Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/h47KO8zU5cLvs2CO6DpX-a6CG-Y.cer
File: h47KO8zU5cLvs2CO6DpX-a6CG-Y.cer (raw, json)
Hash identifier: Ikzi/yAu2T7ywn7BignRlvvCnPKV5AB+qZkZx65hOIY=
Subject key identifier: 87:8E:CA:3B:CC:D4:E5:C2:EF:B3:60:8E:E8:3A:57:F9:AE:82:1B:E6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D7422F11AF34FD18C4F48AA800C91E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:48:17 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.196.164.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:42:2f:11:af:34:fd:18:c4:f4:8a:a8:00:c9:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=878eca3bccd4e5c2efb3608ee83a57f9ae821be6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3f:4f:5a:76:26:13:98:38:cc:1e:0b:81:37:
25:90:1e:74:bd:31:e5:88:93:57:7e:0e:7e:e1:a7:
bc:aa:44:11:6f:5c:66:e2:c6:68:50:bb:24:f8:00:
3a:43:68:e4:f8:bb:9d:11:29:d4:f1:27:5a:ef:b2:
c7:7a:f5:97:eb:71:9e:71:bc:f5:d9:ad:42:4b:ce:
8f:f0:45:42:c4:4e:f9:88:b8:2a:2a:85:2a:e6:83:
ed:61:9a:ec:30:47:b1:16:9a:ef:fe:58:5b:38:11:
a8:6f:9e:2f:e7:74:1a:d1:80:eb:55:0e:19:85:04:
d2:3b:e5:f3:f1:17:25:28:bf:ef:8b:8f:f2:7f:a1:
eb:b0:14:a1:1a:a3:5d:75:50:58:25:48:d9:3d:df:
0e:45:18:ea:f1:67:e1:14:5c:50:98:56:53:ca:1d:
d9:71:6d:29:2f:c5:7f:d2:b4:b0:cd:b3:71:88:a7:
ae:92:6f:ac:83:c0:7a:b5:39:5b:c0:33:da:6f:66:
67:03:1a:86:f4:50:e4:d6:18:b0:ec:72:2e:49:77:
b5:aa:ad:e8:c6:08:84:85:c5:e4:ff:7e:47:05:c6:
31:7a:47:19:99:c5:8f:32:a9:01:94:33:03:23:88:
10:65:f4:86:83:be:5b:dc:a5:9e:ce:b5:11:2b:49:
2a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:8E:CA:3B:CC:D4:E5:C2:EF:B3:60:8E:E8:3A:57:F9:AE:82:1B:E6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.196.164.0/22
Signature Algorithm: sha256WithRSAEncryption
06:13:62:6d:71:d7:d5:a7:1c:f2:d0:63:2a:ed:e5:7b:d2:d5:
0e:62:3f:b4:ea:29:28:9e:4b:47:b9:2d:50:4d:5c:a1:f6:93:
5b:e0:c4:41:53:7f:af:1f:8d:cc:2a:58:fe:96:0a:29:d0:74:
7e:42:77:4f:eb:36:1b:50:87:eb:0c:7c:f9:5f:47:81:97:95:
54:18:ba:8f:7f:d5:33:42:0c:c0:2a:a3:2b:0d:91:f6:17:75:
df:1a:f6:47:92:81:c2:54:b3:fb:90:44:79:eb:8f:e5:eb:21:
66:6d:37:cf:fb:c6:65:be:32:17:2e:d4:16:35:f7:61:67:6b:
89:81:ec:b7:2c:60:26:89:8a:ac:96:5b:f2:96:aa:ea:87:da:
34:ff:50:9c:83:08:ff:29:f2:b3:b8:8d:86:3f:50:2e:bf:ec:
b6:52:09:07:7f:2e:9a:76:96:0b:85:eb:fb:0c:10:fc:f8:b5:
60:48:98:bc:04:3f:03:6c:70:b4:0b:48:9c:f2:c3:2f:62:4f:
43:33:ae:e9:0f:94:e0:00:18:be:9a:cb:9c:34:4b:da:9f:4e:
4d:cb:5b:b0:a4:d7:32:da:97:e6:af:89:72:2f:12:9d:f5:c4:
89:e1:94:db:41:d7:7d:2e:32:82:a2:d7:f9:45:f6:67:94:88:
6d:63:b9:6b
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQj10IvEa80/RjE9IqoAMkeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMjE0ODE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NzhlY2EzYmNjZDRlNWMyZWZiMzYwOGVlODNhNTdmOWFlODIxYmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuz9PWnYmE5g4zB4LgTclkB50vTHl
iJNXfg5+4ae8qkQRb1xm4sZoULsk+AA6Q2jk+LudESnU8Sda77LHevWX63Gecbz1
2a1CS86P8EVCxE75iLgqKoUq5oPtYZrsMEexFprv/lhbOBGob54v53Qa0YDrVQ4Z
hQTSO+Xz8RclKL/vi4/yf6HrsBShGqNddVBYJUjZPd8ORRjq8WfhFFxQmFZTyh3Z
cW0pL8V/0rSwzbNxiKeukm+sg8B6tTlbwDPab2ZnAxqG9FDk1hiw7HIuSXe1qq3o
xgiEhcXk/35HBcYxekcZmcWPMqkBlDMDI4gQZfSGg75b3KWezrURK0kqlwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFIeOyjvM1OXC77Ngjug6V/mughvmMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E2L2FiMmIx
MC01ZTg3LTQ2MjQtOTc3Ni01OWEwYzVmZjY1MDUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTYvYWIyYjEw
LTVlODctNDYyNC05Nzc2LTU5YTBjNWZmNjUwNS8xL2g0N0tPOHpVNWNMdnMyQ082
RHBYLWE2Q0ctWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCucSkMA0GCSqGSIb3DQEBCwUAA4IBAQAGE2Jt
cdfVpxzy0GMq7eV70tUOYj+06ikonktHuS1QTVyh9pNb4MRBU3+vH43MKlj+lgop
0HR+QndP6zYbUIfrDHz5X0eBl5VUGLqPf9UzQgzAKqMrDZH2F3XfGvZHkoHCVLP7
kER564/l6yFmbTfP+8ZlvjIXLtQWNfdhZ2uJgey3LGAmiYqsllvylqrqh9o0/1Cc
gwj/KfKzuI2GP1Auv+y2UgkHfy6adpYLhev7DBD8+LVgSJi8BD8DbHC0C0ic8sMv
Yk9DM67pD5TgABi+msucNEvan05Ny1uwpNcy2pfmr4lyLxKd9cSJ4ZTbQdd9LjKC
otf5RfZnlIhtY7lr
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:52:13 2025 by rpki-client