Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/S2MqdYtZMJ6GEInWVTruBnprNT8.cer
File: S2MqdYtZMJ6GEInWVTruBnprNT8.cer (raw, json)
Hash identifier: ZVFGziLxguhZf7mlBAd8KoGLXVVWaLQEHDgXZbJ1In0=
Subject key identifier: 4B:63:2A:75:8B:59:30:9E:86:10:89:D6:55:3A:EE:06:7A:6B:35:3F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D5A5E888AE387018EA232C388C5DEB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:47:40 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 9150
IP: 185.67.64.0/22
IP: 212.83.192.0/18
IP: 213.206.192.0/18
IP: 213.207.64.0/18
IP: 2001:4018::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:a5:e8:88:ae:38:70:18:ea:23:2c:38:8c:5d:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b632a758b59309e861089d6553aee067a6b353f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cb:1e:9c:d2:3c:ec:1b:0a:f1:8f:31:a5:f6:
58:89:1a:ee:76:27:df:0c:b1:d6:e7:95:a0:26:c3:
ad:86:2c:42:0c:43:db:6d:c6:c2:c3:15:dd:83:e6:
a4:40:c0:64:05:8c:b5:6f:d0:5a:99:46:b9:c3:39:
eb:a1:a6:bc:3d:a0:2e:10:4a:21:53:35:61:4c:6e:
f8:2b:c9:2e:65:a7:79:d0:26:f0:b9:d0:50:ca:33:
22:18:17:79:9d:5e:cb:52:20:98:74:be:b0:b1:ef:
f5:f3:2d:58:93:6a:85:99:9f:c0:0d:6f:89:14:7b:
04:83:0c:a7:09:73:78:a2:cf:51:f9:51:80:33:42:
9a:1f:59:a1:82:51:79:fc:c2:16:86:70:27:a2:cc:
a1:30:bc:2a:ff:ba:1d:9a:22:0c:dd:c0:5e:a9:6c:
13:7a:63:1d:2e:05:81:c2:a9:e5:d3:91:14:48:8e:
26:8a:81:9b:be:d7:71:81:ae:1c:f2:48:1b:cc:85:
7f:e2:f9:5e:d3:12:75:91:b0:35:4c:53:01:5a:49:
05:43:32:bc:94:f6:14:b8:2a:ca:3b:ec:8a:32:91:
32:d6:9f:99:ae:70:cb:f9:d1:69:df:cf:74:f7:b0:
5a:a8:9a:be:78:78:06:d1:92:7e:7e:af:3e:fb:cd:
e4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:63:2A:75:8B:59:30:9E:86:10:89:D6:55:3A:EE:06:7A:6B:35:3F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/213a95-aacf-40a9-9753-94c0b0b76029/1/S2MqdYtZMJ6GEInWVTruBnprNT8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.67.64.0/22
212.83.192.0/18
213.206.192.0/18
213.207.64.0/18
IPv6:
2001:4018::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9150
Signature Algorithm: sha256WithRSAEncryption
56:3a:98:b0:e1:2e:d0:e4:1d:5a:83:6d:ed:55:96:f8:6b:9c:
aa:67:4e:61:d1:a3:39:2c:a5:5c:b7:ff:a5:f0:69:5c:f2:06:
90:48:4a:e3:a2:9e:bc:be:55:dd:b7:bc:c6:7a:2c:75:ae:b4:
43:dd:e2:64:cd:02:66:71:7c:31:79:5d:44:83:b2:09:8e:5a:
0e:c4:26:4b:5b:1f:a0:1a:e2:32:c3:45:0e:ad:3b:48:7e:2d:
7f:62:25:65:3d:72:cb:c2:25:36:bb:de:42:c8:79:69:21:82:
3b:21:c3:69:81:8c:d1:a5:c2:f7:b2:f0:2e:49:fa:3a:80:5d:
f2:4f:32:02:6e:af:2c:29:e0:ab:63:09:0e:e3:14:ce:8a:f1:
10:0e:cc:81:fe:61:3e:d2:b8:25:7b:20:42:ef:ca:45:3e:5d:
79:fb:2b:ac:1e:09:84:59:e6:4c:98:32:a9:83:cc:de:07:de:
84:dd:10:6d:74:78:cc:46:18:f4:cf:29:20:f6:0b:38:91:7e:
6e:d7:2e:5c:0a:5e:ac:60:f8:6e:18:c5:d3:1b:42:1b:74:4c:
35:64:a5:b0:2b:9a:3a:d7:ca:48:7e:18:cd:52:e5:02:35:b4:
07:4e:78:9b:e8:23:b2:a0:7f:16:51:0f:79:54:bd:b9:08:2c:
c0:8d:f1:d5
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgISAZQg1aXoiK44cBjqIyw4jF3rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDc0NzQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YjYzMmE3NThiNTkzMDllODYxMDg5ZDY1NTNhZWUwNjdhNmIzNTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMsenNI87BsK8Y8xpfZYiRrudiff
DLHW55WgJsOthixCDEPbbcbCwxXdg+akQMBkBYy1b9BamUa5wznroaa8PaAuEEoh
UzVhTG74K8kuZad50CbwudBQyjMiGBd5nV7LUiCYdL6wse/18y1Yk2qFmZ/ADW+J
FHsEgwynCXN4os9R+VGAM0KaH1mhglF5/MIWhnAnosyhMLwq/7odmiIM3cBeqWwT
emMdLgWBwqnl05EUSI4mioGbvtdxga4c8kgbzIV/4vle0xJ1kbA1TFMBWkkFQzK8
lPYUuCrKO+yKMpEy1p+ZrnDL+dFp389097BaqJq+eHgG0ZJ+fq8++83khwIDAQAB
o4ICwDCCArwwHQYDVR0OBBYEFEtjKnWLWTCehhCJ1lU67gZ6azU/MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRhLzIxM2E5
NS1hYWNmLTQwYTktOTc1My05NGMwYjBiNzYwMjkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEvMjEzYTk1
LWFhY2YtNDBhOS05NzUzLTk0YzBiMGI3NjAyOS8xL1MyTXFkWXRaTUo2R0VJbldW
VHJ1Qm5wck5UOC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF
BwEHAQH/BDEwLzAeBAIAATAYAwQCuUNAAwQG1FPAAwQG1c7AAwQG1c9AMA0EAgAC
MAcDBQMgAUAYMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAiO+MA0GCSqGSIb3DQEB
CwUAA4IBAQBWOpiw4S7Q5B1ag23tVZb4a5yqZ05h0aM5LKVct/+l8Glc8gaQSErj
op68vlXdt7zGeix1rrRD3eJkzQJmcXwxeV1Eg7IJjloOxCZLWx+gGuIyw0UOrTtI
fi1/YiVlPXLLwiU2u95CyHlpIYI7IcNpgYzRpcL3svAuSfo6gF3yTzICbq8sKeCr
YwkO4xTOivEQDsyB/mE+0rgleyBC78pFPl15+yusHgmEWeZMmDKpg8zeB96E3RBt
dHjMRhj0zykg9gs4kX5u1y5cCl6sYPhuGMXTG0IbdEw1ZKWwK5o618pIfhjNUuUC
NbQHTnib6COyoH8WUQ95VL25CCzAjfHV
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:35:17 2025 by rpki-client