Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jFAC9jnoGVjQ-bNYWu12cH0mJd4.cer
File: jFAC9jnoGVjQ-bNYWu12cH0mJd4.cer (raw, json)
Hash identifier: HBQ0IIbJh9jBbYd1qFvMzEIhpYCE403muHPTE+kJo8o=
Subject key identifier: 8C:50:02:F6:39:E8:19:58:D0:F9:B3:58:5A:ED:76:70:7D:26:25:DE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228D867EF9E87CBBDCCED8BA0ACC4B3D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ce/3a6128-bf03-4ca5-a766-6f06191444ac/1/jFAC9jnoGVjQ-bNYWu12cH0mJd4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ce/3a6128-bf03-4ca5-a766-6f06191444ac/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:07 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2a01:59c0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:86:7e:f9:e8:7c:bb:dc:ce:d8:ba:0a:cc:4b:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c5002f639e81958d0f9b3585aed76707d2625de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:49:73:0c:1f:32:07:78:d6:2a:49:af:95:58:
9d:fd:aa:0b:fa:33:d7:b8:f5:e8:ba:06:16:5f:85:
d1:c5:b5:37:3f:64:2a:74:e8:0a:38:32:62:6a:c0:
27:1c:29:84:fc:e0:42:25:cd:e2:bd:27:d6:05:c7:
eb:57:2b:8a:0c:af:7a:d4:4a:2a:ca:a7:b7:87:1b:
2e:43:db:8c:e0:55:97:39:4c:dc:a8:a6:3a:64:96:
ce:f6:d5:73:55:a0:a2:32:dd:b5:1b:ca:89:14:29:
b7:c8:96:27:4b:2c:d9:e7:c1:a3:7b:43:a9:f4:5d:
fb:0e:e7:e0:5e:57:7a:8b:14:51:85:58:2f:f8:03:
b1:5b:fa:fe:5c:dd:02:8b:91:42:aa:84:b5:c2:7e:
b2:1e:19:dd:12:05:a4:25:2c:54:d2:cf:0b:f3:fe:
fd:c4:7f:92:3b:d7:0e:f9:e8:9c:13:73:d9:54:ee:
4d:2c:87:48:7b:00:12:b3:d9:94:d0:b4:50:f2:72:
35:32:e0:0d:04:fb:cf:b4:40:94:e3:84:f9:19:b2:
cc:1b:c3:7c:d6:2e:e0:cd:72:d6:69:73:4a:2f:38:
c3:09:f4:80:52:8d:14:24:a6:14:dd:20:5f:13:c3:
82:de:78:fd:b4:2a:e2:0c:db:3f:eb:fd:1b:1e:67:
ac:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:50:02:F6:39:E8:19:58:D0:F9:B3:58:5A:ED:76:70:7D:26:25:DE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3a6128-bf03-4ca5-a766-6f06191444ac/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3a6128-bf03-4ca5-a766-6f06191444ac/1/jFAC9jnoGVjQ-bNYWu12cH0mJd4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:59c0::/32
Signature Algorithm: sha256WithRSAEncryption
83:f0:fa:82:64:9c:f6:d1:18:74:82:f5:6c:b0:d3:71:54:af:
16:fc:6c:23:f4:99:cc:5e:3a:49:a0:e0:87:83:0f:3e:d9:e2:
62:d8:54:d8:8b:b6:01:ae:48:a7:ac:a4:55:8a:7b:25:d4:3d:
da:5b:4a:8f:bb:a7:52:f8:c8:e6:20:6e:85:13:da:89:c2:04:
54:db:16:0d:2c:08:b3:4a:a5:b1:14:71:65:6f:ce:66:8c:84:
9b:ef:43:ca:dc:4f:cf:3f:a9:31:4c:29:3d:84:e5:b2:71:aa:
35:2b:89:dd:ee:08:89:bf:5c:4e:db:07:d2:0f:06:f8:56:06:
2a:e1:23:9f:a7:09:de:56:7b:53:b2:7e:42:36:7c:3f:51:dc:
e8:1d:ec:d7:37:af:6d:c6:61:e1:9f:3c:a5:64:97:2f:e1:66:
2c:fb:8b:72:db:9e:c6:a8:af:7d:8e:29:c3:44:91:ea:3a:aa:
47:fe:ee:23:02:57:ec:b0:b0:cc:f7:e3:88:d3:f0:4c:29:6b:
00:e6:07:35:70:08:20:a3:7f:83:78:b6:6b:31:b4:0f:39:de:
8f:65:9e:f4:74:88:2e:54:f0:db:8f:ec:9d:9a:70:92:4a:ef:
c5:0b:29:a4:d6:7d:06:15:65:a9:ec:79:06:27:09:d3:1d:4a:
d3:dd:a9:ee
-----BEGIN CERTIFICATE-----
MIIFeTCCBGGgAwIBAgISAZQijYZ++eh8u9zO2LoKzEs9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTU0ODA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YzUwMDJmNjM5ZTgxOTU4ZDBmOWIzNTg1YWVkNzY3MDdkMjYyNWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUlzDB8yB3jWKkmvlVid/aoL+jPX
uPXougYWX4XRxbU3P2QqdOgKODJiasAnHCmE/OBCJc3ivSfWBcfrVyuKDK961Eoq
yqe3hxsuQ9uM4FWXOUzcqKY6ZJbO9tVzVaCiMt21G8qJFCm3yJYnSyzZ58Gje0Op
9F37DufgXld6ixRRhVgv+AOxW/r+XN0Ci5FCqoS1wn6yHhndEgWkJSxU0s8L8/79
xH+SO9cO+eicE3PZVO5NLIdIewASs9mU0LRQ8nI1MuANBPvPtECU44T5GbLMG8N8
1i7gzXLWaXNKLzjDCfSAUo0UJKYU3SBfE8OC3nj9tCriDNs/6/0bHmes/wIDAQAB
o4IChTCCAoEwHQYDVR0OBBYEFIxQAvY56BlY0PmzWFrtdnB9JiXeMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2NlLzNhNjEy
OC1iZjAzLTRjYTUtYTc2Ni02ZjA2MTkxNDQ0YWMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2UvM2E2MTI4
LWJmMDMtNGNhNS1hNzY2LTZmMDYxOTE0NDRhYy8xL2pGQUM5am5vR1ZqUS1iTllX
dTEyY0gwbUpkNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAKgFZwDANBgkqhkiG9w0BAQsFAAOCAQEAg/D6
gmSc9tEYdIL1bLDTcVSvFvxsI/SZzF46SaDgh4MPPtniYthU2Iu2Aa5Ip6ykVYp7
JdQ92ltKj7unUvjI5iBuhRPaicIEVNsWDSwIs0qlsRRxZW/OZoyEm+9DytxPzz+p
MUwpPYTlsnGqNSuJ3e4Iib9cTtsH0g8G+FYGKuEjn6cJ3lZ7U7J+QjZ8P1Hc6B3s
1zevbcZh4Z88pWSXL+FmLPuLctuexqivfY4pw0SR6jqqR/7uIwJX7LCwzPfjiNPw
TClrAOYHNXAIIKN/g3i2azG0Dznej2We9HSILlTw24/snZpwkkrvxQsppNZ9BhVl
qex5BicJ0x1K092p7g==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:53:44 2025 by rpki-client