Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/n1ZG99ivwKkz-zMzPzcBPYOgTQA.cer
File: n1ZG99ivwKkz-zMzPzcBPYOgTQA.cer (raw, json)
Hash identifier: Rvq4e3ZXzRaqCSEFqywetxSjZAs2P0qfO0W+ZEknSQY=
Subject key identifier: 9F:56:46:F7:D8:AF:C0:A9:33:FB:33:33:3F:37:01:3D:83:A0:4D:00
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FDCF88E5893812231D391A346F6B52
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/n1ZG99ivwKkz-zMzPzcBPYOgTQA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:49:38 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 5628
AS: 6855
AS: 197642
IP: 78.98.0.0/15
IP: 84.47.0.0/17
IP: 87.197.0.0/16
IP: 91.127.0.0/16
IP: 91.223.209.0/24
IP: 95.102.0.0/15
IP: 178.40.0.0/15
IP: 185.19.72.0/22
IP: 194.154.224.0/19
IP: 195.91.0.0/17
IP: 195.146.128.0/19
IP: 212.5.192.0/19
IP: 213.81.128.0/17
IP: 213.160.160.0/19
IP: 2a00:12a8::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:cf:88:e5:89:38:12:23:1d:39:1a:34:6f:6b:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f5646f7d8afc0a933fb33333f37013d83a04d00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:23:fa:5f:58:01:8b:2a:6f:b1:f0:eb:e9:30:
15:8c:33:86:c8:85:6c:94:97:f0:83:d1:90:10:27:
61:43:0b:7c:3c:9e:f0:67:45:29:e9:d2:a1:b5:c0:
98:67:49:0b:2d:16:56:b5:87:17:ae:dc:93:c9:c0:
03:7a:5b:b3:0c:2c:3b:c1:70:12:c8:40:0e:1a:a1:
50:a9:54:68:2d:9e:1f:a6:62:2f:c0:51:2f:70:c4:
6c:b6:34:99:dc:9e:9f:d5:61:fc:e5:bc:4c:65:f5:
b6:6e:f6:1b:78:c0:f0:9a:3e:3c:46:74:6f:68:80:
f6:10:4b:02:a7:db:7e:58:a6:c7:cc:c5:15:87:22:
69:a5:2e:ae:30:b6:cf:1d:85:44:c5:fa:77:92:18:
14:09:29:ea:d8:9e:e8:02:a2:db:87:db:d4:06:6b:
71:9d:ca:80:06:03:a1:de:96:5c:06:4f:53:90:a0:
21:10:e4:84:a8:3b:88:01:14:fc:7e:b4:22:9d:30:
6e:7a:2d:28:c2:e3:20:9a:d1:f5:4f:88:25:23:6e:
41:ed:ca:72:0e:97:ca:3a:1d:3a:7b:80:38:28:95:
c8:6a:31:cc:82:6c:5e:1b:a1:67:31:02:9e:4c:b6:
15:00:01:f8:fa:b6:50:f8:de:07:05:03:f9:21:24:
03:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:56:46:F7:D8:AF:C0:A9:33:FB:33:33:3F:37:01:3D:83:A0:4D:00
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/n1ZG99ivwKkz-zMzPzcBPYOgTQA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.98.0.0/15
84.47.0.0/17
87.197.0.0/16
91.127.0.0/16
91.223.209.0/24
95.102.0.0/15
178.40.0.0/15
185.19.72.0/22
194.154.224.0/19
195.91.0.0/17
195.146.128.0/19
212.5.192.0/19
213.81.128.0/17
213.160.160.0/19
IPv6:
2a00:12a8::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
5628
6855
197642
Signature Algorithm: sha256WithRSAEncryption
01:02:10:7c:33:65:2c:b8:6d:f5:12:6e:30:3b:2f:52:80:e8:
cd:99:f2:9d:92:e7:e4:a7:c1:8f:15:e6:8b:f1:c6:6c:c5:83:
63:34:1c:8f:5a:75:18:bf:f4:93:db:f5:5c:0e:ae:cb:5b:c2:
5b:8d:1c:bc:87:5f:6e:d3:4c:8c:88:3a:41:3a:dd:ca:65:00:
a7:26:76:ca:f4:2b:65:d5:0e:d5:ce:e5:f6:b9:f0:33:19:3f:
97:ae:c5:75:33:af:ef:a2:8d:1a:a3:d5:c8:ac:97:a4:c7:b3:
79:cd:17:ff:81:81:a5:87:03:d4:e5:4b:c3:a1:e4:b7:85:a0:
67:48:71:eb:10:eb:6e:49:bc:db:ab:fa:a9:45:db:46:1a:5a:
c7:4d:78:bf:60:16:5f:96:a5:b7:b6:a3:ed:d6:a4:32:a7:c7:
60:f4:eb:cf:f3:fb:a5:32:43:ef:28:c0:47:64:17:82:ea:37:
9c:71:e8:52:5a:6a:8e:2a:8a:df:08:00:61:ce:53:04:7b:5a:
0e:6f:cb:d4:00:eb:3b:64:73:b3:36:f3:a2:bd:c9:5e:4a:9d:
65:2e:13:3c:19:6e:d0:16:b7:b8:43:f4:37:6a:44:45:56:39:
ac:fe:78:f1:5c:46:87:fd:76:a6:42:9f:11:e2:c5:33:c0:7c:
d7:e2:ac:28
-----BEGIN CERTIFICATE-----
MIIF9DCCBNygAwIBAgISAZQl/c+I5Yk4EiMdORo0b2tSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDc0OTM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZjU2NDZmN2Q4YWZjMGE5MzNmYjMzMzMzZjM3MDEzZDgzYTA0ZDAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyP6X1gBiypvsfDr6TAVjDOGyIVs
lJfwg9GQECdhQwt8PJ7wZ0Up6dKhtcCYZ0kLLRZWtYcXrtyTycADeluzDCw7wXAS
yEAOGqFQqVRoLZ4fpmIvwFEvcMRstjSZ3J6f1WH85bxMZfW2bvYbeMDwmj48RnRv
aID2EEsCp9t+WKbHzMUVhyJppS6uMLbPHYVExfp3khgUCSnq2J7oAqLbh9vUBmtx
ncqABgOh3pZcBk9TkKAhEOSEqDuIART8frQinTBuei0owuMgmtH1T4glI25B7cpy
DpfKOh06e4A4KJXIajHMgmxeG6FnMQKeTLYVAAH4+rZQ+N4HBQP5ISQDpwIDAQAB
o4IDADCCAvwwHQYDVR0OBBYEFJ9WRvfYr8CpM/szMz83AT2DoE0AMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzAyLzkxNjkx
Ny04OGM1LTRlN2ItODExZS03ZDMyY2EwNjViNjYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDIvOTE2OTE3
LTg4YzUtNGU3Yi04MTFlLTdkMzJjYTA2NWI2Ni8xL24xWkc5OWl2d0trei16TXpQ
emNCUFlPZ1RRQS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMHcGCCsGAQUF
BwEHAQH/BGgwZjBVBAIAATBPAwMBTmIDBAdULwADAwBXxQMDAFt/AwQAW9/RAwMB
X2YDAwGyKAMEArkTSAMEBcKa4AMEB8NbAAMEBcOSgAMEBdQFwAMEB9VRgAMEBdWg
oDANBAIAAjAHAwUDKgASqDAiBggrBgEFBQcBCAEB/wQTMBGgDzANAgIV/AICGscC
AwMECjANBgkqhkiG9w0BAQsFAAOCAQEAAQIQfDNlLLht9RJuMDsvUoDozZnynZLn
5KfBjxXmi/HGbMWDYzQcj1p1GL/0k9v1XA6uy1vCW40cvIdfbtNMjIg6QTrdymUA
pyZ2yvQrZdUO1c7l9rnwMxk/l67FdTOv76KNGqPVyKyXpMezec0X/4GBpYcD1OVL
w6Hkt4WgZ0hx6xDrbkm826v6qUXbRhpax014v2AWX5alt7aj7dakMqfHYPTrz/P7
pTJD7yjAR2QXguo3nHHoUlpqjiqK3wgAYc5TBHtaDm/L1ADrO2Rzszbzor3JXkqd
ZS4TPBlu0Ba3uEP0N2pERVY5rP548VxGh/12pkKfEeLFM8B81+KsKA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:18:32 2025 by rpki-client