Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer
File: N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer (raw, json)
Hash identifier: MathtcB+Ai+d1sX0odzMP5hVebFfUIiqaI04Gs2Orlc=
Subject key identifier: 37:63:C7:10:6A:5F:26:40:16:2E:79:80:58:3E:AB:5B:D8:00:8C:45
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B6396E51223F2AE6EB4BCF2E4738CC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:50:41 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.5.144.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:39:6e:51:22:3f:2a:e6:eb:4b:cf:2e:47:38:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:50:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3763c7106a5f2640162e7980583eab5bd8008c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:25:fb:57:a8:86:58:f5:c3:0c:f9:3d:d6:ef:
46:0d:8a:60:8a:f1:7b:8f:8c:bd:90:aa:00:b5:93:
c0:98:8e:f9:f9:11:83:1d:9c:8d:6c:2e:1f:9e:a0:
9d:20:62:a8:38:f1:b4:4e:1d:c3:7a:f3:ae:22:38:
54:8a:2f:5a:b6:64:df:16:b8:5a:1b:73:90:7f:17:
f5:d4:5a:da:49:3d:f1:86:4c:80:f0:72:72:21:9a:
57:88:31:d4:a5:cd:cb:33:6c:e1:28:87:c0:6d:34:
8e:19:47:62:4a:5c:dc:35:94:04:82:d9:de:63:6a:
42:80:67:6e:5d:08:3f:83:49:ee:74:d3:af:8e:d9:
d6:70:c3:f3:5f:84:dc:7a:95:1a:3b:bf:58:05:62:
8b:6a:cd:9d:d6:0b:4a:65:ba:b6:56:cb:d9:5a:5b:
55:5a:2c:16:c5:6f:f4:70:fa:7d:cb:5a:af:98:2b:
22:b7:75:e2:50:f6:b1:fc:b0:09:31:d1:d5:07:d8:
48:bc:cd:ef:0e:e6:93:be:28:6c:ca:32:01:f1:48:
d8:f5:3e:ba:a2:aa:c2:6e:27:94:b2:ae:80:5b:62:
d0:75:af:8d:b0:38:cc:09:78:c5:e4:00:3c:f6:0c:
f3:07:d8:5e:af:67:c0:66:95:df:c9:ce:8a:c5:46:
ef:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:63:C7:10:6A:5F:26:40:16:2E:79:80:58:3E:AB:5B:D8:00:8C:45
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.5.144.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:8d:08:6e:bb:4a:6d:e2:52:8e:7a:8a:8a:54:14:77:ca:01:
1c:76:fb:b6:79:6b:c4:9d:ca:db:34:fe:8f:17:42:5b:15:8a:
1c:6f:f0:94:f3:7f:92:a3:0c:12:ac:e6:f6:dd:30:bc:10:64:
b9:7a:3c:76:dc:fe:fb:1b:ae:fb:63:bd:cb:5b:cf:27:21:ae:
a4:e3:5a:b4:e4:79:a8:41:2f:9b:9d:e8:12:f2:f0:41:c1:76:
a7:e0:d9:0f:ec:d1:08:ba:99:14:ed:e3:cd:f1:ba:a8:36:34:
ff:1d:80:a9:c5:36:01:ee:01:bf:14:d2:4d:27:a1:5a:09:ff:
33:4e:f1:59:26:54:5e:b6:77:48:da:1a:13:b2:14:c0:05:aa:
13:6a:3f:e8:38:c4:ef:65:9c:e8:67:8e:f8:32:07:c0:bf:5e:
8e:d1:55:a5:6d:20:1c:5d:fd:f3:9b:ba:90:f6:d5:b3:54:12:
f1:20:fd:12:10:15:84:64:7c:60:dc:7d:32:66:5c:58:d0:67:
d8:2b:bf:2d:7e:01:b3:cd:c8:ec:fb:de:60:21:9b:0a:98:77:
fc:69:52:8a:2d:bf:1e:17:bc:f1:3e:ed:b6:ee:d5:b4:f9:42:
c1:f5:91:d7:ca:46:3d:13:21:41:cb:11:6c:4e:6e:0c:57:2d:
71:66:44:68
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQntjluUSI/KubrS88uRzjMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTU1MDQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNzYzYzcxMDZhNWYyNjQwMTYyZTc5ODA1ODNlYWI1YmQ4MDA4YzQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyX7V6iGWPXDDPk91u9GDYpgivF7
j4y9kKoAtZPAmI75+RGDHZyNbC4fnqCdIGKoOPG0Th3DevOuIjhUii9atmTfFrha
G3OQfxf11FraST3xhkyA8HJyIZpXiDHUpc3LM2zhKIfAbTSOGUdiSlzcNZQEgtne
Y2pCgGduXQg/g0nudNOvjtnWcMPzX4TcepUaO79YBWKLas2d1gtKZbq2VsvZWltV
WiwWxW/0cPp9y1qvmCsit3XiUPax/LAJMdHVB9hIvM3vDuaTvihsyjIB8UjY9T66
oqrCbieUsq6AW2LQda+NsDjMCXjF5AA89gzzB9her2fAZpXfyc6KxUbvswIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFDdjxxBqXyZAFi55gFg+q1vYAIxFMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzVhLzMzNTQx
YS1mOWFjLTQ3NWEtYjI5Ny04OGEwZTQ1MGExN2IvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWEvMzM1NDFh
LWY5YWMtNDc1YS1iMjk3LTg4YTBlNDUwYTE3Yi8xL04yUEhFR3BmSmtBV0xubUFX
RDZyVzlnQWpFVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwQWQMA0GCSqGSIb3DQEBCwUAA4IBAQBNjQhu
u0pt4lKOeoqKVBR3ygEcdvu2eWvEncrbNP6PF0JbFYocb/CU83+SowwSrOb23TC8
EGS5ejx23P77G677Y73LW88nIa6k41q05HmoQS+bnegS8vBBwXan4NkP7NEIupkU
7ePN8bqoNjT/HYCpxTYB7gG/FNJNJ6FaCf8zTvFZJlRetndI2hoTshTABaoTaj/o
OMTvZZzoZ474MgfAv16O0VWlbSAcXf3zm7qQ9tWzVBLxIP0SEBWEZHxg3H0yZlxY
0GfYK78tfgGzzcjs+95gIZsKmHf8aVKKLb8eF7zxPu227tW0+ULB9ZHXykY9EyFB
yxFsTm4MVy1xZkRo
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:42:27 2025 by rpki-client