Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer
File: fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer (raw, json)
Hash identifier: gLY6dE00/QROIbSLJGcDRGiL3dZH2kOco3F4bilJ8ng=
Subject key identifier: 7C:D8:47:3E:3D:9E:D4:23:C4:1E:7A:85:8F:4C:0F:0F:B8:0C:07:BA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FDBF1D0E8AD40EBCDB242E5E2C0C90
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:49:34 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.172.80.0/22
IP: 2a0b:700::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:bf:1d:0e:8a:d4:0e:bc:db:24:2e:5e:2c:0c:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:49:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7cd8473e3d9ed423c41e7a858f4c0f0fb80c07ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d2:0d:13:76:a0:27:c5:bb:d9:23:83:96:87:
e9:a5:ab:99:1b:2c:87:33:90:99:5c:20:e4:36:66:
47:f1:3f:c8:6d:a7:b9:3b:cf:60:ab:e8:65:0b:51:
c6:4c:2a:85:42:ba:89:f6:3d:42:d5:ab:ba:76:c9:
6b:40:14:95:54:2a:01:96:26:b1:3d:41:f4:af:08:
ed:8a:86:ed:75:02:57:db:f4:bc:2c:2e:f8:90:97:
4d:f3:4a:95:d0:ab:a1:d4:48:5c:a7:e0:1a:6f:77:
f9:19:8d:8a:bf:fe:10:01:bb:32:03:3c:16:7a:98:
06:98:96:36:2b:61:12:28:6c:91:87:d3:3e:01:fe:
e5:47:2a:9c:a3:f6:75:01:43:7a:9f:26:73:34:1d:
dc:41:c5:b8:8a:08:bd:63:77:cd:f5:32:1a:95:cc:
0a:4f:09:a4:4c:8e:df:b7:d5:50:3a:8f:db:70:63:
63:01:b6:e8:71:67:05:f4:36:07:cb:df:8d:10:b0:
d7:32:5b:7b:68:4c:65:2a:4d:1b:04:8e:2d:8a:22:
10:38:c0:2a:fc:56:32:7b:e0:82:bb:27:74:8b:c7:
7c:ac:e0:8e:ad:a7:1d:4c:95:08:cf:e6:69:07:41:
14:63:cb:95:b4:dc:39:3c:de:b9:61:32:96:0b:81:
d0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:D8:47:3E:3D:9E:D4:23:C4:1E:7A:85:8F:4C:0F:0F:B8:0C:07:BA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.172.80.0/22
IPv6:
2a0b:700::/29
Signature Algorithm: sha256WithRSAEncryption
13:a3:21:be:bc:24:15:6d:ab:4f:83:e1:18:5f:43:bb:77:28:
d0:48:61:61:11:0f:8c:39:c8:24:e9:b2:d7:fb:ce:e1:eb:98:
1f:06:3b:ae:5c:41:da:bb:ae:af:91:fb:01:81:18:89:bd:cb:
45:3a:1f:78:9b:f6:55:d9:ad:de:9d:97:f2:3f:e1:20:60:ce:
7b:d7:70:20:83:60:9f:5d:55:84:07:ee:11:4a:88:79:20:78:
7a:3e:42:af:bc:0b:48:09:97:06:ab:fa:73:fb:d8:d6:9d:8a:
b8:4d:a3:0f:18:a8:58:22:2b:cc:2c:83:50:2c:0d:e6:73:f4:
8a:73:06:e8:1e:bf:2d:d1:bb:cf:a7:b3:11:55:b2:85:55:e5:
43:29:b9:ea:ce:c4:a1:2b:67:11:a8:d1:9a:4c:0d:3b:1b:58:
b0:ae:50:3e:2f:1e:49:c2:e7:6b:c7:ba:89:09:c7:27:70:22:
40:75:73:81:35:5f:93:28:9e:e9:1c:64:c6:2f:c2:4d:95:2e:
1d:83:c2:bd:f0:4a:b8:37:ff:8b:d2:c4:5b:72:8e:29:15:1d:
5b:a0:e4:47:50:af:cb:4c:5c:8c:38:85:85:dd:4a:9d:81:37:
aa:2a:94:67:50:6d:e4:67:f9:40:13:eb:d7:5c:95:15:6d:12:
32:be:f9:fc
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZQl/b8dDorUDrzbJC5eLAyQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDc0OTM0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Y2Q4NDczZTNkOWVkNDIzYzQxZTdhODU4ZjRjMGYwZmI4MGMwN2JhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstINE3agJ8W72SODlofppauZGyyH
M5CZXCDkNmZH8T/Ibae5O89gq+hlC1HGTCqFQrqJ9j1C1au6dslrQBSVVCoBliax
PUH0rwjtiobtdQJX2/S8LC74kJdN80qV0Kuh1Ehcp+Aab3f5GY2Kv/4QAbsyAzwW
epgGmJY2K2ESKGyRh9M+Af7lRyqco/Z1AUN6nyZzNB3cQcW4igi9Y3fN9TIalcwK
TwmkTI7ft9VQOo/bcGNjAbbocWcF9DYHy9+NELDXMlt7aExlKk0bBI4tiiIQOMAq
/FYye+CCuyd0i8d8rOCOracdTJUIz+ZpB0EUY8uVtNw5PN65YTKWC4HQ+QIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFHzYRz49ntQjxB56hY9MDw+4DAe6MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y5LzhlZmMy
ZS05ZDk2LTQxYTAtYjI4Ny05NzU3Njk0ZDI5MWQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjkvOGVmYzJl
LTlkOTYtNDFhMC1iMjg3LTk3NTc2OTRkMjkxZC8xL2ZOaEhQajJlMUNQRUhucUZq
MHdQRDdnTUI3by5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuaxQMA0EAgACMAcDBQMqCwcAMA0GCSqGSIb3
DQEBCwUAA4IBAQAToyG+vCQVbatPg+EYX0O7dyjQSGFhEQ+MOcgk6bLX+87h65gf
BjuuXEHau66vkfsBgRiJvctFOh94m/ZV2a3enZfyP+EgYM5713Agg2CfXVWEB+4R
Soh5IHh6PkKvvAtICZcGq/pz+9jWnYq4TaMPGKhYIivMLINQLA3mc/SKcwboHr8t
0bvPp7MRVbKFVeVDKbnqzsShK2cRqNGaTA07G1iwrlA+Lx5Jwudrx7qJCccncCJA
dXOBNV+TKJ7pHGTGL8JNlS4dg8K98Eq4N/+L0sRbco4pFR1boORHUK/LTFyMOIWF
3UqdgTeqKpRnUG3kZ/lAE+vXXJUVbRIyvvn8
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:32:29 2025 by rpki-client