Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/flrIG7zPhS8irI7VLS6S2zHY1gY.cer
File: flrIG7zPhS8irI7VLS6S2zHY1gY.cer (raw, json)
Hash identifier: F/Yl6jA3FnJCWIiT2vJgVCFjs8vTMJjSffMAcOia8w4=
Subject key identifier: 7E:5A:C8:1B:BC:CF:85:2F:22:AC:8E:D5:2D:2E:92:DB:31:D8:D6:06
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221FCA5D1B83CF051E9D61927525F2D8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/flrIG7zPhS8irI7VLS6S2zHY1gY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:16 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.149.240.0/20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:ca:5d:1b:83:cf:05:1e:9d:61:92:75:25:f2:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e5ac81bbccf852f22ac8ed52d2e92db31d8d606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:eb:22:f7:68:30:ab:fc:04:b1:e5:fd:4d:7d:
f3:d8:69:6f:a9:4a:0e:56:26:a8:9c:3f:ea:d6:68:
af:93:1e:cf:49:c9:5c:d2:78:4a:cb:d9:46:73:05:
e9:c4:2e:19:6a:97:95:64:46:e0:e7:72:e7:4f:3e:
cf:57:95:03:18:00:e1:ea:72:94:6c:a8:bc:7e:42:
0b:bb:fd:98:fa:02:fe:65:88:a6:fb:da:82:40:5b:
19:06:4f:8b:ab:8f:8a:ef:b7:57:b7:d1:3b:cd:da:
b4:aa:a0:9b:78:a1:f4:83:72:4b:8f:7f:09:39:40:
ad:39:87:a6:3c:70:c9:09:e3:49:78:42:cc:77:a0:
2e:64:28:a8:72:8a:2c:0e:7e:f3:8c:28:e4:20:b8:
81:01:a1:ae:83:f5:c1:a0:75:ec:ef:bf:94:88:dc:
65:16:66:2a:86:b9:bf:44:54:01:3d:54:85:af:1b:
27:a4:9b:61:5b:4b:12:64:d7:eb:ce:19:88:08:8e:
ce:f1:69:1d:77:cc:83:68:e6:f4:35:c6:79:a6:3c:
7f:d9:59:fc:c9:ac:a0:ed:fa:2e:e2:47:93:36:ca:
e0:9e:71:55:4f:fe:ff:0d:95:f3:82:d1:b3:ee:d2:
62:98:74:ad:5e:9e:03:d0:f7:58:ec:77:15:f7:a9:
3d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:5A:C8:1B:BC:CF:85:2F:22:AC:8E:D5:2D:2E:92:DB:31:D8:D6:06
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d13f84-16ce-4d51-a618-c2a5d9d70313/1/flrIG7zPhS8irI7VLS6S2zHY1gY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.149.240.0/20
Signature Algorithm: sha256WithRSAEncryption
89:cc:07:a0:c1:bd:ba:db:1a:c1:4f:49:6c:23:af:82:cd:50:
8b:26:18:73:0c:7a:fa:12:1a:08:e1:ab:50:62:17:97:db:57:
49:bc:7f:b6:51:74:ec:b5:3e:38:04:8e:a5:99:b7:70:d6:38:
8c:01:c2:c4:2e:bc:8a:d5:72:40:47:29:36:7a:7e:c3:40:a1:
18:f2:45:1b:a8:45:bb:b2:13:96:a5:29:30:24:fa:fd:92:56:
04:d6:13:55:23:1f:ca:2e:0f:29:67:86:83:81:25:0d:de:10:
d3:69:a3:91:bf:f9:ca:95:ad:1c:20:44:61:fb:61:0e:25:b5:
9e:20:1a:6e:6f:2d:4d:f5:3c:52:d4:5f:ff:78:11:d7:f0:09:
61:51:dd:13:b7:cb:70:65:1b:c6:09:7e:ce:ab:6f:24:0b:c1:
19:52:f8:a3:7b:ed:f2:fb:6f:94:c6:38:14:3f:c6:7d:ef:a4:
3b:5b:63:c2:6e:60:ae:2f:13:ce:60:00:71:06:94:54:52:a3:
fc:88:ac:15:48:29:3f:25:2e:56:15:06:10:70:2d:99:02:19:
12:8d:25:a1:0e:b3:b0:4d:76:39:fc:6d:ea:db:bb:29:ec:8c:
e7:4e:f0:85:7a:fc:6f:fb:3e:6c:6b:29:9c:1a:14:92:ae:92:
32:f0:f7:60
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQiH8pdG4PPBR6dYZJ1JfLYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTM0ODE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZTVhYzgxYmJjY2Y4NTJmMjJhYzhlZDUyZDJlOTJkYjMxZDhkNjA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmesi92gwq/wEseX9TX3z2GlvqUoO
ViaonD/q1mivkx7PSclc0nhKy9lGcwXpxC4ZapeVZEbg53LnTz7PV5UDGADh6nKU
bKi8fkILu/2Y+gL+ZYim+9qCQFsZBk+Lq4+K77dXt9E7zdq0qqCbeKH0g3JLj38J
OUCtOYemPHDJCeNJeELMd6AuZCiocoosDn7zjCjkILiBAaGug/XBoHXs77+UiNxl
FmYqhrm/RFQBPVSFrxsnpJthW0sSZNfrzhmICI7O8Wkdd8yDaOb0NcZ5pjx/2Vn8
yayg7fou4keTNsrgnnFVT/7/DZXzgtGz7tJimHStXp4D0PdY7HcV96k9BQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFH5ayBu8z4UvIqyO1S0uktsx2NYGMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZmL2QxM2Y4
NC0xNmNlLTRkNTEtYTYxOC1jMmE1ZDlkNzAzMTMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmYvZDEzZjg0
LTE2Y2UtNGQ1MS1hNjE4LWMyYTVkOWQ3MDMxMy8xL2ZscklHN3pQaFM4aXJJN1ZM
UzZTMnpIWTFnWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQEwZXwMA0GCSqGSIb3DQEBCwUAA4IBAQCJzAeg
wb262xrBT0lsI6+CzVCLJhhzDHr6EhoI4atQYheX21dJvH+2UXTstT44BI6lmbdw
1jiMAcLELryK1XJARyk2en7DQKEY8kUbqEW7shOWpSkwJPr9klYE1hNVIx/KLg8p
Z4aDgSUN3hDTaaORv/nKla0cIERh+2EOJbWeIBpuby1N9TxS1F//eBHX8AlhUd0T
t8twZRvGCX7Oq28kC8EZUvije+3y+2+UxjgUP8Z976Q7W2PCbmCuLxPOYABxBpRU
UqP8iKwVSCk/JS5WFQYQcC2ZAhkSjSWhDrOwTXY5/G3q27sp7IznTvCFevxv+z5s
aymcGhSSrpIy8Pdg
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:08:24 2025 by rpki-client