Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PrRw_U1nQhL_yCqZNvP-JUvszmY.cer
File: PrRw_U1nQhL_yCqZNvP-JUvszmY.cer (raw, json)
Hash identifier: pHyOY5/14ZL0IW7Ss/a+xxCb2aUtoyj0DGEkkT2ZWQc=
Subject key identifier: 3E:B4:70:FD:4D:67:42:12:FF:C8:2A:99:36:F3:FE:25:4B:EC:CE:66
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FC027ED7B30B5F00138DFBE31B78F7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:48:48 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 48360
IP: 185.77.104.0/22
IP: 2a05:62c0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:02:7e:d7:b3:0b:5f:00:13:8d:fb:e3:1b:78:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3eb470fd4d674212ffc82a9936f3fe254becce66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:30:4b:e7:c6:d6:f9:4a:98:cd:32:df:21:26:
e0:9f:90:d4:36:4b:62:c8:f3:a5:35:1d:d9:f5:57:
37:c0:dd:f0:62:0a:24:0f:9c:28:72:8f:4c:12:03:
51:55:97:e3:32:8e:6b:f6:88:7e:98:85:95:72:c0:
99:57:02:03:42:93:b9:3b:51:b8:6a:9e:6f:06:7a:
84:9f:3e:ac:9f:8f:bf:18:cc:f9:c5:5f:f0:12:13:
2f:4d:82:ad:0d:ff:fa:eb:af:91:dd:38:b6:8c:ce:
b9:b4:3d:ad:10:2a:cb:d0:c6:21:35:87:5d:1e:07:
dd:b9:d5:e5:34:16:de:d8:d2:18:a5:ee:09:18:f0:
d0:94:93:cb:ef:9c:87:1a:06:11:f2:05:2b:8d:af:
20:69:bf:bf:de:ad:3f:58:4e:fb:c1:ce:14:69:8b:
03:74:f2:f8:05:ed:22:28:7d:42:8f:cf:e6:31:3e:
be:cb:82:f2:2b:71:fd:49:eb:ed:8a:7d:53:5b:9a:
bc:30:e5:a3:87:94:a1:c7:4f:20:d2:78:0f:d0:aa:
31:e1:36:01:e5:7d:dd:92:93:2e:12:78:95:48:93:
4a:87:6d:95:2e:cd:d2:f4:af:11:0e:7d:50:e1:c5:
29:fb:09:80:c1:fa:91:b2:0e:57:43:27:3e:4d:c6:
97:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B4:70:FD:4D:67:42:12:FF:C8:2A:99:36:F3:FE:25:4B:EC:CE:66
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/744e53-8de6-4671-9f80-5f015730d811/1/PrRw_U1nQhL_yCqZNvP-JUvszmY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.77.104.0/22
IPv6:
2a05:62c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48360
Signature Algorithm: sha256WithRSAEncryption
4b:77:ed:e9:e1:1f:f6:30:0c:c1:6a:77:58:af:72:3a:a1:d5:
c8:f0:ab:69:2f:99:ef:4d:99:7c:71:4a:5c:13:e9:93:94:37:
be:fd:72:31:23:ca:c2:19:10:36:51:08:5e:04:b0:c6:8a:12:
86:3c:70:2e:9f:8c:d5:73:c3:57:05:2d:cd:26:7f:47:19:f2:
9f:ff:7e:44:28:8d:cc:24:68:58:ba:07:96:05:fe:83:7f:a9:
b6:e6:6c:24:39:92:51:58:83:b9:f1:2d:d7:52:c2:1f:c2:60:
73:f3:67:82:ca:70:74:2a:cc:b0:be:c5:1c:d3:d2:25:a8:80:
0a:3c:56:ee:b3:20:a8:63:e5:5b:65:17:2a:48:b3:fc:50:59:
ab:13:64:5f:56:ad:4b:88:82:c3:a7:40:6f:3b:5b:d2:bb:f4:
ed:8f:9b:5a:5f:1b:ab:c5:45:41:fd:6e:67:cb:c2:2a:b3:9e:
90:9c:fc:0e:06:5d:5c:94:7c:18:0b:a6:be:70:95:c2:da:8b:
62:3d:5e:62:38:ed:91:f6:59:40:e2:36:82:6b:d8:74:85:ca:
88:14:b1:0e:91:7c:05:f2:66:f6:a2:a1:08:0f:38:4d:ed:81:
86:d2:7d:9b:6a:74:35:43:3f:73:4c:99:e6:0b:9e:72:6b:2b:
81:90:b7:0e
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQi/AJ+17MLXwATjfvjG3j3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTc0ODQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZWI0NzBmZDRkNjc0MjEyZmZjODJhOTkzNmYzZmUyNTRiZWNjZTY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDBL58bW+UqYzTLfISbgn5DUNkti
yPOlNR3Z9Vc3wN3wYgokD5woco9MEgNRVZfjMo5r9oh+mIWVcsCZVwIDQpO5O1G4
ap5vBnqEnz6sn4+/GMz5xV/wEhMvTYKtDf/666+R3Ti2jM65tD2tECrL0MYhNYdd
HgfdudXlNBbe2NIYpe4JGPDQlJPL75yHGgYR8gUrja8gab+/3q0/WE77wc4UaYsD
dPL4Be0iKH1Cj8/mMT6+y4LyK3H9Sevtin1TW5q8MOWjh5Shx08g0ngP0Kox4TYB
5X3dkpMuEniVSJNKh22VLs3S9K8RDn1Q4cUp+wmAwfqRsg5XQyc+TcaXvQIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFD60cP1NZ0IS/8gqmTbz/iVL7M5mMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE2Lzc0NGU1
My04ZGU2LTQ2NzEtOWY4MC01ZjAxNTczMGQ4MTEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTYvNzQ0ZTUz
LThkZTYtNDY3MS05ZjgwLTVmMDE1NzMwZDgxMS8xL1ByUndfVTFuUWhMX3lDcVpO
dlAtSlV2c3ptWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuU1oMA0EAgACMAcDBQMqBWLAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwC86DANBgkqhkiG9w0BAQsFAAOCAQEAS3ft6eEf9jAM
wWp3WK9yOqHVyPCraS+Z702ZfHFKXBPpk5Q3vv1yMSPKwhkQNlEIXgSwxooShjxw
Lp+M1XPDVwUtzSZ/Rxnyn/9+RCiNzCRoWLoHlgX+g3+ptuZsJDmSUViDufEt11LC
H8Jgc/NngspwdCrMsL7FHNPSJaiACjxW7rMgqGPlW2UXKkiz/FBZqxNkX1atS4iC
w6dAbztb0rv07Y+bWl8bq8VFQf1uZ8vCKrOekJz8DgZdXJR8GAumvnCVwtqLYj1e
YjjtkfZZQOI2gmvYdIXKiBSxDpF8BfJm9qKhCA84Te2BhtJ9m2p0NUM/c0yZ5gue
cmsrgZC3Dg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:23:25 2025 by rpki-client