Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FkThypMSunm-VZ4RyOoJEAYN1I0.cer
File: FkThypMSunm-VZ4RyOoJEAYN1I0.cer (raw, json)
Hash identifier: xHCYTpvFlWqYcUiE6yJNm1TtgXYg5N3ZsbBQJb/WRw4=
Subject key identifier: 16:44:E1:CA:93:12:BA:79:BE:55:9E:11:C8:EA:09:10:06:0D:D4:8D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B5BE3EEFC55377CBA0121A3BD3F040
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:50:09 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 203130
IP: 185.144.36.0/22
IP: 193.134.216.0/21
IP: 193.247.203.0/24
IP: 2a07:3e00::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:be:3e:ef:c5:53:77:cb:a0:12:1a:3b:d3:f0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:50:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1644e1ca9312ba79be559e11c8ea0910060dd48d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ce:d7:48:14:e2:90:a0:1e:0b:ed:52:d8:ad:
a7:7a:3c:8b:c6:ed:c7:f8:9e:f2:0a:5c:2b:e6:52:
2a:dc:71:2f:6b:48:6d:22:2e:20:43:a1:d7:ef:4d:
ac:8a:72:31:e8:e0:21:e5:0a:c1:6c:1e:8f:b2:fe:
c6:b1:60:20:f3:7f:20:53:dd:6e:f0:2d:91:1e:36:
79:36:1c:fe:bf:7f:82:8e:2f:99:27:37:16:5c:49:
4f:5b:bd:8c:e5:67:5e:a8:59:4f:3c:43:0e:32:46:
09:8a:a2:ad:52:83:63:5e:c9:f7:26:64:97:6d:80:
db:ec:27:20:2a:c4:e9:9a:f9:cf:e7:4b:d7:49:ea:
56:3f:7d:9b:b6:0e:73:e1:4d:3a:0e:6f:c1:34:65:
2e:65:fb:dc:5f:5e:fb:ab:09:f1:b5:c4:03:88:c2:
02:36:06:b7:49:23:01:ac:24:4b:5f:aa:69:e3:76:
95:76:52:a8:20:b8:6e:25:28:06:f0:37:07:5f:8c:
af:05:22:56:b6:38:33:12:2b:71:5a:52:26:99:8f:
06:0a:70:39:f7:21:5e:c5:52:42:2a:fa:b1:4c:d2:
c0:0a:b5:9d:2b:44:77:ce:7c:d2:d3:3d:ee:dd:1d:
e1:fc:ed:a0:b3:a9:5c:69:53:d5:93:db:31:b7:23:
88:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:44:E1:CA:93:12:BA:79:BE:55:9E:11:C8:EA:09:10:06:0D:D4:8D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9d6d79-eeb1-492a-b602-58eefcd652d8/1/FkThypMSunm-VZ4RyOoJEAYN1I0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.144.36.0/22
193.134.216.0/21
193.247.203.0/24
IPv6:
2a07:3e00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203130
Signature Algorithm: sha256WithRSAEncryption
5b:56:ef:d1:85:62:91:8e:b9:be:0d:65:06:c8:32:fe:9d:a0:
2b:4e:63:fa:a9:18:83:a5:b2:e3:a9:83:f5:a3:33:8a:3a:ff:
d2:95:94:2e:98:d4:8b:b3:b3:0a:24:7a:c9:86:50:52:7c:4d:
82:1e:3e:fb:a0:b2:33:4a:9b:71:9c:a7:06:28:b7:1d:e9:1c:
c1:90:91:e4:d2:03:93:09:70:e7:7a:51:bf:46:9b:3c:29:bc:
c3:63:5b:c7:81:12:86:36:b2:9d:30:f0:34:e5:14:99:4c:0f:
bb:92:b5:f5:9b:75:1b:b5:1d:a9:a1:b7:cd:1d:53:f5:bc:a1:
a4:43:d3:bb:af:67:e1:70:5a:1f:33:b3:39:5d:ef:4a:28:1f:
1f:f7:93:64:91:b3:ba:8a:2d:30:70:d9:ff:f6:29:09:d8:6b:
05:21:e4:66:47:9e:75:28:b9:12:ea:7e:00:70:6c:32:1f:72:
a6:e9:ff:4d:99:47:87:8e:f1:3b:a7:20:d1:40:d0:59:e2:c6:
32:6b:9e:60:cd:09:15:7c:58:2d:4b:14:1d:22:1e:59:5b:25:
39:58:9f:4b:59:50:36:ab:9a:a6:5a:f7:16:9a:e0:f0:be:12:
bb:fe:8a:3b:bd:7b:d1:af:c7:b5:8c:f7:4e:a8:ad:eb:34:d9:
4d:31:70:26
-----BEGIN CERTIFICATE-----
MIIFrzCCBJegAwIBAgISAZQntb4+78VTd8ugEho70/BAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTU1MDA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNjQ0ZTFjYTkzMTJiYTc5YmU1NTllMTFjOGVhMDkxMDA2MGRkNDhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1M7XSBTikKAeC+1S2K2nejyLxu3H
+J7yClwr5lIq3HEva0htIi4gQ6HX702sinIx6OAh5QrBbB6Psv7GsWAg838gU91u
8C2RHjZ5Nhz+v3+Cji+ZJzcWXElPW72M5WdeqFlPPEMOMkYJiqKtUoNjXsn3JmSX
bYDb7CcgKsTpmvnP50vXSepWP32btg5z4U06Dm/BNGUuZfvcX177qwnxtcQDiMIC
Nga3SSMBrCRLX6pp43aVdlKoILhuJSgG8DcHX4yvBSJWtjgzEitxWlImmY8GCnA5
9yFexVJCKvqxTNLACrWdK0R3znzS0z3u3R3h/O2gs6lcaVPVk9sxtyOIXQIDAQAB
o4ICuzCCArcwHQYDVR0OBBYEFBZE4cqTErp5vlWeEcjqCRAGDdSNMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2FiLzlkNmQ3
OS1lZWIxLTQ5MmEtYjYwMi01OGVlZmNkNjUyZDgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWIvOWQ2ZDc5
LWVlYjEtNDkyYS1iNjAyLTU4ZWVmY2Q2NTJkOC8xL0ZrVGh5cE1TdW5tLVZaNFJ5
T29KRUFZTjFJMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF
BwEHAQH/BCswKTAYBAIAATASAwQCuZAkAwQDwYbYAwQAwffLMA0EAgACMAcDBQMq
Bz4AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwMZejANBgkqhkiG9w0BAQsFAAOC
AQEAW1bv0YVikY65vg1lBsgy/p2gK05j+qkYg6Wy46mD9aMzijr/0pWULpjUi7Oz
CiR6yYZQUnxNgh4++6CyM0qbcZynBii3HekcwZCR5NIDkwlw53pRv0abPCm8w2Nb
x4EShjaynTDwNOUUmUwPu5K19Zt1G7UdqaG3zR1T9byhpEPTu69n4XBaHzOzOV3v
SigfH/eTZJGzuootMHDZ//YpCdhrBSHkZkeedSi5Eup+AHBsMh9ypun/TZlHh47x
O6cg0UDQWeLGMmueYM0JFXxYLUsUHSIeWVslOVifS1lQNquaplr3Fprg8L4Su/6K
O7170a/HtYz3Tqit6zTZTTFwJg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:56:22 2025 by rpki-client