Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/l8dX8vOyKQu8KNZfm98AFvYfE5c.cer
File: l8dX8vOyKQu8KNZfm98AFvYfE5c.cer (raw, json)
Hash identifier: 68K6LSTpPJe1ryH+gQiMHBWKuxqW+HutZ+NY8ftfxf0=
Subject key identifier: 97:C7:57:F2:F3:B2:29:0B:BC:28:D6:5F:9B:DF:00:16:F6:1F:13:97
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194236A4C40E9C5C7289BD2A94B021194AF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:49:16 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 41816
IP: 91.143.16.0/20
IP: 185.209.44.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:4c:40:e9:c5:c7:28:9b:d2:a9:4b:02:11:94:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=97c757f2f3b2290bbc28d65f9bdf0016f61f1397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:69:05:d4:49:03:e8:72:c9:49:fd:18:26:f2:
72:b1:bb:ff:0b:14:ea:2d:53:e5:0c:0e:0b:48:ba:
f2:3b:ec:b3:a4:63:a8:19:48:ba:08:95:e8:7a:20:
b4:be:cb:6f:c9:93:a7:69:55:24:16:63:a4:be:96:
b7:6a:aa:6b:58:46:84:f7:52:2b:55:55:d2:ff:48:
2b:46:b2:8c:88:4e:1e:5f:3a:7b:b7:d0:53:fa:53:
12:30:73:bf:6f:2b:0e:55:5f:ba:39:81:67:6d:c0:
cd:2d:9b:42:1d:87:e3:43:b6:41:b2:18:86:83:37:
8a:af:ab:74:5d:3a:52:fa:ab:ff:3b:15:0b:a2:89:
df:35:a6:9d:90:86:a8:34:1f:d3:53:ff:dd:47:cc:
d7:93:ef:d9:51:05:a8:60:1a:7c:fd:c0:50:43:92:
98:e5:3e:37:3a:2d:98:1f:b4:55:59:23:78:c5:eb:
72:e4:3c:af:20:cd:2e:f5:e5:5f:c0:1c:77:c3:41:
ca:77:40:c8:44:6f:14:07:a3:cd:03:de:b2:eb:05:
bc:27:df:1c:b3:8b:64:ad:da:3e:c7:4c:fe:59:f8:
c4:3d:44:84:bf:7d:33:2f:2f:80:ee:6a:1c:32:40:
c5:15:57:02:bd:fb:6e:52:31:d6:96:38:71:cd:d7:
37:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C7:57:F2:F3:B2:29:0B:BC:28:D6:5F:9B:DF:00:16:F6:1F:13:97
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/7cab15-c904-4236-89af-2093b6dffa64/1/l8dX8vOyKQu8KNZfm98AFvYfE5c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.143.16.0/20
185.209.44.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
41816
Signature Algorithm: sha256WithRSAEncryption
a6:9c:76:44:67:03:31:8b:f1:f2:1b:0e:ea:5b:ec:f4:21:6e:
70:73:45:2c:3e:c6:b4:11:e7:23:8e:c3:a5:5c:80:38:3f:af:
02:e7:69:d6:4e:61:31:85:69:30:b6:57:95:19:bb:50:e3:f4:
b2:d6:b8:b0:e9:6f:4f:dc:1f:39:94:79:c3:b4:5f:35:96:89:
69:c3:d8:eb:b8:99:de:d4:9a:9f:cb:87:72:d3:7e:05:2b:23:
80:cc:fc:21:30:6f:c9:9c:ab:08:f5:98:48:a9:bb:75:e0:3c:
c0:90:06:d5:32:a6:3e:33:09:38:13:4b:fc:c2:c0:cf:68:77:
61:0b:fd:0e:79:dd:7e:8f:c2:3d:79:59:35:4c:f8:e3:46:70:
f6:e9:61:d5:04:cf:06:02:a6:4e:91:f1:a0:4c:5e:63:6b:a3:
c3:14:75:3f:7f:2f:cc:6b:f4:4b:8f:05:98:21:f5:1f:23:ff:
c8:5a:dc:53:cf:f8:81:0a:63:e9:bf:b4:77:80:bd:3a:4e:70:
5a:02:1a:6d:73:03:db:5a:53:8f:df:cb:24:cd:96:b8:e2:43:
a5:56:3a:13:05:be:41:f3:9c:ec:d7:ae:eb:7a:35:fe:73:e7:
1b:9e:64:91:88:7e:55:c4:2c:1b:21:53:cd:cf:45:a0:51:f1:
99:46:be:99
-----BEGIN CERTIFICATE-----
MIIFmjCCBIKgAwIBAgISAZQjakxA6cXHKJvSqUsCEZSvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTk0OTE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5N2M3NTdmMmYzYjIyOTBiYmMyOGQ2NWY5YmRmMDAxNmY2MWYxMzk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8GkF1EkD6HLJSf0YJvJysbv/CxTq
LVPlDA4LSLryO+yzpGOoGUi6CJXoeiC0vstvyZOnaVUkFmOkvpa3aqprWEaE91Ir
VVXS/0grRrKMiE4eXzp7t9BT+lMSMHO/bysOVV+6OYFnbcDNLZtCHYfjQ7ZBshiG
gzeKr6t0XTpS+qv/OxULoonfNaadkIaoNB/TU//dR8zXk+/ZUQWoYBp8/cBQQ5KY
5T43Oi2YH7RVWSN4xety5DyvIM0u9eVfwBx3w0HKd0DIRG8UB6PNA96y6wW8J98c
s4tkrdo+x0z+WfjEPUSEv30zLy+A7mocMkDFFVcCvftuUjHWljhxzdc3KwIDAQAB
o4ICpjCCAqIwHQYDVR0OBBYEFJfHV/LzsikLvCjWX5vfABb2HxOXMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2MwLzdjYWIx
NS1jOTA0LTQyMzYtODlhZi0yMDkzYjZkZmZhNjQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzAvN2NhYjE1
LWM5MDQtNDIzNi04OWFmLTIwOTNiNmRmZmE2NC8xL2w4ZFg4dk95S1F1OEtOWmZt
OThBRnZZZkU1Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCUGCCsGAQUF
BwEHAQH/BBYwFDASBAIAATAMAwQEW48QAwQCudEsMBoGCCsGAQUFBwEIAQH/BAsw
CaAHMAUCAwCjWDANBgkqhkiG9w0BAQsFAAOCAQEAppx2RGcDMYvx8hsO6lvs9CFu
cHNFLD7GtBHnI47DpVyAOD+vAudp1k5hMYVpMLZXlRm7UOP0sta4sOlvT9wfOZR5
w7RfNZaJacPY67iZ3tSan8uHctN+BSsjgMz8ITBvyZyrCPWYSKm7deA8wJAG1TKm
PjMJOBNL/MLAz2h3YQv9Dnndfo/CPXlZNUz440Zw9ulh1QTPBgKmTpHxoExeY2uj
wxR1P38vzGv0S48FmCH1HyP/yFrcU8/4gQpj6b+0d4C9Ok5wWgIabXMD21pTj9/L
JM2WuOJDpVY6EwW+QfOc7Neu63o1/nPnG55kkYh+VcQsGyFTzc9FoFHxmUa+mQ==
-----END CERTIFICATE-----
Generated at Thu Apr 24 18:42:39 2025 by rpki-client