed:ab:dc
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgISAZQf+jQUSahlhj2siatEzR4iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDM0NzU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNzVhZDMzZDRmNmE0ZDA1MzljMjc3MGUyYjRmYmJhOTRmY2YxZjFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6iF1Z1ua1W7szbOz2/JLAbTHy5B
rmvDKdWYJUbW2W/oYhjQB748tLCczJFaImvlvCzp9oXgYm57M31/DPycbjvusBlZ
fsCUdUEd5HdhjqizKVX3mZGRwyqG9g4uB//Otu47j3z+FZ1aem/1ETaOcWpV9prd
j4czcG03lFB7kflDPF7snLyk5YOiL5hHvEX7J9yJTyU7HCIQuoqWsQQGpw6eptxo
PRPMaXrvCs6iHw17MnSlqVmQNUSIiuZeBz6EutAM2FiQ+9iePOMJsHP9ynOmWq3k
6UGDIF/JvjhWGthnyOe+Ag8lfUKEIrqqBpZUNvIYUauueYzULbgreMx05QIDAQAB
o4ICijCCAoYwHQYDVR0OBBYEFBda0z1Pak0FOcJ3DitPu6lPzx8dMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzZjLzBhYzc3
Zi1kY2U2LTRlYjItODA4YS0wNzIwM2NkODE2YjgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmMvMGFjNzdm
LWRjZTYtNGViMi04MDhhLTA3MjAzY2Q4MTZiOC8xL0YxclRQVTlxVFFVNXduY09L
MC03cVVfUEh4MC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF
BwEHAQH/BBYwFDASBAIAATAMAwQCsGfQAwQBw9jSMA0GCSqGSIb3DQEBCwUAA4IB
AQAph+TASeWFR8faJVulgA4u9zhlF9mfJFF55jzR8Ch15oBtXs/DFrjfZ/vXyJdj
OKBmuqTZLKwCQ7hJDJWcLSiQ13Oc8fTStkC7eZycLhSzu5jt/154OhzoospV/gsm
Yt84oZYcQzEZBnDWZ9BzYcS0QaHqYueJnk9ThMfLKhWk2ixco/CmeikPgRiE/mwR
AxRZlS5kLmeliav5LS9vuB3yamSuI0/h8wUmFIppDXZFvG+ShVxGGPWGp+0SDjnQ
YFE3cE1ni5x9DCn5d+fUjx6azT3Upk71lEyCJKy14TH+5bIE+66Wdq2FirnBOy9s
6T18ZyC/Tct2EzvnlXAb7avc
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:35:03 2025 by rpki-client