Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JcUmh6X_Fh0u2ryfjjpIdsStjaI.cer
File: JcUmh6X_Fh0u2ryfjjpIdsStjaI.cer (raw, json)
Hash identifier: e8POEWhkiY3z2jRTjXAfixM7CzgJ1MH+tnCNGSiivbI=
Subject key identifier: 25:C5:26:87:A5:FF:16:1D:2E:DA:BC:9F:8E:3A:48:76:C4:AD:8D:A2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C14984DA4C9C0B33E7883B0E73B28
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:47:41 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 60809
IP: 91.205.20.0/22
IP: 91.206.180.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:14:98:4d:a4:c9:c0:b3:3e:78:83:b0:e7:3b:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=25c52687a5ff161d2edabc9f8e3a4876c4ad8da2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:5b:b0:86:fc:ee:57:44:26:f1:a1:e5:21:ff:
df:ec:dc:fa:9f:e4:18:49:55:c2:b2:53:a4:64:36:
9b:f0:5e:69:e2:86:b8:2d:39:27:16:de:8c:96:0a:
92:1f:b7:8c:48:86:22:6f:ee:27:8d:e8:d3:83:3f:
c4:a8:c9:fb:da:fe:ec:9f:14:8c:dd:8f:46:aa:b4:
51:fe:06:e2:af:15:2b:48:7b:4a:dc:2e:f4:8d:5e:
34:ee:16:88:98:b4:f2:28:95:76:1c:f2:b2:8b:33:
d8:f5:65:c0:06:f0:b3:25:63:8c:dc:4e:b4:4c:7e:
a7:63:44:79:20:ca:ef:bf:40:7f:f7:94:ef:20:43:
68:0e:ce:db:f9:f9:a5:b8:9e:b6:7e:62:d8:80:9b:
ff:f3:e9:02:b4:47:44:72:c4:0b:2c:19:a9:f4:c9:
78:f4:c0:7c:32:f7:ff:c0:fc:b8:cd:0e:b8:f4:ba:
70:dd:6e:97:6c:32:c7:91:c3:52:b7:b6:9a:83:46:
f0:b9:c3:93:73:3a:56:57:93:c4:f8:6d:8f:3c:37:
72:a6:72:2d:ca:80:15:05:0d:54:e3:22:4f:c1:8b:
d3:3e:95:de:68:da:c5:fa:82:79:8c:7f:b1:7a:60:
03:86:41:70:3b:2f:2b:fc:03:be:ab:b3:ff:78:78:
d0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C5:26:87:A5:FF:16:1D:2E:DA:BC:9F:8E:3A:48:76:C4:AD:8D:A2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.205.20.0/22
91.206.180.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60809
Signature Algorithm: sha256WithRSAEncryption
33:4e:c8:2c:84:57:6b:e1:90:d1:b8:ce:23:61:1e:a8:ac:22:
70:59:55:45:68:38:12:e9:ea:17:10:97:5f:c0:84:77:1a:23:
3f:59:3c:bd:26:ed:c4:50:0f:64:c1:c0:e6:6a:0a:39:d0:22:
85:f6:57:2a:8a:fc:62:7a:a6:c8:ee:67:ee:dd:09:31:e1:27:
ad:71:9e:f1:83:20:64:f6:0f:43:71:ef:5a:b7:db:97:5d:9c:
1f:33:e9:63:b5:03:c7:dc:ec:27:af:16:9b:ca:d8:3a:3d:4f:
af:7d:14:f4:ea:0a:0f:30:ab:21:b2:19:3f:3c:91:3b:16:ad:
d6:47:57:ca:c9:33:81:9d:58:5a:24:fb:d1:1d:a8:4d:54:e8:
e6:fe:65:66:0b:b3:57:04:02:05:48:8c:4f:9a:1d:5d:0e:1d:
65:5c:7a:d3:62:7e:69:16:0a:ac:e2:2f:a5:e7:0f:65:d0:ba:
80:f8:68:1d:3c:1b:af:ee:c5:40:51:50:80:06:ff:34:b4:c5:
fe:51:20:e3:81:f1:96:69:2b:db:ab:4d:13:64:1b:a8:3b:31:
73:43:da:5c:fa:07:8b:76:1d:4e:f8:d1:f0:a0:14:34:05:8d:
d9:76:55:51:0b:63:05:97:be:7d:54:88:33:c1:e1:3d:f2:3c:
24:07:b5:e5
-----BEGIN CERTIFICATE-----
MIIFmjCCBIKgAwIBAgISAZQfjBSYTaTJwLM+eIOw5zsoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDE0NzQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNWM1MjY4N2E1ZmYxNjFkMmVkYWJjOWY4ZTNhNDg3NmM0YWQ4ZGEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1uwhvzuV0Qm8aHlIf/f7Nz6n+QY
SVXCslOkZDab8F5p4oa4LTknFt6MlgqSH7eMSIYib+4njejTgz/EqMn72v7snxSM
3Y9GqrRR/gbirxUrSHtK3C70jV407haImLTyKJV2HPKyizPY9WXABvCzJWOM3E60
TH6nY0R5IMrvv0B/95TvIENoDs7b+fmluJ62fmLYgJv/8+kCtEdEcsQLLBmp9Ml4
9MB8Mvf/wPy4zQ649Lpw3W6XbDLHkcNSt7aag0bwucOTczpWV5PE+G2PPDdypnIt
yoAVBQ1U4yJPwYvTPpXeaNrF+oJ5jH+xemADhkFwOy8r/AO+q7P/eHjQ8QIDAQAB
o4ICpjCCAqIwHQYDVR0OBBYEFCXFJoel/xYdLtq8n446SHbErY2iMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZjLzU5NjUw
Ni01YWM2LTQ5YjMtYmQ3MC03NWRhZTVkZGZlZDMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmMvNTk2NTA2
LTVhYzYtNDliMy1iZDcwLTc1ZGFlNWRkZmVkMy8xL0pjVW1oNlhfRmgwdTJyeWZq
anBJZHNTdGphSS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF
BwEHAQH/BBYwFDASBAIAATAMAwQCW80UAwQBW860MBoGCCsGAQUFBwEIAQH/BAsw
CaAHMAUCAwDtiTANBgkqhkiG9w0BAQsFAAOCAQEAM07ILIRXa+GQ0bjOI2EeqKwi
cFlVRWg4EunqFxCXX8CEdxojP1k8vSbtxFAPZMHA5moKOdAihfZXKor8YnqmyO5n
7t0JMeEnrXGe8YMgZPYPQ3HvWrfbl12cHzPpY7UDx9zsJ68Wm8rYOj1Pr30U9OoK
DzCrIbIZPzyROxat1kdXyskzgZ1YWiT70R2oTVTo5v5lZguzVwQCBUiMT5odXQ4d
ZVx602J+aRYKrOIvpecPZdC6gPhoHTwbr+7FQFFQgAb/NLTF/lEg44Hxlmkr26tN
E2QbqDsxc0PaXPoHi3YdTvjR8KAUNAWN2XZVUQtjBZe+fVSIM8HhPfI8JAe15Q==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:32:20 2025 by rpki-client