Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NHjAigY6wtNKGxkeJDY4m77tXpc.cer
File: NHjAigY6wtNKGxkeJDY4m77tXpc.cer (raw, json)
Hash identifier: 83eqJxXTuGL0z93/HYLB0f3oauOcj0zfMo1exevR0DQ=
Subject key identifier: 34:78:C0:8A:06:3A:C2:D3:4A:1B:19:1E:24:36:38:9B:BE:ED:5E:97
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427479828D9141E780F03C120EC940A61
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:49:51 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 50774
IP: 193.108.142.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:98:28:d9:14:1e:78:0f:03:c1:20:ec:94:0a:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:49:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3478c08a063ac2d34a1b191e2436389bbeed5e97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d5:0c:b3:b5:16:8e:4a:6a:e4:4a:95:9b:20:
fd:38:78:2b:4c:9b:75:96:69:0b:de:3f:68:06:b3:
31:08:1f:a0:e2:27:c7:5e:a0:da:26:f1:15:8a:f4:
36:1e:90:ab:94:44:13:51:0d:d0:43:b3:95:8d:0e:
28:47:89:2f:c1:18:37:57:50:25:6d:76:6b:66:9c:
3e:81:b5:39:1b:04:94:6c:31:4d:3e:c8:8f:58:8f:
ad:7f:63:77:aa:03:60:9d:ce:f9:bc:b4:26:e0:0a:
28:98:d0:08:17:c9:28:25:41:7e:c0:c9:0d:36:4b:
b1:ce:3c:cc:e5:ae:61:5c:c1:e3:30:b1:26:99:13:
0d:cc:93:88:c0:89:bb:bb:22:26:43:27:b8:8b:d5:
07:35:b9:c7:5b:69:a6:6f:0d:4d:b6:ed:4f:b3:c3:
57:29:d2:07:fa:68:37:aa:db:35:67:45:24:69:e8:
72:86:81:fb:40:f5:e0:6d:0a:41:73:0c:46:9a:3c:
7b:13:d8:24:6d:06:41:33:17:f7:8f:1d:53:90:3b:
84:54:ef:87:69:33:f9:90:50:4b:ea:10:fb:a6:4d:
52:21:a8:ca:06:8d:41:45:7e:f7:6a:3f:af:67:ad:
42:23:bd:9c:43:6b:ef:f5:8d:d3:39:99:c7:12:79:
29:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:78:C0:8A:06:3A:C2:D3:4A:1B:19:1E:24:36:38:9B:BE:ED:5E:97
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.142.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50774
Signature Algorithm: sha256WithRSAEncryption
79:78:42:9b:63:a5:20:72:d2:9d:3e:e3:71:db:21:85:be:7d:
e1:89:fd:57:64:85:3f:24:43:9a:83:88:37:0d:51:70:88:4f:
23:47:11:64:13:f6:c2:bc:32:54:93:bc:98:9e:83:ac:03:7b:
87:99:ae:74:35:08:17:a0:2c:8f:e8:5e:fb:8a:84:e3:94:78:
0c:c6:08:0a:af:20:b3:89:fd:bd:82:6c:36:71:e6:48:52:d0:
f0:31:6a:ec:b2:6d:15:4b:67:9a:0d:cf:ef:ea:f5:b4:96:94:
db:73:64:92:8d:e0:44:d7:a9:7e:bc:54:a9:cd:90:c0:6a:10:
ee:90:a5:54:19:be:b3:dd:fc:c2:4a:33:bd:7f:5b:b4:89:b1:
49:03:80:c4:d3:f3:b1:44:c7:40:38:11:8c:01:65:97:d7:fe:
2e:49:28:b6:35:a8:c9:23:98:2b:8c:89:77:89:58:b2:e9:4a:
ab:2a:34:24:f1:16:73:b8:66:0f:c5:de:b4:de:c3:9b:df:99:
09:95:ae:79:0d:44:d8:ee:aa:68:3d:a8:87:a2:f7:17:b8:0b:
07:4a:56:33:92:7f:81:c5:c8:3d:bc:3c:bd:be:27:68:b4:f4:
8f:34:a5:91:71:5c:89:72:c2:8c:46:ee:c0:d1:f5:10:a7:9f:
83:ae:c0:f4
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZQnR5go2RQeeA8DwSDslAphMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTM0OTUxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNDc4YzA4YTA2M2FjMmQzNGExYjE5MWUyNDM2Mzg5YmJlZWQ1ZTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtUMs7UWjkpq5EqVmyD9OHgrTJt1
lmkL3j9oBrMxCB+g4ifHXqDaJvEVivQ2HpCrlEQTUQ3QQ7OVjQ4oR4kvwRg3V1Al
bXZrZpw+gbU5GwSUbDFNPsiPWI+tf2N3qgNgnc75vLQm4AoomNAIF8koJUF+wMkN
NkuxzjzM5a5hXMHjMLEmmRMNzJOIwIm7uyImQye4i9UHNbnHW2mmbw1Ntu1Ps8NX
KdIH+mg3qts1Z0UkaehyhoH7QPXgbQpBcwxGmjx7E9gkbQZBMxf3jx1TkDuEVO+H
aTP5kFBL6hD7pk1SIajKBo1BRX73aj+vZ61CI72cQ2vv9Y3TOZnHEnkplQIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFDR4wIoGOsLTShsZHiQ2OJu+7V6XMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEzLzFmMTBj
Mi0wMmUyLTQzOGEtOTBhMi05MTdjMzU3N2YzNGYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTMvMWYxMGMy
LTAyZTItNDM4YS05MGEyLTkxN2MzNTc3ZjM0Zi8xL05IakFpZ1k2d3ROS0d4a2VK
RFk0bTc3dFhwYy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQBwWyOMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwDGVjANBgkqhkiG9w0BAQsFAAOCAQEAeXhCm2OlIHLSnT7jcdshhb594Yn9V2SF
PyRDmoOINw1RcIhPI0cRZBP2wrwyVJO8mJ6DrAN7h5mudDUIF6Asj+he+4qE45R4
DMYICq8gs4n9vYJsNnHmSFLQ8DFq7LJtFUtnmg3P7+r1tJaU23Nkko3gRNepfrxU
qc2QwGoQ7pClVBm+s938wkozvX9btImxSQOAxNPzsUTHQDgRjAFll9f+LkkotjWo
ySOYK4yJd4lYsulKqyo0JPEWc7hmD8XetN7Dm9+ZCZWueQ1E2O6qaD2oh6L3F7gL
B0pWM5J/gcXIPbw8vb4naLT0jzSlkXFciXLCjEbuwNH1EKefg67A9A==
-----END CERTIFICATE-----
Generated at Thu Apr 24 18:45:40 2025 by rpki-client