Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZHi97PvTXT8Xw5BuYvk-srsRPl0.cer
File: ZHi97PvTXT8Xw5BuYvk-srsRPl0.cer (raw, json)
Hash identifier: szpuFw23OgFKXEFbyYh6Zbr4TOnIzhNwGZF6RnfXQn4=
Subject key identifier: 64:78:BD:EC:FB:D3:5D:3F:17:C3:90:6E:62:F9:3E:B2:BB:11:3E:5D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D7097EC0B7DA0E818278BCF6A07FD7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/76/383922-bca3-48e7-a4e8-6fe58c36364d/1/ZHi97PvTXT8Xw5BuYvk-srsRPl0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/76/383922-bca3-48e7-a4e8-6fe58c36364d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:48:02 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 80.68.157.0/24
IP: 2a12:c580::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:09:7e:c0:b7:da:0e:81:82:78:bc:f6:a0:7f:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6478bdecfbd35d3f17c3906e62f93eb2bb113e5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:52:ed:64:df:ef:77:72:bc:38:68:1f:91:e6:
24:2b:09:eb:dd:d2:37:1b:dd:4c:0c:17:d7:05:99:
98:03:50:1b:8d:75:30:47:81:5a:32:c5:45:30:ae:
6c:47:58:f0:10:7d:8d:44:aa:d7:28:c5:d8:f3:a5:
7b:ad:c4:87:9b:3e:06:26:39:e3:11:10:81:b1:29:
f8:b8:e0:04:54:aa:54:49:1e:10:bb:d4:bb:77:d7:
62:2d:22:52:08:fa:00:a1:b9:34:4e:41:04:09:52:
bf:fd:ef:cd:27:97:4c:c6:b0:16:d0:43:6a:da:93:
19:3d:09:21:09:a0:89:4d:93:f8:90:77:30:b2:50:
87:42:ad:d3:1a:34:43:82:ed:6c:3c:93:00:8c:82:
e0:2c:5c:83:4c:1c:5f:85:4d:37:16:71:9e:56:77:
9d:df:67:af:77:64:04:0d:c5:da:c0:4e:3b:d9:5c:
95:d8:fa:fe:80:93:b3:2c:cb:5c:63:a8:94:83:18:
d9:48:22:26:b1:ab:58:13:c5:b7:f0:c4:18:76:24:
ff:47:8a:40:3b:37:f6:13:e6:db:88:6c:19:12:e0:
3e:e5:7c:77:72:a2:33:e9:8e:e6:e4:8e:33:8b:99:
b3:37:fc:65:78:66:c1:85:1f:c4:03:63:4b:f7:63:
cc:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:78:BD:EC:FB:D3:5D:3F:17:C3:90:6E:62:F9:3E:B2:BB:11:3E:5D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/383922-bca3-48e7-a4e8-6fe58c36364d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/383922-bca3-48e7-a4e8-6fe58c36364d/1/ZHi97PvTXT8Xw5BuYvk-srsRPl0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.68.157.0/24
IPv6:
2a12:c580::/29
Signature Algorithm: sha256WithRSAEncryption
87:e1:b9:b7:df:e8:32:f2:13:d2:cb:84:03:4c:89:b9:ec:67:
49:e6:ba:f8:ea:ca:4b:8d:c6:de:f8:a4:eb:da:91:b8:4b:6d:
4f:ec:8d:59:c2:95:23:90:e1:b8:00:0b:d5:06:0c:c1:73:08:
87:9d:1b:27:e8:24:f2:04:c5:60:08:c9:15:ec:ad:22:86:c4:
b4:15:2c:37:50:a7:e8:ae:0c:04:0d:e3:95:93:7a:fa:2a:4c:
43:3f:be:3b:33:60:ad:69:e1:71:a2:83:4b:06:53:f8:4b:1f:
19:f6:65:49:aa:4e:1b:de:85:e2:57:a0:73:10:1a:ba:83:08:
09:a8:e5:2e:d0:50:e5:ef:da:e6:2a:c0:56:a8:3e:67:8b:0c:
e2:5c:95:4b:68:95:99:ec:3e:06:9f:a3:3d:95:b5:4f:b4:41:
4d:68:24:d8:2a:6c:89:c3:8d:34:f4:4e:a4:14:13:d9:40:ca:
c4:d7:13:d9:06:7e:3a:1d:4e:b9:48:65:57:ac:da:15:04:68:
68:e8:b6:6a:d3:5b:a3:d6:14:1e:c7:91:20:e3:58:6f:15:5b:
a8:64:f9:2b:dc:f8:34:11:ba:cb:a8:2f:b4:91:dd:eb:2a:96:
81:be:67:6b:68:9d:de:84:81:1f:d2:b3:50:8e:58:99:6f:d8:
fe:bb:49:95
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZQj1wl+wLfaDoGCeLz2oH/XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMjE0ODAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDc4YmRlY2ZiZDM1ZDNmMTdjMzkwNmU2MmY5M2ViMmJiMTEzZTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplLtZN/vd3K8OGgfkeYkKwnr3dI3
G91MDBfXBZmYA1AbjXUwR4FaMsVFMK5sR1jwEH2NRKrXKMXY86V7rcSHmz4GJjnj
ERCBsSn4uOAEVKpUSR4Qu9S7d9diLSJSCPoAobk0TkEECVK//e/NJ5dMxrAW0ENq
2pMZPQkhCaCJTZP4kHcwslCHQq3TGjRDgu1sPJMAjILgLFyDTBxfhU03FnGeVned
32evd2QEDcXawE472VyV2Pr+gJOzLMtcY6iUgxjZSCImsatYE8W38MQYdiT/R4pA
Ozf2E+bbiGwZEuA+5Xx3cqIz6Y7m5I4zi5mzN/xleGbBhR/EA2NL92PM/QIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFGR4vez7010/F8OQbmL5PrK7ET5dMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzc2LzM4Mzky
Mi1iY2EzLTQ4ZTctYTRlOC02ZmU1OGMzNjM2NGQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzYvMzgzOTIy
LWJjYTMtNDhlNy1hNGU4LTZmZTU4YzM2MzY0ZC8xL1pIaTk3UHZUWFQ4WHc1QnVZ
dmstc3JzUlBsMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAUESdMA0EAgACMAcDBQMqEsWAMA0GCSqGSIb3
DQEBCwUAA4IBAQCH4bm33+gy8hPSy4QDTIm57GdJ5rr46spLjcbe+KTr2pG4S21P
7I1ZwpUjkOG4AAvVBgzBcwiHnRsn6CTyBMVgCMkV7K0ihsS0FSw3UKforgwEDeOV
k3r6KkxDP747M2CtaeFxooNLBlP4Sx8Z9mVJqk4b3oXiV6BzEBq6gwgJqOUu0FDl
79rmKsBWqD5niwziXJVLaJWZ7D4Gn6M9lbVPtEFNaCTYKmyJw4009E6kFBPZQMrE
1xPZBn46HU65SGVXrNoVBGho6LZq01uj1hQex5Eg41hvFVuoZPkr3Pg0EbrLqC+0
kd3rKpaBvmdraJ3ehIEf0rNQjliZb9j+u0mV
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:49:26 2025 by rpki-client