Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NHK1U_DLCxOQDUwuDmx3msoD47E.cer
File: NHK1U_DLCxOQDUwuDmx3msoD47E.cer (raw, json)
Hash identifier: IJ4QZeNf/QJ/k7B9BxIT0nTUOGpmJhblVFTo/JEErVg=
Subject key identifier: 34:72:B5:53:F0:CB:0B:13:90:0D:4C:2E:0E:6C:77:9A:CA:03:E3:B1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942444B2D8F9F050CC94D2678AEBF10F27
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:47:49 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2a03:e140::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:b2:d8:f9:f0:50:cc:94:d2:67:8a:eb:f1:0f:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3472b553f0cb0b13900d4c2e0e6c779aca03e3b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0b:1c:b6:57:ad:d3:a8:3b:a6:2e:4a:2d:f0:
11:41:6b:a6:55:6f:7f:4d:37:19:7b:28:7a:19:0a:
a5:04:81:dd:3f:56:70:61:cc:a6:f6:a0:21:04:eb:
5c:fb:15:90:ed:bd:09:ab:3c:78:8b:22:0d:07:2d:
d0:13:8f:ae:9f:90:3b:c6:6d:c4:cd:61:89:fc:18:
c2:29:14:e9:b8:9c:94:de:da:3b:cb:df:11:bd:07:
f4:2f:ba:c1:0b:54:d5:86:2a:f6:85:34:a7:64:c6:
2f:3c:d4:bd:4b:dc:bf:82:de:d1:93:27:ef:91:bb:
de:83:33:53:99:53:c3:08:d6:54:20:63:ca:68:51:
7f:58:6e:7e:a4:8e:8c:a7:c0:7e:a2:ca:a6:34:3a:
76:4c:a5:ca:35:d6:02:8b:dc:49:4f:d9:38:82:17:
39:6c:70:ce:7f:ed:4e:1d:25:33:a2:41:8d:4c:c1:
94:aa:f6:83:73:c8:5a:0e:76:2b:a6:b6:bc:c9:2c:
7e:d4:87:9b:b7:4b:6b:78:0a:f8:14:95:7c:5f:46:
3f:01:fc:14:03:7f:74:d1:75:f7:62:e8:2b:af:ab:
40:08:12:72:e5:db:b9:7b:3d:b1:69:5d:89:fa:5c:
0f:80:56:12:85:4c:bd:58:86:ed:04:36:f6:14:86:
9b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:72:B5:53:F0:CB:0B:13:90:0D:4C:2E:0E:6C:77:9A:CA:03:E3:B1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/05ed2f-c4f7-4417-a4fb-0d20525edc74/1/NHK1U_DLCxOQDUwuDmx3msoD47E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:e140::/32
Signature Algorithm: sha256WithRSAEncryption
84:bf:1a:23:1e:a5:78:17:60:e3:d4:a0:4f:14:85:0b:17:26:
de:d9:39:27:fa:f5:3e:ff:73:a1:22:70:c6:9c:88:45:6d:78:
fb:27:40:d9:3c:77:ce:31:bb:e9:03:6a:18:f5:c0:ce:43:78:
d2:52:b9:73:97:e3:2d:bb:bd:5f:f9:6d:32:23:c7:86:79:cc:
fb:62:a3:5b:aa:6d:f2:c4:9c:97:7a:b8:df:6a:42:b1:dd:bc:
6b:e8:3c:03:3b:02:e9:8f:6c:5c:78:e4:73:de:f1:b5:91:64:
42:4c:3e:cb:1d:00:e4:ae:0f:00:c4:2e:42:22:40:52:ee:70:
67:aa:7e:e5:3d:bb:37:df:94:a7:e0:f4:dc:fe:e6:8f:7c:94:
51:5c:31:0c:85:62:b3:48:0a:9f:0a:38:08:92:44:0e:86:fc:
a5:71:13:55:de:d7:a5:12:9b:31:7e:98:cc:19:a4:2b:99:d3:
9a:af:ed:c9:8b:e5:89:76:f6:63:35:6e:7d:fd:53:c3:3b:71:
8e:8a:06:fa:cb:cc:ef:71:4c:86:a8:cc:24:82:0b:00:e1:ea:
a8:49:80:9d:e3:31:b3:2a:a3:d2:f5:1c:98:00:fe:4d:e3:03:
dd:59:83:0e:ea:f2:b2:14:5a:e0:22:9b:34:5d:1c:35:5a:9b:
72:88:c8:bf
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgISAZQkRLLY+fBQzJTSZ4rr8Q8nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMjM0NzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNDcyYjU1M2YwY2IwYjEzOTAwZDRjMmUwZTZjNzc5YWNhMDNlM2IxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygsctlet06g7pi5KLfARQWumVW9/
TTcZeyh6GQqlBIHdP1ZwYcym9qAhBOtc+xWQ7b0Jqzx4iyINBy3QE4+un5A7xm3E
zWGJ/BjCKRTpuJyU3to7y98RvQf0L7rBC1TVhir2hTSnZMYvPNS9S9y/gt7Rkyfv
kbvegzNTmVPDCNZUIGPKaFF/WG5+pI6Mp8B+osqmNDp2TKXKNdYCi9xJT9k4ghc5
bHDOf+1OHSUzokGNTMGUqvaDc8haDnYrpra8ySx+1Iebt0treAr4FJV8X0Y/AfwU
A3900XX3Yugrr6tACBJy5du5ez2xaV2J+lwPgFYShUy9WIbtBDb2FIabuwIDAQAB
o4IChTCCAoEwHQYDVR0OBBYEFDRytVPwywsTkA1MLg5sd5rKA+OxMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRmLzA1ZWQy
Zi1jNGY3LTQ0MTctYTRmYi0wZDIwNTI1ZWRjNzQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGYvMDVlZDJm
LWM0ZjctNDQxNy1hNGZiLTBkMjA1MjVlZGM3NC8xL05ISzFVX0RMQ3hPUURVd3VE
bXgzbXNvRDQ3RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAKgPhQDANBgkqhkiG9w0BAQsFAAOCAQEAhL8a
Ix6leBdg49SgTxSFCxcm3tk5J/r1Pv9zoSJwxpyIRW14+ydA2Tx3zjG76QNqGPXA
zkN40lK5c5fjLbu9X/ltMiPHhnnM+2KjW6pt8sScl3q432pCsd28a+g8AzsC6Y9s
XHjkc97xtZFkQkw+yx0A5K4PAMQuQiJAUu5wZ6p+5T27N9+Up+D03P7mj3yUUVwx
DIVis0gKnwo4CJJEDob8pXETVd7XpRKbMX6YzBmkK5nTmq/tyYvliXb2YzVuff1T
wztxjooG+svM73FMhqjMJIILAOHqqEmAneMxsyqj0vUcmAD+TeMD3VmDDuryshRa
4CKbNF0cNVqbcojIvw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:31:49 2025 by rpki-client