Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cTm8XO866t8yYT99lZ7I5Ap0KRg.cer
File: cTm8XO866t8yYT99lZ7I5Ap0KRg.cer (raw, json)
Hash identifier: d7mzrUa/X9/uduzKttnNzFhyZxwNfHVqHDV2OBAkl6Y=
Subject key identifier: 71:39:BC:5C:EF:3A:EA:DF:32:61:3F:7D:95:9E:C8:E4:0A:74:29:18
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421445131EFFB36E6C79781F083D02DE2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:32 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 211450
IP: 193.36.90.0/24
IP: 2a10:e340::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:51:31:ef:fb:36:e6:c7:97:81:f0:83:d0:2d:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7139bc5cef3aeadf32613f7d959ec8e40a742918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b8:50:2a:46:fd:70:ea:10:60:8c:0f:1f:a2:
59:f7:7d:ec:5a:95:e0:67:1c:7a:1c:a2:5f:03:46:
7b:26:11:69:d5:a0:af:c5:8b:9c:a2:d5:c5:8e:98:
d7:0f:00:f2:41:80:60:df:6a:af:11:f4:9d:6d:22:
49:6b:b3:d9:00:25:86:54:bc:42:c9:23:bc:b9:d6:
38:10:c1:1a:56:5d:4f:14:cd:61:65:af:e9:c6:d9:
64:47:0d:ec:28:c1:0b:42:40:b4:91:61:b2:f4:9b:
59:2a:e3:65:33:76:0c:b1:bc:1d:9b:66:86:64:a4:
ce:e1:ac:73:3c:4c:cb:f6:9c:a4:75:65:62:d6:e5:
a7:d5:52:31:ae:51:ac:ec:db:18:ec:55:30:3e:ee:
85:c8:ff:4a:75:06:40:9e:86:0b:d2:79:f9:81:5e:
cf:f9:fd:61:06:f7:46:b6:19:c0:eb:2e:97:3d:e7:
69:16:d7:5e:6b:f8:42:02:87:f9:de:d9:97:1f:44:
f4:90:46:94:f2:c5:b3:85:25:0b:19:7b:09:fa:be:
79:11:94:28:b0:b3:70:23:30:f0:42:02:34:f7:4c:
a2:37:ec:7c:74:b3:bb:84:5c:2a:97:e9:83:a1:3d:
d1:f9:71:4b:6d:ae:03:69:91:fb:e7:94:5e:bb:66:
3c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:39:BC:5C:EF:3A:EA:DF:32:61:3F:7D:95:9E:C8:E4:0A:74:29:18
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cae652-a218-42f6-97af-794b28eb16c5/1/cTm8XO866t8yYT99lZ7I5Ap0KRg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.90.0/24
IPv6:
2a10:e340::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211450
Signature Algorithm: sha256WithRSAEncryption
23:b5:26:d7:2e:c3:ea:ca:ab:00:0d:b3:e6:df:c9:f0:d8:fd:
f4:ee:d3:2c:33:68:d3:f1:80:37:a2:b3:9b:30:96:ac:7d:98:
f3:5b:fe:c1:d0:f0:73:cb:97:c0:9f:06:0d:67:bd:e4:88:87:
43:ea:87:74:70:7e:a4:dc:82:da:c6:85:6c:79:24:df:ad:7d:
22:c3:3b:d2:8c:2f:2e:fb:f9:84:4e:e0:e3:60:83:ac:ef:93:
2d:15:c7:1f:3b:17:92:7d:a1:38:20:6b:87:7c:ad:30:68:cd:
70:90:7b:90:1a:46:f6:58:a1:ab:96:40:62:05:9b:33:18:d5:
d4:85:53:ad:1c:90:0a:6c:26:ff:1c:d8:aa:56:a9:28:a5:58:
ee:dc:02:76:1c:0e:42:8e:33:2a:4b:87:08:9f:a9:71:15:55:
ac:1b:d6:74:6a:60:bf:24:6d:e3:5c:19:94:79:f3:b8:a5:f9:
0e:8b:d9:9e:57:d4:38:d6:22:44:d2:e7:d5:02:8d:04:a5:c3:
3b:fd:b0:36:67:ae:e7:34:15:01:2a:c7:8c:78:64:bb:da:0c:
24:09:a7:fc:87:d2:00:51:6d:5d:9f:8e:39:be:31:25:46:0d:
5d:91:64:45:1b:29:62:76:0a:04:2f:24:16:12:70:6e:78:19:
f2:e9:76:0e
-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgISAZQhRFEx7/s25seXgfCD0C3iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDk0ODMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MTM5YmM1Y2VmM2FlYWRmMzI2MTNmN2Q5NTllYzhlNDBhNzQyOTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbhQKkb9cOoQYIwPH6JZ933sWpXg
Zxx6HKJfA0Z7JhFp1aCvxYucotXFjpjXDwDyQYBg32qvEfSdbSJJa7PZACWGVLxC
ySO8udY4EMEaVl1PFM1hZa/pxtlkRw3sKMELQkC0kWGy9JtZKuNlM3YMsbwdm2aG
ZKTO4axzPEzL9pykdWVi1uWn1VIxrlGs7NsY7FUwPu6FyP9KdQZAnoYL0nn5gV7P
+f1hBvdGthnA6y6XPedpFtdea/hCAof53tmXH0T0kEaU8sWzhSULGXsJ+r55EZQo
sLNwIzDwQgI090yiN+x8dLO7hFwql+mDoT3R+XFLba4DaZH755Reu2Y8VwIDAQAB
o4ICrzCCAqswHQYDVR0OBBYEFHE5vFzvOurfMmE/fZWeyOQKdCkYMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRkL2NhZTY1
Mi1hMjE4LTQyZjYtOTdhZi03OTRiMjhlYjE2YzUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGQvY2FlNjUy
LWEyMTgtNDJmNi05N2FmLTc5NGIyOGViMTZjNS8xL2NUbThYTzg2NnQ4eVlUOTls
WjdJNUFwMEtSZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQAwSRaMA0EAgACMAcDBQMqEONAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwM5+jANBgkqhkiG9w0BAQsFAAOCAQEAI7Um1y7D6sqr
AA2z5t/J8Nj99O7TLDNo0/GAN6KzmzCWrH2Y81v+wdDwc8uXwJ8GDWe95IiHQ+qH
dHB+pNyC2saFbHkk3619IsM70owvLvv5hE7g42CDrO+TLRXHHzsXkn2hOCBrh3yt
MGjNcJB7kBpG9lihq5ZAYgWbMxjV1IVTrRyQCmwm/xzYqlapKKVY7twCdhwOQo4z
KkuHCJ+pcRVVrBvWdGpgvyRt41wZlHnzuKX5DovZnlfUONYiRNLn1QKNBKXDO/2w
Nmeu5zQVASrHjHhku9oMJAmn/IfSAFFtXZ+OOb4xJUYNXZFkRRspYnYKBC8kFhJw
bngZ8ul2Dg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:46:26 2025 by rpki-client