Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nyvDxVZNQ0OBy3i6R61Yvk096qg.cer
File: nyvDxVZNQ0OBy3i6R61Yvk096qg.cer (raw, json)
Hash identifier: tEW6UVIB9GMwf6JRkaQMXNHITilJIqtm5mX7wQJPHTc=
Subject key identifier: 9F:2B:C3:C5:56:4D:43:43:81:CB:78:BA:47:AD:58:BE:4D:3D:EA:A8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C17162D19E78B554807636F34221D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:47:42 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 43024
AS: 199231
IP: 77.95.16.0/22
IP: 185.4.228.0/22
IP: 2a02:c5c0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:17:16:2d:19:e7:8b:55:48:07:63:6f:34:22:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f2bc3c5564d434381cb78ba47ad58be4d3deaa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f7:36:26:a6:d8:c0:a5:27:de:5e:f6:93:ff:
ef:9a:31:7e:8b:9f:35:d9:27:b8:d9:38:b6:8a:f2:
4a:62:31:25:2c:e1:33:7a:62:35:6b:78:85:25:f5:
f6:9f:f0:d5:eb:8a:41:33:d0:d4:05:48:31:df:ec:
55:2d:d1:f7:b3:fb:9c:ff:03:3d:f7:4d:dd:ac:fc:
4e:5a:7c:bd:00:9f:f7:4b:46:0c:a1:98:5c:32:eb:
9e:f6:d1:76:c6:44:da:04:c2:e8:b3:c5:d2:16:12:
36:23:24:74:f6:eb:c9:03:da:7f:81:9e:9e:d2:29:
60:21:64:17:1f:21:e7:fd:52:f2:75:bc:62:92:51:
6f:a7:3d:9d:08:fc:2b:4e:16:ba:9d:7a:50:74:55:
f2:a6:70:1e:e5:ce:20:2c:63:ea:ef:34:3d:4b:f6:
9c:a0:d7:f9:65:19:bc:56:34:c0:da:62:48:b7:40:
c3:4d:93:76:eb:a8:64:3a:f5:bb:c1:b5:4d:76:b7:
d4:b1:79:35:3b:75:26:37:45:df:89:fb:5a:27:40:
3f:92:54:5f:81:45:a7:b0:3d:d6:26:15:07:37:00:
ec:fb:65:36:74:1e:73:4c:bd:9a:11:7a:90:fb:86:
0e:81:49:2a:e8:a1:04:14:ed:1d:df:7e:f1:90:43:
e6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:2B:C3:C5:56:4D:43:43:81:CB:78:BA:47:AD:58:BE:4D:3D:EA:A8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/36bb6d-fc73-4449-a527-55426381953c/1/nyvDxVZNQ0OBy3i6R61Yvk096qg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.95.16.0/22
185.4.228.0/22
IPv6:
2a02:c5c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43024
199231
Signature Algorithm: sha256WithRSAEncryption
21:2e:99:2e:3e:13:21:4d:47:88:01:5e:57:16:50:33:2a:cf:
f8:f4:91:a3:63:9a:ff:24:ce:89:dd:0d:8b:af:ff:90:32:ff:
07:86:ab:f7:0a:a1:c8:b5:2d:3a:e4:1f:40:34:56:2e:44:cc:
a7:5f:df:18:66:25:14:1f:88:1f:d2:c6:77:fd:6d:70:0d:76:
8d:75:21:5a:6b:f3:ab:f0:3e:60:5a:20:8c:ab:85:6b:c8:df:
e7:7f:d9:1c:22:13:f2:26:40:5a:f3:ef:9b:3d:26:4a:f6:69:
73:c2:3a:29:af:be:1d:0f:f9:ab:28:2f:e6:bc:73:8f:0a:82:
6f:01:2e:a3:e8:06:f6:2f:51:53:e7:ab:8f:10:60:6e:4b:14:
27:a1:8a:fa:35:2d:4e:1e:e8:73:d9:57:d8:f1:b5:e1:df:47:
49:ac:29:5c:36:0c:f9:2d:50:a8:21:df:3d:1e:f2:d5:ba:d9:
93:86:bf:7e:70:f5:71:51:a6:6d:d0:d9:45:26:87:d1:23:03:
80:cb:a0:ef:20:dc:b2:42:99:d2:8e:91:65:5f:e5:4c:51:6b:
02:9b:e1:b8:79:36:5d:ad:13:a9:f0:33:52:b0:e6:78:53:6b:
3a:7b:50:88:dc:11:56:61:d5:83:56:9e:1c:c2:d7:86:8d:27:
91:3b:0f:c3
-----BEGIN CERTIFICATE-----
MIIFrjCCBJagAwIBAgISAZQfjBcWLRnni1VIB2NvNCIdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDE0NzQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZjJiYzNjNTU2NGQ0MzQzODFjYjc4YmE0N2FkNThiZTRkM2RlYWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvc2JqbYwKUn3l72k//vmjF+i581
2Se42Ti2ivJKYjElLOEzemI1a3iFJfX2n/DV64pBM9DUBUgx3+xVLdH3s/uc/wM9
903drPxOWny9AJ/3S0YMoZhcMuue9tF2xkTaBMLos8XSFhI2IyR09uvJA9p/gZ6e
0ilgIWQXHyHn/VLydbxiklFvpz2dCPwrTha6nXpQdFXypnAe5c4gLGPq7zQ9S/ac
oNf5ZRm8VjTA2mJIt0DDTZN266hkOvW7wbVNdrfUsXk1O3UmN0XfiftaJ0A/klRf
gUWnsD3WJhUHNwDs+2U2dB5zTL2aEXqQ+4YOgUkq6KEEFO0d337xkEPmAwIDAQAB
o4ICujCCArYwHQYDVR0OBBYEFJ8rw8VWTUNDgct4uketWL5NPeqoMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYxLzM2YmI2
ZC1mYzczLTQ0NDktYTUyNy01NTQyNjM4MTk1M2MvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjEvMzZiYjZk
LWZjNzMtNDQ0OS1hNTI3LTU1NDI2MzgxOTUzYy8xL255dkR4VlpOUTBPQnkzaTZS
NjFZdmswOTZxZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQCTV8QAwQCuQTkMA0EAgACMAcDBQMqAsXAMB8G
CCsGAQUFBwEIAQH/BBAwDqAMMAoCAwCoEAIDAwo/MA0GCSqGSIb3DQEBCwUAA4IB
AQAhLpkuPhMhTUeIAV5XFlAzKs/49JGjY5r/JM6J3Q2Lr/+QMv8Hhqv3CqHItS06
5B9ANFYuRMynX98YZiUUH4gf0sZ3/W1wDXaNdSFaa/Or8D5gWiCMq4VryN/nf9kc
IhPyJkBa8++bPSZK9mlzwjopr74dD/mrKC/mvHOPCoJvAS6j6Ab2L1FT56uPEGBu
SxQnoYr6NS1OHuhz2VfY8bXh30dJrClcNgz5LVCoId89HvLVutmThr9+cPVxUaZt
0NlFJofRIwOAy6DvINyyQpnSjpFlX+VMUWsCm+G4eTZdrROp8DNSsOZ4U2s6e1CI
3BFWYdWDVp4cwteGjSeROw/D
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:58:54 2025 by rpki-client