Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/jPJ69YYwRc-otYseJ3aSueHTje0.cer
File: jPJ69YYwRc-otYseJ3aSueHTje0.cer (raw, json)
Hash identifier: uguGXS3DWZjEZ9T9li+4o9P2CmQ9EOsV9q8vLLWpXy0=
Subject key identifier: 8C:F2:7A:F5:86:30:45:CF:A8:B5:8B:1E:27:76:92:B9:E1:D3:8D:ED
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FC30FDD336DC22867D50941935C84B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/91/ab7efb-2d60-4e69-9e06-01c996e0b7e7/1/jPJ69YYwRc-otYseJ3aSueHTje0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/91/ab7efb-2d60-4e69-9e06-01c996e0b7e7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:49:00 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 5.53.104.0/21
IP: 2a01:4f40::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:30:fd:d3:36:dc:22:86:7d:50:94:19:35:c8:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8cf27af5863045cfa8b58b1e277692b9e1d38ded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:52:23:91:41:d9:4b:0e:07:44:a8:f7:c9:c7:
af:79:c7:03:37:d3:bc:81:9b:b4:ba:5f:cf:31:9e:
e3:34:92:f7:bf:a2:b1:d4:d0:d3:28:33:e1:3e:f8:
89:58:4d:ad:8f:95:42:84:d2:da:97:58:2e:33:8f:
87:96:9a:e6:1c:59:d8:79:cb:74:77:25:ee:a8:de:
13:eb:6b:73:42:bc:7f:61:f2:6d:ca:d5:8c:96:41:
36:a5:a7:ab:18:52:25:8f:5b:7f:9d:d2:b8:e0:ce:
89:f5:d9:7e:34:c0:10:2c:50:bb:0f:f3:f9:d2:24:
10:d0:9e:1a:bd:fd:ab:d7:ae:8e:ee:88:a5:af:72:
c7:a4:19:d8:ae:46:6f:e4:9a:b7:59:4c:f4:c4:f2:
7c:c6:a0:e9:9b:c9:cc:56:45:cc:04:2f:e6:32:c2:
3a:24:fc:ab:19:34:1b:c6:fc:c6:03:25:c3:82:7f:
ff:26:60:7a:93:74:95:8f:b7:f5:fa:59:db:ea:36:
af:b4:cf:7e:a9:da:ef:70:52:29:11:72:fa:18:fa:
a1:dd:a9:34:b9:7c:72:c7:9b:eb:b1:68:b3:4b:e1:
7b:49:99:22:2a:3b:e6:1a:4b:ea:72:03:e9:c9:93:
0a:fa:0b:e4:61:3f:1d:38:ba:b9:de:3e:f7:d3:d3:
ef:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F2:7A:F5:86:30:45:CF:A8:B5:8B:1E:27:76:92:B9:E1:D3:8D:ED
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ab7efb-2d60-4e69-9e06-01c996e0b7e7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ab7efb-2d60-4e69-9e06-01c996e0b7e7/1/jPJ69YYwRc-otYseJ3aSueHTje0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.53.104.0/21
IPv6:
2a01:4f40::/32
Signature Algorithm: sha256WithRSAEncryption
7f:63:d6:39:dc:ce:cf:d4:bb:55:c1:94:2d:17:00:dc:84:00:
d5:4b:6e:24:6c:ef:c9:47:aa:72:d1:6e:7d:80:97:71:f1:51:
59:77:ef:fa:b7:3f:52:b2:39:39:8b:6d:44:ca:81:cf:8f:4b:
c2:59:82:9c:b2:55:fb:e7:d9:97:4a:16:bb:e8:ab:f2:e0:1b:
09:a3:c5:30:bd:51:8a:e3:1b:60:3b:70:fd:57:fd:ee:28:2e:
16:c6:cc:25:23:4b:93:bf:06:a7:05:2b:bd:47:56:99:21:46:
36:62:f5:d3:24:34:4d:04:c5:0c:63:01:67:4c:d8:6b:ee:48:
a7:34:f8:17:0b:8b:05:81:ac:38:fb:26:06:69:69:37:03:58:
59:71:72:c0:75:d9:2c:38:f9:7b:1f:a1:05:3e:9c:2b:79:b6:
ac:9d:7c:3c:ff:7f:ca:0d:0a:36:dd:56:25:39:ae:4a:80:58:
29:0b:c7:e5:1a:14:ec:c8:bb:d8:e8:cc:cd:b3:1a:4e:f2:4d:
49:be:db:17:90:c9:4b:3e:09:07:68:04:2f:f5:99:53:9b:6b:
41:4e:b3:a2:a6:ba:02:5b:f4:86:8e:9c:99:d0:5f:09:39:ef:
34:9c:2e:d3:97:2c:66:a2:38:6b:b7:02:8a:c2:e6:25:6b:de:
dc:53:5f:2a
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZQi/DD90zbcIoZ9UJQZNchLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTc0OTAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Y2YyN2FmNTg2MzA0NWNmYThiNThiMWUyNzc2OTJiOWUxZDM4ZGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlIjkUHZSw4HRKj3yceveccDN9O8
gZu0ul/PMZ7jNJL3v6Kx1NDTKDPhPviJWE2tj5VChNLal1guM4+HlprmHFnYect0
dyXuqN4T62tzQrx/YfJtytWMlkE2paerGFIlj1t/ndK44M6J9dl+NMAQLFC7D/P5
0iQQ0J4avf2r166O7oilr3LHpBnYrkZv5Jq3WUz0xPJ8xqDpm8nMVkXMBC/mMsI6
JPyrGTQbxvzGAyXDgn//JmB6k3SVj7f1+lnb6javtM9+qdrvcFIpEXL6GPqh3ak0
uXxyx5vrsWizS+F7SZkiKjvmGkvqcgPpyZMK+gvkYT8dOLq53j7309PvcwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFIzyevWGMEXPqLWLHid2krnh043tMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzkxL2FiN2Vm
Yi0yZDYwLTRlNjktOWUwNi0wMWM5OTZlMGI3ZTcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTEvYWI3ZWZi
LTJkNjAtNGU2OS05ZTA2LTAxYzk5NmUwYjdlNy8xL2pQSjY5WVl3UmMtb3RZc2VK
M2FTdWVIVGplMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQDBTVoMA0EAgACMAcDBQAqAU9AMA0GCSqGSIb3
DQEBCwUAA4IBAQB/Y9Y53M7P1LtVwZQtFwDchADVS24kbO/JR6py0W59gJdx8VFZ
d+/6tz9Ssjk5i21EyoHPj0vCWYKcslX759mXSha76Kvy4BsJo8UwvVGK4xtgO3D9
V/3uKC4WxswlI0uTvwanBSu9R1aZIUY2YvXTJDRNBMUMYwFnTNhr7kinNPgXC4sF
gaw4+yYGaWk3A1hZcXLAddksOPl7H6EFPpwrebasnXw8/3/KDQo23VYlOa5KgFgp
C8flGhTsyLvY6MzNsxpO8k1JvtsXkMlLPgkHaAQv9ZlTm2tBTrOiproCW/SGjpyZ
0F8JOe80nC7TlyxmojhrtwKKwuYla97cU18q
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:34:16 2025 by rpki-client