Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9M_nmhWjdYFvJKvwe9raeEnq9g.cer
File: b9M_nmhWjdYFvJKvwe9raeEnq9g.cer (raw, json)
Hash identifier: JG/Ou/7Vdg2m68sTy4PmHwl3lqsU1e/8NqEcpqKs5qQ=
Subject key identifier: 6F:D3:3F:9E:68:56:8D:D6:05:BC:92:AF:C1:EF:6B:69:E1:27:AB:D8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D5DD43CF66DC36AA0FA0D279936500
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/93/a1c7f5-1ea9-4a1f-a3e4-8c27c97663dc/1/b9M_nmhWjdYFvJKvwe9raeEnq9g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/93/a1c7f5-1ea9-4a1f-a3e4-8c27c97663dc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:47:54 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 48312
IP: 91.202.234.0/23
IP: 91.207.140.0/23
IP: 194.26.116.0/24
IP: 2a11:1a00::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:dd:43:cf:66:dc:36:aa:0f:a0:d2:79:93:65:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6fd33f9e68568dd605bc92afc1ef6b69e127abd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:05:72:14:ec:68:86:b3:97:9a:d1:c4:cf:5e:
db:09:f2:16:72:f9:a3:22:38:8b:6e:a3:8b:23:93:
54:45:cc:2a:fe:53:ca:41:bf:06:d4:9e:1a:71:3d:
28:04:87:c9:21:42:6b:ed:e0:e3:0f:da:c3:b3:a0:
eb:66:fc:29:2f:e9:52:9f:f1:dd:d3:d1:92:2a:3a:
f2:bd:66:ea:66:7f:cc:f3:aa:18:2b:4e:31:45:84:
20:80:f1:05:53:a2:4f:f7:8a:0e:d5:8d:d9:eb:be:
39:48:38:e7:b3:52:93:20:4f:e0:7d:de:5c:41:8d:
0b:df:b6:65:b1:69:d7:70:01:a6:bf:9f:57:ca:46:
10:f8:0f:41:87:98:2e:fb:40:93:f3:3a:8b:a7:41:
fa:02:74:d2:3b:4a:06:f8:6b:09:a9:3a:cd:76:ab:
73:2c:97:f3:49:4b:f4:26:f9:11:c6:ce:7f:94:82:
65:64:e8:4b:2f:74:8e:ba:34:73:a1:f6:71:62:c5:
b8:c4:79:c3:b7:7b:b7:8f:ea:41:95:1b:54:62:57:
a0:bd:77:b0:a9:5a:f3:48:dd:11:42:b1:21:ae:27:
bf:b5:fd:59:68:2f:dd:9b:bd:b4:e1:3f:4e:24:4b:
12:70:6f:d2:cf:cc:76:bc:30:41:7d:60:ce:76:1d:
82:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D3:3F:9E:68:56:8D:D6:05:BC:92:AF:C1:EF:6B:69:E1:27:AB:D8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/a1c7f5-1ea9-4a1f-a3e4-8c27c97663dc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/a1c7f5-1ea9-4a1f-a3e4-8c27c97663dc/1/b9M_nmhWjdYFvJKvwe9raeEnq9g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.202.234.0/23
91.207.140.0/23
194.26.116.0/24
IPv6:
2a11:1a00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48312
Signature Algorithm: sha256WithRSAEncryption
98:19:4d:e9:71:c8:04:4e:70:db:ff:2a:61:4e:b2:b6:f9:af:
2c:9f:5d:8a:d3:e2:e4:5a:db:f0:93:d2:d2:66:17:15:31:b8:
41:da:6b:a2:b1:0c:b7:8a:e2:e3:5b:80:ce:e6:d5:b5:16:fc:
f9:be:10:85:bc:4c:3f:b3:54:a1:13:ae:a8:07:89:fd:76:90:
43:ca:d4:7a:9c:ab:58:21:44:47:60:2c:f0:5f:3a:0a:e9:2c:
50:36:3c:4a:a8:ab:41:30:07:72:87:fa:83:e9:e1:b3:98:3d:
d5:8a:f0:57:5c:fe:2c:b9:1f:86:8c:e9:fa:72:c9:7d:88:6a:
10:30:06:20:20:04:4c:fd:40:fa:49:96:30:c3:b8:b0:b5:28:
f3:41:43:24:24:73:ae:79:45:66:21:47:81:f7:63:ee:28:62:
cc:9b:10:a6:b9:e0:5e:f4:2c:16:f5:ee:19:1c:72:35:2a:b5:
48:f4:d6:a6:2e:6b:32:84:a7:69:17:58:25:13:29:7d:ea:95:
0a:26:bb:d0:ff:6b:24:a5:98:50:7e:07:80:85:7a:76:47:6a:
3b:89:bd:80:e0:b6:6d:02:ee:33:25:9b:fe:77:2f:28:6b:40:
3a:ea:10:4d:b9:ab:be:9f:bc:f2:23:c5:5b:3b:ce:a1:7a:77:
af:20:85:2d
-----BEGIN CERTIFICATE-----
MIIFrzCCBJegAwIBAgISAZQg1d1Dz2bcNqoPoNJ5k2UAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDc0NzU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZmQzM2Y5ZTY4NTY4ZGQ2MDViYzkyYWZjMWVmNmI2OWUxMjdhYmQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgVyFOxohrOXmtHEz17bCfIWcvmj
IjiLbqOLI5NURcwq/lPKQb8G1J4acT0oBIfJIUJr7eDjD9rDs6DrZvwpL+lSn/Hd
09GSKjryvWbqZn/M86oYK04xRYQggPEFU6JP94oO1Y3Z6745SDjns1KTIE/gfd5c
QY0L37ZlsWnXcAGmv59XykYQ+A9Bh5gu+0CT8zqLp0H6AnTSO0oG+GsJqTrNdqtz
LJfzSUv0JvkRxs5/lIJlZOhLL3SOujRzofZxYsW4xHnDt3u3j+pBlRtUYlegvXew
qVrzSN0RQrEhrie/tf1ZaC/dm7204T9OJEsScG/Sz8x2vDBBfWDOdh2C5wIDAQAB
o4ICuzCCArcwHQYDVR0OBBYEFG/TP55oVo3WBbySr8Hva2nhJ6vYMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkzL2ExYzdm
NS0xZWE5LTRhMWYtYTNlNC04YzI3Yzk3NjYzZGMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTMvYTFjN2Y1
LTFlYTktNGExZi1hM2U0LThjMjdjOTc2NjNkYy8xL2I5TV9ubWhXamRZRnZKS3Z3
ZTlyYWVFbnE5Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDoGCCsGAQUF
BwEHAQH/BCswKTAYBAIAATASAwQBW8rqAwQBW8+MAwQAwhp0MA0EAgACMAcDBQMq
ERoAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwC8uDANBgkqhkiG9w0BAQsFAAOC
AQEAmBlN6XHIBE5w2/8qYU6ytvmvLJ9ditPi5Frb8JPS0mYXFTG4QdprorEMt4ri
41uAzubVtRb8+b4QhbxMP7NUoROuqAeJ/XaQQ8rUepyrWCFER2As8F86CuksUDY8
SqirQTAHcof6g+nhs5g91YrwV1z+LLkfhozp+nLJfYhqEDAGICAETP1A+kmWMMO4
sLUo80FDJCRzrnlFZiFHgfdj7ihizJsQprngXvQsFvXuGRxyNSq1SPTWpi5rMoSn
aRdYJRMpfeqVCia70P9rJKWYUH4HgIV6dkdqO4m9gOC2bQLuMyWb/ncvKGtAOuoQ
Tbmrvp+88iPFWzvOoXp3ryCFLQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:32:00 2025 by rpki-client