Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/n-FhAeQh0hzbXlsFouKJ37dz9Mk.cer
File: n-FhAeQh0hzbXlsFouKJ37dz9Mk.cer (raw, json)
Hash identifier: 5Zw64ZRpRiZkR0hVOHZJC71+VFGHNhZiMpBH/HXWll0=
Subject key identifier: 9F:E1:61:01:E4:21:D2:1C:DB:5E:5B:05:A2:E2:89:DF:B7:73:F4:C9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B2A54C5FF8D66AF6146241C037E7CD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:47:55 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 41074
IP: 91.239.21.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:a5:4c:5f:f8:d6:6a:f6:14:62:41:c0:37:e7:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9fe16101e421d21cdb5e5b05a2e289dfb773f4c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a6:76:5e:e8:3a:9b:8f:c4:4f:92:ee:c1:6a:
4c:14:fe:9c:a2:9c:46:4b:21:eb:c0:c4:fe:1c:00:
a3:36:43:9c:1b:06:ab:4b:58:2b:d4:ad:ab:cb:91:
44:ba:0e:a9:28:17:4c:6e:0e:a5:3f:a1:a3:aa:74:
a0:70:c2:e4:d1:58:cb:56:2b:e1:46:27:ea:01:ab:
57:a2:37:ea:97:25:34:90:34:fa:ae:6a:ae:d4:63:
79:d3:35:36:41:1a:8e:cb:78:cb:f1:bf:cf:26:09:
71:8c:4a:3b:86:67:87:94:8a:f7:37:01:81:a0:29:
72:15:5d:c6:eb:87:8e:84:e7:d9:b8:93:c6:39:db:
41:02:71:15:f7:36:da:d7:86:97:59:04:d7:08:db:
8e:ee:30:19:97:0d:fb:8b:80:e6:97:c5:48:da:9d:
50:18:b9:bf:3e:5d:42:fd:5e:6b:59:27:ff:74:35:
78:ae:1d:2d:ea:d9:ea:1f:92:1b:f8:87:c1:cb:0a:
05:4d:2c:1b:e3:b0:cd:53:b7:67:25:08:f0:6a:16:
d9:fc:f5:23:3a:65:45:6b:e5:2e:a9:6f:17:1a:78:
64:74:5f:73:b5:ba:e8:59:08:b4:af:92:cd:09:0f:
b8:4f:3d:3b:ef:3f:07:db:f3:ae:00:41:93:d6:09:
ff:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E1:61:01:E4:21:D2:1C:DB:5E:5B:05:A2:E2:89:DF:B7:73:F4:C9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.21.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
41074
Signature Algorithm: sha256WithRSAEncryption
a8:d6:49:8e:07:8c:84:74:b3:50:f1:ef:7c:ac:b7:d0:50:8a:
4d:dc:c7:a1:0b:69:4a:ea:b5:ef:7b:20:ad:c2:13:f4:17:e3:
8b:ce:2b:0f:92:27:45:a4:54:17:fb:ef:38:16:fd:91:d0:79:
ae:91:2a:2b:32:c4:e5:70:19:be:4b:54:cd:fd:54:8a:59:1b:
2c:b9:b1:c1:65:a5:d7:d2:26:13:43:f1:03:ae:90:50:2a:a1:
e5:97:9e:7f:87:94:7a:f9:81:f5:17:56:55:68:3d:6b:ba:77:
c7:41:91:78:7d:52:62:ad:b0:98:d5:46:a1:96:95:4b:b6:17:
9c:32:31:64:5a:37:a1:9a:08:1a:7a:71:0b:ec:e5:ea:27:44:
5d:8b:a5:09:20:ea:8b:01:60:ec:7d:93:45:65:e2:8f:37:de:
94:04:7a:35:89:bf:08:73:1d:4d:1c:33:12:f8:33:e0:88:c7:
56:b5:1c:f2:25:30:09:13:d3:9f:f4:e6:4b:87:ea:3a:14:1d:
41:b6:71:be:96:4f:74:c3:d8:4b:39:dd:d6:d4:13:a6:69:2c:
6c:0e:7a:8f:46:75:1b:1b:54:dc:32:38:aa:cc:26:38:df:06:
25:33:4c:77:05:3e:84:65:ce:b6:24:0d:94:ae:b2:3d:69:b1:
34:c3:7b:93
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZQksqVMX/jWavYUYkHAN+fNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDE0NzU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZmUxNjEwMWU0MjFkMjFjZGI1ZTViMDVhMmUyODlkZmI3NzNmNGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKZ2Xug6m4/ET5LuwWpMFP6copxG
SyHrwMT+HACjNkOcGwarS1gr1K2ry5FEug6pKBdMbg6lP6GjqnSgcMLk0VjLVivh
RifqAatXojfqlyU0kDT6rmqu1GN50zU2QRqOy3jL8b/PJglxjEo7hmeHlIr3NwGB
oClyFV3G64eOhOfZuJPGOdtBAnEV9zba14aXWQTXCNuO7jAZlw37i4Dml8VI2p1Q
GLm/Pl1C/V5rWSf/dDV4rh0t6tnqH5Ib+IfBywoFTSwb47DNU7dnJQjwahbZ/PUj
OmVFa+UuqW8XGnhkdF9ztbroWQi0r5LNCQ+4Tz077z8H2/OuAEGT1gn/aQIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFJ/hYQHkIdIc215bBaLiid+3c/TJMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2UzLzE1NmVl
Yi04MDE5LTRkNjAtOGVhZC1lOTcxMWY1NzZiNGUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTMvMTU2ZWVi
LTgwMTktNGQ2MC04ZWFkLWU5NzExZjU3NmI0ZS8xL24tRmhBZVFoMGh6Ylhsc0Zv
dUtKMzdkejlNay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAW+8VMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwCgcjANBgkqhkiG9w0BAQsFAAOCAQEAqNZJjgeMhHSzUPHvfKy30FCKTdzHoQtp
Suq173sgrcIT9Bfji84rD5InRaRUF/vvOBb9kdB5rpEqKzLE5XAZvktUzf1Uilkb
LLmxwWWl19ImE0PxA66QUCqh5Zeef4eUevmB9RdWVWg9a7p3x0GReH1SYq2wmNVG
oZaVS7YXnDIxZFo3oZoIGnpxC+zl6idEXYulCSDqiwFg7H2TRWXijzfelAR6NYm/
CHMdTRwzEvgz4IjHVrUc8iUwCRPTn/TmS4fqOhQdQbZxvpZPdMPYSznd1tQTpmks
bA56j0Z1GxtU3DI4qswmON8GJTNMdwU+hGXOtiQNlK6yPWmxNMN7kw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 23:08:00 2025 by rpki-client