
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/V2cFtVe4IwhralMjJL-7o2mVyxw.cer
File: V2cFtVe4IwhralMjJL-7o2mVyxw.cer (raw, json)
Hash identifier: 55siyY28zACLYUIECMVT2knQTGprzqWsopjizrZxiaQ=
Subject key identifier: 57:67:05:B5:57:B8:23:08:6B:6A:53:23:24:BF:BB:A3:69:95:CB:1C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D9C064827137B8FC24F3E91F0671CF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:52 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 214098
IP: 185.56.161.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:c0:64:82:71:37:b8:fc:24:f3:e9:1f:06:71:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=576705b557b823086b6a532324bfbba36995cb1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:41:81:42:99:0c:da:1f:b0:f5:31:61:ab:4a:
a6:ed:69:80:d6:e1:15:0e:ea:e1:77:94:94:c8:88:
52:62:2b:b0:04:03:79:28:56:22:12:58:c2:a7:54:
1e:1c:df:ed:d1:bf:6e:f5:d6:1c:69:a4:cf:86:8a:
e0:8d:63:3a:d1:b6:d1:e4:9a:c8:74:e3:c6:1b:57:
a0:75:9b:83:43:dc:fe:fd:83:3e:0c:0f:f4:c0:79:
d7:2a:99:ae:b9:cb:47:53:7a:29:5d:48:21:1f:76:
8b:bb:b4:77:4a:66:6c:ff:07:f7:9b:97:93:38:7e:
97:9a:c6:8f:1f:9f:f5:5b:a5:32:57:ca:76:5d:71:
00:00:49:a9:40:d1:f9:fa:34:5d:f2:00:6a:2b:a6:
ea:4b:a1:40:07:ef:0a:63:43:ed:51:df:e6:44:1a:
0d:ea:bb:30:15:a1:c3:04:0f:0f:d2:ea:2d:3b:25:
eb:f2:58:6e:c4:b9:a2:47:10:bb:52:d9:f1:df:18:
ba:ca:a8:e1:2d:4a:ec:34:da:5b:23:0b:67:21:ce:
52:f6:00:a4:dd:92:87:f8:18:87:c9:35:e1:9b:e4:
fe:a5:68:5c:8e:84:e7:8f:d2:20:c8:21:65:8c:1a:
d9:0b:07:e7:ef:f3:a1:3f:49:f0:0c:71:39:ce:5a:
c9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:67:05:B5:57:B8:23:08:6B:6A:53:23:24:BF:BB:A3:69:95:CB:1C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/7d7e1d-33c0-4342-b259-a7bf3bf902d8/1/V2cFtVe4IwhralMjJL-7o2mVyxw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.56.161.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214098
Signature Algorithm: sha256WithRSAEncryption
69:b7:98:b5:6d:dc:ff:82:16:79:6f:f1:b9:95:f7:b1:71:81:
b0:56:c9:4e:a3:1c:28:39:f1:f2:c9:c9:14:c2:d2:53:c2:fd:
64:09:c1:81:45:fc:ec:16:f0:0b:5f:5d:ed:0b:ef:83:e1:66:
8f:3f:cd:59:9e:b8:80:68:7b:c3:43:be:33:02:53:c1:cf:9f:
71:b0:c2:6b:87:92:52:07:3b:41:42:3b:35:50:d4:2f:cd:a1:
2b:42:3c:05:35:cd:bb:07:f7:61:0e:7e:39:19:c5:d9:ce:eb:
9f:46:e2:cd:63:2c:3a:2f:a8:c3:1b:8d:0e:d0:d1:42:ff:91:
a9:fd:2a:c1:79:ad:54:5a:77:84:03:b3:3f:47:da:a5:a5:36:
d9:c4:43:a1:28:bf:6d:5a:80:d0:09:03:ad:d3:ef:e9:af:d9:
38:27:4d:92:32:c3:b0:49:37:e3:4d:60:3e:31:09:47:60:05:
f4:28:26:51:48:41:37:59:33:ae:87:9b:41:8f:0a:f6:66:b9:
58:b8:a2:ff:7f:a3:10:83:22:85:a9:b3:fa:5f:62:3c:86:e2:
a3:d4:b1:c7:77:82:e7:50:97:c6:fc:17:9c:71:c4:59:98:ca:
97:12:2f:8d:a5:fe:b6:a6:51:31:5d:d1:a6:31:2c:b6:ef:40:
6c:13:8b:f4
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZQm2cBkgnE3uPwk8+kfBnHPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTE0OTUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NzY3MDViNTU3YjgyMzA4NmI2YTUzMjMyNGJmYmJhMzY5OTVjYjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4kGBQpkM2h+w9TFhq0qm7WmA1uEV
Durhd5SUyIhSYiuwBAN5KFYiEljCp1QeHN/t0b9u9dYcaaTPhorgjWM60bbR5JrI
dOPGG1egdZuDQ9z+/YM+DA/0wHnXKpmuuctHU3opXUghH3aLu7R3SmZs/wf3m5eT
OH6XmsaPH5/1W6UyV8p2XXEAAEmpQNH5+jRd8gBqK6bqS6FAB+8KY0PtUd/mRBoN
6rswFaHDBA8P0uotOyXr8lhuxLmiRxC7Utnx3xi6yqjhLUrsNNpbIwtnIc5S9gCk
3ZKH+BiHyTXhm+T+pWhcjoTnj9IgyCFljBrZCwfn7/OhP0nwDHE5zlrJIQIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFFdnBbVXuCMIa2pTIyS/u6NplcscMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NkLzdkN2Ux
ZC0zM2MwLTQzNDItYjI1OS1hN2JmM2JmOTAyZDgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2QvN2Q3ZTFk
LTMzYzAtNDM0Mi1iMjU5LWE3YmYzYmY5MDJkOC8xL1YyY0Z0VmU0SXdocmFsTWpK
TC03bzJtVnl4dy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAuTihMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwNEUjANBgkqhkiG9w0BAQsFAAOCAQEAabeYtW3c/4IWeW/xuZX3sXGBsFbJTqMc
KDnx8snJFMLSU8L9ZAnBgUX87BbwC19d7Qvvg+Fmjz/NWZ64gGh7w0O+MwJTwc+f
cbDCa4eSUgc7QUI7NVDUL82hK0I8BTXNuwf3YQ5+ORnF2c7rn0bizWMsOi+owxuN
DtDRQv+Rqf0qwXmtVFp3hAOzP0fapaU22cRDoSi/bVqA0AkDrdPv6a/ZOCdNkjLD
sEk3401gPjEJR2AF9CgmUUhBN1kzroebQY8K9ma5WLii/3+jEIMihamz+l9iPIbi
o9Sxx3eC51CXxvwXnHHEWZjKlxIvjaX+tqZRMV3RpjEstu9AbBOL9A==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:09:08 2025 by rpki-client