Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/j8HWvjunicXa61l6E13l7Myrj5U.cer
File: j8HWvjunicXa61l6E13l7Myrj5U.cer (raw, json)
Hash identifier: /kfEvz4Na42W0YBNxhdWlrWuue1R2+iUxAWtngotwnI=
Subject key identifier: 8F:C1:D6:BE:3B:A7:89:C5:DA:EB:59:7A:13:5D:E5:EC:CC:AB:8F:95
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FD90711CE2A37AEF44590209759256
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a6/44ee8d-2ae8-4844-a935-d24c2ce23ab7/1/j8HWvjunicXa61l6E13l7Myrj5U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a6/44ee8d-2ae8-4844-a935-d24c2ce23ab7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:49:22 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.46.61.0/24
IP: 193.104.108.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:90:71:1c:e2:a3:7a:ef:44:59:02:09:75:92:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8fc1d6be3ba789c5daeb597a135de5ecccab8f95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ef:a7:d4:8b:fa:61:4c:22:98:7a:6c:9b:61:
b2:17:10:6d:a3:96:24:fa:b9:d2:3e:36:c8:2e:55:
50:3d:07:0b:39:de:97:db:a2:af:03:1a:e3:41:55:
18:42:3a:34:01:cd:53:f1:60:55:78:32:26:44:29:
96:b8:71:9c:c9:6f:49:9d:a8:8f:9a:9a:ac:ad:a9:
af:96:d2:29:af:fe:46:8b:8c:6e:1f:b0:8a:ea:0a:
f9:f5:22:fd:8b:c8:f6:3a:f9:02:10:0c:0f:cd:a9:
88:b6:5b:f0:7e:da:08:ad:1c:20:08:7d:37:26:84:
cc:1c:2f:24:50:23:e7:3f:dc:f6:a1:8b:a8:f9:7d:
2b:a2:ec:75:a4:5c:f2:27:46:0c:6b:d7:74:fe:c5:
61:5e:5d:cf:80:f7:7b:f0:51:f8:6b:bd:17:68:41:
55:32:bd:4e:f8:12:e2:62:11:de:7a:d3:f2:f8:5b:
01:2f:ea:a1:0c:32:52:d8:83:d1:05:dd:46:f2:d3:
c9:a7:32:b7:bc:09:1d:07:25:64:3e:5f:42:67:9d:
8c:ee:5d:5e:26:d1:04:3b:dc:fa:4d:d7:31:36:b3:
80:0a:aa:2b:b1:03:50:6b:c4:24:ec:8c:f0:36:79:
8e:54:97:2c:71:0f:ed:59:e7:05:e9:b6:09:ea:47:
50:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:C1:D6:BE:3B:A7:89:C5:DA:EB:59:7A:13:5D:E5:EC:CC:AB:8F:95
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/44ee8d-2ae8-4844-a935-d24c2ce23ab7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/44ee8d-2ae8-4844-a935-d24c2ce23ab7/1/j8HWvjunicXa61l6E13l7Myrj5U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.61.0/24
193.104.108.0/24
Signature Algorithm: sha256WithRSAEncryption
32:7d:7f:77:12:c1:99:40:50:ee:39:6f:d2:c7:00:ac:cb:5a:
6b:92:60:1b:28:13:2d:aa:4f:73:76:6e:95:d7:89:7c:61:45:
9f:9c:f1:60:08:79:cf:be:28:44:42:5a:1c:63:f8:f5:11:38:
da:45:a0:aa:f8:94:f4:e9:c3:0d:40:89:6d:80:b3:05:c6:f2:
9b:6a:7d:7f:f2:d0:f5:c6:45:c1:95:77:ca:2b:ff:55:5b:0f:
bf:33:6a:48:92:f9:40:9a:34:3a:72:1e:f6:93:a8:65:2d:47:
b6:f6:a1:e9:29:21:00:98:cb:66:2a:b9:40:31:64:47:73:ab:
51:44:8e:53:40:fc:6f:3b:6d:42:0c:65:a7:d5:8b:f4:2f:67:
3b:e1:7d:a3:7b:8e:ed:c9:12:b6:03:7b:9c:56:96:35:2c:cc:
44:a3:60:d6:7d:f2:1b:d3:c5:0b:3e:72:5f:88:1f:f4:1a:98:
a5:7c:36:0b:cb:08:16:2e:7b:e3:d1:81:88:c5:4d:ab:2f:2e:
d4:31:34:33:44:b6:bd:fb:bc:85:89:e4:9b:10:34:79:c6:03:
3a:88:03:6c:18:3f:51:26:a3:df:75:48:e5:ee:0b:c8:f2:70:
d1:bf:ae:08:5f:55:c0:2c:a4:d8:3f:70:4b:31:76:49:d3:dc:
47:94:6a:0d
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgISAZQl/ZBxHOKjeu9EWQIJdZJWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDc0OTIyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZmMxZDZiZTNiYTc4OWM1ZGFlYjU5N2ExMzVkZTVlY2NjYWI4Zjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp++n1Iv6YUwimHpsm2GyFxBto5Yk
+rnSPjbILlVQPQcLOd6X26KvAxrjQVUYQjo0Ac1T8WBVeDImRCmWuHGcyW9JnaiP
mpqsramvltIpr/5Gi4xuH7CK6gr59SL9i8j2OvkCEAwPzamItlvwftoIrRwgCH03
JoTMHC8kUCPnP9z2oYuo+X0roux1pFzyJ0YMa9d0/sVhXl3PgPd78FH4a70XaEFV
Mr1O+BLiYhHeetPy+FsBL+qhDDJS2IPRBd1G8tPJpzK3vAkdByVkPl9CZ52M7l1e
JtEEO9z6TdcxNrOACqorsQNQa8Qk7IzwNnmOVJcscQ/tWecF6bYJ6kdQWwIDAQAB
o4ICijCCAoYwHQYDVR0OBBYEFI/B1r47p4nF2utZehNd5ezMq4+VMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2E2LzQ0ZWU4
ZC0yYWU4LTQ4NDQtYTkzNS1kMjRjMmNlMjNhYjcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTYvNDRlZThk
LTJhZTgtNDg0NC1hOTM1LWQyNGMyY2UyM2FiNy8xL2o4SFd2anVuaWNYYTYxbDZF
MTNsN015cmo1VS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF
BwEHAQH/BBYwFDASBAIAATAMAwQAwS49AwQAwWhsMA0GCSqGSIb3DQEBCwUAA4IB
AQAyfX93EsGZQFDuOW/SxwCsy1prkmAbKBMtqk9zdm6V14l8YUWfnPFgCHnPvihE
QlocY/j1ETjaRaCq+JT06cMNQIltgLMFxvKban1/8tD1xkXBlXfKK/9VWw+/M2pI
kvlAmjQ6ch72k6hlLUe29qHpKSEAmMtmKrlAMWRHc6tRRI5TQPxvO21CDGWn1Yv0
L2c74X2je47tyRK2A3ucVpY1LMxEo2DWffIb08ULPnJfiB/0GpilfDYLywgWLnvj
0YGIxU2rLy7UMTQzRLa9+7yFieSbEDR5xgM6iANsGD9RJqPfdUjl7gvI8nDRv64I
X1XALKTYP3BLMXZJ09xHlGoN
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:24:38 2025 by rpki-client