Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f_yCWF32m3yUsWphky_8i24zUVY.cer
File: f_yCWF32m3yUsWphky_8i24zUVY.cer (raw, json)
Hash identifier: s3cPJYqi2rGwhmAcAafrOlglbQidlLxp4+qBQjq6l/o=
Subject key identifier: 7F:FC:82:58:5D:F6:9B:7C:94:B1:6A:61:93:2F:FC:8B:6E:33:51:56
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942748548B4971E2EE4E1040AD12D036A2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:50:39 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 212587
IP: 194.31.16.0/20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:54:8b:49:71:e2:ee:4e:10:40:ad:12:d0:36:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:50:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ffc82585df69b7c94b16a61932ffc8b6e335156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:45:ee:c0:f6:c2:db:1e:9f:c7:5a:18:2d:8e:
98:d6:05:c2:d2:61:06:05:3c:2c:bf:ba:8b:c7:8a:
49:d0:ac:7b:3d:a0:0f:44:c6:85:fc:99:d4:90:36:
64:30:f4:36:3e:e1:85:de:44:3d:7a:d3:7a:ed:60:
0f:84:b5:0f:91:ae:0a:bd:05:52:f5:7b:74:99:73:
da:49:37:de:94:3e:37:dd:4f:71:b0:71:3c:9b:86:
ad:0b:78:4e:d2:77:8e:64:37:28:67:6b:8d:a2:6d:
e1:5d:b6:58:2e:de:64:c9:32:5d:e5:16:95:05:55:
e6:cc:ba:20:3d:84:8a:1c:d5:a6:36:b9:85:9f:09:
f8:39:0f:59:da:d3:43:d0:3f:f8:bd:5b:67:1a:95:
f7:4a:77:6c:a5:b6:7b:6b:9f:85:b5:f2:dd:6f:63:
ac:66:d0:54:fb:09:93:ea:d0:be:57:fb:7d:90:12:
27:bd:d3:4d:65:7f:e6:c3:cf:35:af:54:a8:15:74:
25:cf:f4:b1:73:c6:77:5c:f3:2f:c4:5b:d1:f2:ba:
7b:9f:90:a0:15:da:1f:32:bf:f6:b9:57:5c:35:25:
55:0b:3a:22:a2:9f:3e:fd:a7:89:5a:4e:de:7c:19:
84:cf:85:0b:df:e0:5a:e6:9a:0a:a0:b5:33:d4:0d:
58:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:FC:82:58:5D:F6:9B:7C:94:B1:6A:61:93:2F:FC:8B:6E:33:51:56
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/531d2b-e170-49a5-8404-92f73f56fc62/1/f_yCWF32m3yUsWphky_8i24zUVY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.31.16.0/20
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212587
Signature Algorithm: sha256WithRSAEncryption
7d:1f:c5:f4:73:fd:a1:e7:a3:82:50:cb:d3:d2:24:04:b8:ab:
99:e4:a9:4d:96:e3:a2:63:2a:27:42:5d:bc:ed:61:aa:cd:57:
3b:5e:31:f8:5d:b9:ca:a9:9e:f8:78:ad:13:26:1f:4b:33:4e:
05:ab:88:aa:b6:80:32:22:26:24:a6:76:df:89:d9:bd:37:a3:
dd:f9:31:70:ba:5a:da:46:82:86:d0:d6:59:09:43:d8:83:21:
94:e1:c9:30:78:0c:1b:a3:97:9e:2f:2b:0e:f6:eb:b4:e1:90:
4c:45:1f:f4:ab:d1:f4:9b:40:f0:eb:5b:90:2f:05:c8:26:ab:
78:e0:8e:35:99:6a:b6:b1:6b:82:62:8c:5e:a2:de:34:d6:30:
bc:c5:e1:db:b4:1c:29:1c:74:c0:87:f2:eb:ba:20:68:3b:cd:
d2:ca:94:35:89:2a:16:43:81:98:c9:5b:f0:5d:2d:b2:92:4e:
78:12:fb:2e:58:1f:c1:39:c8:65:76:de:b1:d5:48:7e:66:77:
40:91:50:a2:41:e9:d7:d0:9e:58:64:22:28:c2:95:b3:12:f0:
52:18:15:5b:dc:6e:58:43:a3:e6:7d:c1:72:e8:72:53:1e:51:
33:86:5f:a8:f3:82:d5:0c:5e:ea:4b:f0:92:44:cd:eb:ad:93:
ff:6b:45:bc
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZQnSFSLSXHi7k4QQK0S0DaiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTM1MDM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZmZjODI1ODVkZjY5YjdjOTRiMTZhNjE5MzJmZmM4YjZlMzM1MTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUXuwPbC2x6fx1oYLY6Y1gXC0mEG
BTwsv7qLx4pJ0Kx7PaAPRMaF/JnUkDZkMPQ2PuGF3kQ9etN67WAPhLUPka4KvQVS
9Xt0mXPaSTfelD433U9xsHE8m4atC3hO0neOZDcoZ2uNom3hXbZYLt5kyTJd5RaV
BVXmzLogPYSKHNWmNrmFnwn4OQ9Z2tND0D/4vVtnGpX3SndspbZ7a5+FtfLdb2Os
ZtBU+wmT6tC+V/t9kBInvdNNZX/mw881r1SoFXQlz/Sxc8Z3XPMvxFvR8rp7n5Cg
FdofMr/2uVdcNSVVCzoiop8+/aeJWk7efBmEz4UL3+Ba5poKoLUz1A1YKwIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFH/8glhd9pt8lLFqYZMv/ItuM1FWMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U0LzUzMWQy
Yi1lMTcwLTQ5YTUtODQwNC05MmY3M2Y1NmZjNjIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTQvNTMxZDJi
LWUxNzAtNDlhNS04NDA0LTkyZjczZjU2ZmM2Mi8xL2ZfeUNXRjMybTN5VXNXcGhr
eV84aTI0elVWWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQEwh8QMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwM+azANBgkqhkiG9w0BAQsFAAOCAQEAfR/F9HP9oeejglDL09IkBLirmeSpTZbj
omMqJ0JdvO1hqs1XO14x+F25yqme+HitEyYfSzNOBauIqraAMiImJKZ234nZvTej
3fkxcLpa2kaChtDWWQlD2IMhlOHJMHgMG6OXni8rDvbrtOGQTEUf9KvR9JtA8Otb
kC8FyCareOCONZlqtrFrgmKMXqLeNNYwvMXh27QcKRx0wIfy67ogaDvN0sqUNYkq
FkOBmMlb8F0tspJOeBL7LlgfwTnIZXbesdVIfmZ3QJFQokHp19CeWGQiKMKVsxLw
UhgVW9xuWEOj5n3BcuhyUx5RM4ZfqPOC1Qxe6kvwkkTN662T/2tFvA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:38:57 2025 by rpki-client