Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Jvl3d56Qg2bdJGDjpveOoAAi2EU.cer
File: Jvl3d56Qg2bdJGDjpveOoAAi2EU.cer (raw, json)
Hash identifier: TsZShHF4JuSH68h9zoC4GfqVoCsGFXGO+WjvEjeQvt4=
Subject key identifier: 26:F9:77:77:9E:90:83:66:DD:24:60:E3:A6:F7:8E:A0:00:22:D8:45
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942067FF0FD901F65B2AB0F537C67D6AF7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/74/80e3a3-211e-417d-83df-fac1fef4d0f7/1/Jvl3d56Qg2bdJGDjpveOoAAi2EU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/74/80e3a3-211e-417d-83df-fac1fef4d0f7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:47:53 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.163.80.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:ff:0f:d9:01:f6:5b:2a:b0:f5:37:c6:7d:6a:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=26f977779e908366dd2460e3a6f78ea00022d845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:97:aa:d9:f9:3e:93:c7:a4:aa:6c:6c:79:28:
09:48:d5:91:eb:65:56:f0:df:99:ff:6d:22:ea:e9:
f5:f0:24:da:89:8d:45:bc:dd:21:1a:6d:a3:a0:3c:
73:27:b4:90:e0:70:df:59:86:d4:83:e0:ea:11:7b:
04:47:c2:70:6f:82:db:87:94:31:07:66:1b:ce:55:
f0:27:13:27:54:b0:b0:58:bc:6c:e8:69:4d:31:9b:
83:8d:87:2c:3d:ef:64:d4:00:bd:3c:bc:1a:90:e3:
99:9b:e3:ce:29:54:11:cb:39:d5:13:a4:d1:a0:0c:
18:b7:93:17:4a:f9:36:00:50:ab:18:66:54:2a:6e:
10:ab:c1:43:e1:3f:1f:96:79:9d:a4:04:14:12:84:
28:ca:00:7d:27:e1:6c:d0:d5:c1:a3:f8:5d:90:7b:
05:43:99:d5:9e:d3:69:d4:78:88:e4:bd:a6:e2:c4:
28:fa:fc:c9:1b:b4:2e:d8:90:c8:25:46:58:71:57:
9a:13:7a:85:9a:a9:53:eb:ec:6b:17:d5:ae:e0:8d:
38:e0:5b:01:44:17:0a:ea:eb:12:41:fe:a5:d5:51:
73:6b:f3:f5:e7:d3:ad:f4:5f:60:fd:cc:99:b6:82:
88:2e:4f:6e:e0:89:54:d8:89:94:a1:c5:41:8b:72:
0d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:F9:77:77:9E:90:83:66:DD:24:60:E3:A6:F7:8E:A0:00:22:D8:45
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/80e3a3-211e-417d-83df-fac1fef4d0f7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/80e3a3-211e-417d-83df-fac1fef4d0f7/1/Jvl3d56Qg2bdJGDjpveOoAAi2EU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.80.0/22
Signature Algorithm: sha256WithRSAEncryption
77:fe:2a:b4:17:69:c8:bc:f7:e8:4f:7e:ed:16:69:27:b9:e0:
0c:04:4a:56:ec:57:5b:38:d2:20:02:35:62:4c:ec:3e:d0:6e:
59:02:d2:a5:dc:cf:d0:34:f9:fb:ad:ff:7a:27:b4:59:c2:06:
ad:5e:83:4d:bb:18:74:e5:5b:bf:77:9f:a5:94:b8:16:16:cb:
1f:cf:0c:bc:cb:39:3b:c3:c7:8e:6b:e1:4c:5f:f9:06:11:7c:
15:0e:ea:d3:f5:0d:66:34:f3:29:07:aa:10:5c:12:1a:64:03:
fe:0e:29:c1:38:0c:a0:24:3a:eb:a9:41:3d:3f:fb:9d:90:cd:
65:eb:1f:f6:38:23:f6:83:1c:3b:f1:45:48:58:23:84:d8:57:
bf:29:61:03:d4:e3:04:09:d5:87:e7:3d:f9:da:fd:36:88:7b:
64:15:cf:9f:0b:c1:be:b1:f3:c7:a4:ff:10:10:f4:fe:9f:60:
7e:64:fb:f4:05:18:45:7d:42:d6:91:fb:fc:66:cd:8f:a7:0f:
5d:98:99:d4:f8:6c:d6:97:64:de:2f:a1:25:9b:70:57:17:f1:
28:af:61:1b:3a:18:0d:48:1a:e4:a3:6b:31:c1:84:d9:7c:b3:
a1:d9:6e:c1:bf:66:ff:23:5b:2a:1d:eb:17:2c:fd:b2:09:4f:
5d:9f:95:2e
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQgZ/8P2QH2Wyqw9TfGfWr3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDU0NzUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNmY5Nzc3NzllOTA4MzY2ZGQyNDYwZTNhNmY3OGVhMDAwMjJkODQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0peq2fk+k8ekqmxseSgJSNWR62VW
8N+Z/20i6un18CTaiY1FvN0hGm2joDxzJ7SQ4HDfWYbUg+DqEXsER8Jwb4Lbh5Qx
B2YbzlXwJxMnVLCwWLxs6GlNMZuDjYcsPe9k1AC9PLwakOOZm+POKVQRyznVE6TR
oAwYt5MXSvk2AFCrGGZUKm4Qq8FD4T8flnmdpAQUEoQoygB9J+Fs0NXBo/hdkHsF
Q5nVntNp1HiI5L2m4sQo+vzJG7Qu2JDIJUZYcVeaE3qFmqlT6+xrF9Wu4I044FsB
RBcK6usSQf6l1VFza/P159Ot9F9g/cyZtoKILk9u4IlU2ImUocVBi3IN/wIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFCb5d3eekINm3SRg46b3jqAAIthFMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc0LzgwZTNh
My0yMTFlLTQxN2QtODNkZi1mYWMxZmVmNGQwZjcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzQvODBlM2Ez
LTIxMWUtNDE3ZC04M2RmLWZhYzFmZWY0ZDBmNy8xL0p2bDNkNTZRZzJiZEpHRGpw
dmVPb0FBaTJFVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCwaNQMA0GCSqGSIb3DQEBCwUAA4IBAQB3/iq0
F2nIvPfoT37tFmknueAMBEpW7FdbONIgAjViTOw+0G5ZAtKl3M/QNPn7rf96J7RZ
wgatXoNNuxh05Vu/d5+llLgWFssfzwy8yzk7w8eOa+FMX/kGEXwVDurT9Q1mNPMp
B6oQXBIaZAP+DinBOAygJDrrqUE9P/udkM1l6x/2OCP2gxw78UVIWCOE2Fe/KWED
1OMECdWH5z352v02iHtkFc+fC8G+sfPHpP8QEPT+n2B+ZPv0BRhFfULWkfv8Zs2P
pw9dmJnU+GzWl2TeL6Elm3BXF/Eor2EbOhgNSBrko2sxwYTZfLOh2W7Bv2b/I1sq
HesXLP2yCU9dn5Uu
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:36:34 2025 by rpki-client