Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ts9hevNfNyTn2oYOv75OwTiuGAA.cer
File: Ts9hevNfNyTn2oYOv75OwTiuGAA.cer (raw, json)
Hash identifier: /zwxm9KS8Qd6j6A/XZlIi6578PrZAZ2zgWRi+ZXrEJI=
Subject key identifier: 4E:CF:61:7A:F3:5F:37:24:E7:DA:86:0E:BF:BE:4E:C1:38:AE:18:00
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA24D180A99692AAD1114020015450
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:47:54 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 35401
IP: 87.244.0.0/21
IP: 87.244.16.0/21
IP: 87.244.32.0/19
IP: 185.138.160.0/22
IP: 217.170.112.0/20
IP: 2a02:26e0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:24:d1:80:a9:96:92:aa:d1:11:40:20:01:54:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4ecf617af35f3724e7da860ebfbe4ec138ae1800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e3:74:86:3e:35:35:cb:44:95:fc:e4:e4:b4:
59:81:c9:f5:1d:36:f4:0c:9e:1a:d2:f9:ff:91:62:
1b:ea:3a:fe:1b:a3:53:ec:24:f0:d3:3c:b9:f9:22:
a8:82:2b:15:25:c0:a2:c9:3d:41:9f:da:6f:db:22:
a2:c2:2d:5b:35:a6:0e:26:ba:0f:7c:03:86:fd:68:
ef:42:03:d2:ef:16:62:95:5a:4a:fd:88:ff:fe:55:
e4:54:67:9a:2f:41:9d:86:e0:eb:17:d0:b8:9c:19:
41:95:6a:d8:d1:d7:5e:a5:bf:f8:dc:f5:3e:14:a2:
d5:39:16:94:62:5b:5f:51:3a:f1:f7:d0:b6:1c:11:
8f:c0:02:b3:9e:b9:a3:fe:fb:78:c6:9a:83:b8:6f:
27:a5:a5:73:9d:07:7f:37:99:85:91:6b:9e:aa:bd:
6b:e2:30:dc:85:b8:9a:79:d9:a9:e1:1c:e9:cc:be:
1c:ed:7d:68:c1:fb:f7:39:a7:2e:92:95:f4:99:cd:
48:f7:65:85:1b:6c:3c:e1:f5:d7:26:00:1d:fb:bb:
ab:e7:41:2d:de:6a:7f:5a:d7:63:72:ed:76:01:2b:
61:72:35:f0:45:fd:fc:ca:c1:a3:16:13:80:ec:1b:
75:31:24:89:ed:8e:fe:5c:c4:90:18:5b:ec:9c:23:
a6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:CF:61:7A:F3:5F:37:24:E7:DA:86:0E:BF:BE:4E:C1:38:AE:18:00
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.244.0.0/21
87.244.16.0/21
87.244.32.0/19
185.138.160.0/22
217.170.112.0/20
IPv6:
2a02:26e0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35401
Signature Algorithm: sha256WithRSAEncryption
a7:03:42:79:f2:d5:b8:54:cd:8c:ae:91:57:56:4b:50:b7:87:
22:92:95:cd:1c:49:ee:79:50:bc:77:ca:a1:64:68:53:a1:cc:
4b:bd:4e:96:7f:a5:c3:a3:b7:67:45:fb:14:b9:6d:aa:1a:7b:
2b:8f:f8:bf:3e:3e:d5:4e:2a:d2:7f:02:f5:0d:e9:1a:44:28:
82:3c:56:12:48:f5:97:59:c2:15:ef:37:d0:59:ab:d0:be:b3:
37:27:bb:c7:be:9d:82:b7:a5:33:3f:07:e6:1a:8d:53:93:01:
b1:30:b2:04:c5:70:43:c0:75:82:10:8c:09:01:a1:34:e4:bb:
66:2f:06:49:27:6c:ec:aa:22:a4:9a:16:b8:c3:80:16:34:aa:
b1:de:8f:10:25:d3:be:43:e9:e7:38:67:49:35:69:7c:b5:bc:
e8:46:21:a9:28:5e:ae:3f:5d:61:cd:5f:c7:59:8a:d8:a1:8e:
5e:5a:e7:f9:24:2a:9c:9f:dd:22:68:15:4a:af:e5:9c:92:d1:
8f:7a:9c:ae:3f:38:01:0d:cf:9f:d2:b1:6b:57:b9:30:8a:6f:
62:f1:2a:33:ce:4b:15:34:99:e4:d0:f0:b6:99:62:35:de:3d:
70:7c:4d:4e:81:98:12:a1:d3:6c:40:3d:d1:d0:01:c0:cd:18:
43:87:48:54
-----BEGIN CERTIFICATE-----
MIIFuzCCBKOgAwIBAgISAZQf+iTRgKmWkqrREUAgAVRQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDM0NzU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZWNmNjE3YWYzNWYzNzI0ZTdkYTg2MGViZmJlNGVjMTM4YWUxODAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+N0hj41NctElfzk5LRZgcn1HTb0
DJ4a0vn/kWIb6jr+G6NT7CTw0zy5+SKogisVJcCiyT1Bn9pv2yKiwi1bNaYOJroP
fAOG/WjvQgPS7xZilVpK/Yj//lXkVGeaL0GdhuDrF9C4nBlBlWrY0ddepb/43PU+
FKLVORaUYltfUTrx99C2HBGPwAKznrmj/vt4xpqDuG8npaVznQd/N5mFkWueqr1r
4jDchbiaedmp4RzpzL4c7X1owfv3OacukpX0mc1I92WFG2w84fXXJgAd+7ur50Et
3mp/Wtdjcu12ASthcjXwRf38ysGjFhOA7Bt1MSSJ7Y7+XMSQGFvsnCOmEQIDAQAB
o4ICxzCCAsMwHQYDVR0OBBYEFE7PYXrzXzck59qGDr++TsE4rhgAMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNmLzk3NWM1
ZS02YjA1LTRhNDctOWU5MS0xMzY5OTM2NWMzYzcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2YvOTc1YzVl
LTZiMDUtNGE0Ny05ZTkxLTEzNjk5MzY1YzNjNy8xL1RzOWhldk5mTnlUbjJvWU92
NzVPd1RpdUdBQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEYGCCsGAQUF
BwEHAQH/BDcwNTAkBAIAATAeAwQDV/QAAwQDV/QQAwQFV/QgAwQCuYqgAwQE2apw
MA0EAgACMAcDBQAqAibgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwCKSTANBgkq
hkiG9w0BAQsFAAOCAQEApwNCefLVuFTNjK6RV1ZLULeHIpKVzRxJ7nlQvHfKoWRo
U6HMS71Oln+lw6O3Z0X7FLltqhp7K4/4vz4+1U4q0n8C9Q3pGkQogjxWEkj1l1nC
Fe830Fmr0L6zNye7x76dgrelMz8H5hqNU5MBsTCyBMVwQ8B1ghCMCQGhNOS7Zi8G
SSds7KoipJoWuMOAFjSqsd6PECXTvkPp5zhnSTVpfLW86EYhqSherj9dYc1fx1mK
2KGOXlrn+SQqnJ/dImgVSq/lnJLRj3qcrj84AQ3Pn9Kxa1e5MIpvYvEqM85LFTSZ
5NDwtpliNd49cHxNToGYEqHTbEA90dABwM0YQ4dIVA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:51:33 2025 by rpki-client