Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ifTHhzt_6kn_brkNUCwdvDpfjDM.cer
File: ifTHhzt_6kn_brkNUCwdvDpfjDM.cer (raw, json)
Hash identifier: dBDL7PP/2sra6wtQS7iZZO7Z0/GrxD9BHMWGoF19fgY=
Subject key identifier: 89:F4:C7:87:3B:7F:EA:49:FF:6E:B9:0D:50:2C:1D:BC:3A:5F:8C:33
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D9A6DED71F73CFE3F3EB9398040FF4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:45 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 60788
IP: 46.227.48.0/21
IP: 185.47.104.0/22
IP: 2a03:15c0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:a6:de:d7:1f:73:cf:e3:f3:eb:93:98:04:0f:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=89f4c7873b7fea49ff6eb90d502c1dbc3a5f8c33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:de:3b:fa:ed:fd:bd:60:03:62:36:83:5c:2f:
6a:54:21:1c:0c:de:a9:5d:cc:81:80:c8:01:1a:b7:
cc:f6:7e:24:ab:d2:c6:e0:ca:1e:22:d5:e5:55:0c:
c6:59:84:5d:81:91:c9:23:3d:3e:a3:4a:e0:01:52:
e2:24:e3:94:66:11:3c:dc:c5:10:51:37:6e:02:17:
2a:2d:4c:fa:8d:5e:98:75:67:47:0c:bb:9c:f1:ae:
88:53:05:45:e8:e7:70:89:d7:7d:e4:7d:4e:e3:c8:
be:11:da:0c:4c:c9:69:e0:d3:34:6d:10:d0:57:f5:
93:c6:fe:f7:6b:5b:fc:6e:53:8d:52:6a:cf:d0:cd:
2d:fb:a6:a5:d4:a4:16:0b:cf:83:f9:38:dd:03:ca:
c8:27:00:2a:93:c7:e4:b2:ce:93:9e:83:27:f9:bf:
dd:40:a0:ee:ed:26:55:a5:01:2f:19:3e:4c:93:5d:
22:de:13:61:9a:13:1a:9f:66:49:7c:82:e8:8a:6c:
2c:16:f8:e0:fb:ee:88:24:7a:a0:84:fd:d4:16:f9:
53:ed:ed:c8:ed:c5:72:ff:81:c6:6e:6f:26:d1:01:
99:89:57:7d:ea:f7:d6:39:64:5f:6d:da:f0:4f:41:
fd:9b:42:01:09:44:01:ea:5e:54:0b:f5:33:97:08:
1c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:F4:C7:87:3B:7F:EA:49:FF:6E:B9:0D:50:2C:1D:BC:3A:5F:8C:33
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.227.48.0/21
185.47.104.0/22
IPv6:
2a03:15c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60788
Signature Algorithm: sha256WithRSAEncryption
a6:f2:de:e8:fb:ce:27:b9:f8:ec:95:12:b3:0d:8e:c6:aa:48:
00:e0:03:af:3d:32:2d:eb:2e:45:b2:2a:25:fc:d8:d2:7d:79:
91:d8:2c:fb:a0:7b:09:c1:36:72:a5:fa:e1:98:04:af:3a:6f:
f7:bc:cc:8e:a0:2a:19:f8:56:c5:a5:1b:1e:81:5e:88:e8:bf:
9e:64:a4:b7:4a:55:74:32:ac:93:ff:b9:c3:de:94:7a:6d:e2:
a7:37:c2:40:ba:81:cf:28:c6:a1:26:82:c7:37:8f:7f:f4:1a:
dc:35:13:44:90:c4:0f:c2:20:85:26:b1:99:aa:90:c8:dd:1e:
53:11:37:17:b5:d1:db:fd:1e:28:cf:0e:1e:8e:c1:fd:07:b2:
44:4e:7f:ba:4d:9c:ae:00:8f:d8:32:f7:c7:a6:42:b5:50:f4:
4c:c2:26:f9:18:04:09:9f:f7:04:31:e3:27:f5:a9:21:b3:46:
91:61:66:0c:d9:22:5b:46:b1:a0:42:c6:bc:b7:40:a5:7f:94:
08:3c:98:84:bb:cf:72:7f:27:bf:c3:02:e5:79:0b:7a:2b:e4:
32:59:45:71:b7:64:5a:b4:86:0d:8f:2d:51:65:c4:2d:89:d3:
8a:2f:37:f5:b9:21:1e:64:67:8c:65:4d:4b:67:fd:3a:45:eb:
da:7a:d0:aa
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgISAZQm2abe1x9zz+Pz65OYBA/0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTE0OTQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OWY0Yzc4NzNiN2ZlYTQ5ZmY2ZWI5MGQ1MDJjMWRiYzNhNWY4YzMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwN47+u39vWADYjaDXC9qVCEcDN6p
XcyBgMgBGrfM9n4kq9LG4MoeItXlVQzGWYRdgZHJIz0+o0rgAVLiJOOUZhE83MUQ
UTduAhcqLUz6jV6YdWdHDLuc8a6IUwVF6Odwidd95H1O48i+EdoMTMlp4NM0bRDQ
V/WTxv73a1v8blONUmrP0M0t+6al1KQWC8+D+TjdA8rIJwAqk8fkss6TnoMn+b/d
QKDu7SZVpQEvGT5Mk10i3hNhmhMan2ZJfILoimwsFvjg++6IJHqghP3UFvlT7e3I
7cVy/4HGbm8m0QGZiVd96vfWOWRfbdrwT0H9m0IBCUQB6l5UC/UzlwgcTwIDAQAB
o4ICtTCCArEwHQYDVR0OBBYEFIn0x4c7f+pJ/265DVAsHbw6X4wzMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y5LzQzYWZi
Ni0wZDIxLTRmZjYtOTg2My1iYzUxN2UxMjFkNTQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjkvNDNhZmI2
LTBkMjEtNGZmNi05ODYzLWJjNTE3ZTEyMWQ1NC8xL2lmVEhoenRfNmtuX2Jya05V
Q3dkdkRwZmpETS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQDLuMwAwQCuS9oMA0EAgACMAcDBQAqAxXAMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwDtdDANBgkqhkiG9w0BAQsFAAOCAQEApvLe
6PvOJ7n47JUSsw2OxqpIAOADrz0yLesuRbIqJfzY0n15kdgs+6B7CcE2cqX64ZgE
rzpv97zMjqAqGfhWxaUbHoFeiOi/nmSkt0pVdDKsk/+5w96Uem3ipzfCQLqBzyjG
oSaCxzePf/Qa3DUTRJDED8IghSaxmaqQyN0eUxE3F7XR2/0eKM8OHo7B/QeyRE5/
uk2crgCP2DL3x6ZCtVD0TMIm+RgECZ/3BDHjJ/WpIbNGkWFmDNkiW0axoELGvLdA
pX+UCDyYhLvPcn8nv8MC5XkLeivkMllFcbdkWrSGDY8tUWXELYnTii839bkhHmRn
jGVNS2f9OkXr2nrQqg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:13:22 2025 by rpki-client