Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nz-YcVNtYL90vfaQYMkNVBB9jjg.cer
File: nz-YcVNtYL90vfaQYMkNVBB9jjg.cer (raw, json)
Hash identifier: 1u5+OVBq//JiICug6VfWsHnqujai5JGx6oreSjPL9aQ=
Subject key identifier: 9F:3F:98:71:53:6D:60:BF:74:BD:F6:90:60:C9:0D:54:10:7D:8E:38
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194282145EBE3DFD4BFA00FD23921F899AF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/23/f6bbd3-ae27-4dc7-b669-c5263b3303b9/1/nz-YcVNtYL90vfaQYMkNVBB9jjg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/23/f6bbd3-ae27-4dc7-b669-c5263b3303b9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 17:47:36 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.254.128.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:21:45:eb:e3:df:d4:bf:a0:0f:d2:39:21:f8:99:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 17:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f3f9871536d60bf74bdf69060c90d54107d8e38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2e:ba:e1:66:b4:13:16:00:8d:b0:01:e6:ba:
5b:ec:0b:35:95:93:b8:c6:d2:72:22:6e:34:36:2b:
65:cd:e0:81:b4:d4:d4:9f:1e:12:3a:fd:17:31:94:
79:e9:76:95:e2:07:6d:d7:6a:94:b0:76:10:e3:27:
36:a6:ac:30:5e:6d:42:c6:7a:70:44:5c:f7:d6:76:
f8:29:06:f0:67:13:b5:00:c6:6e:f5:b1:68:f0:d0:
91:9a:24:32:b9:a4:f0:2c:20:4c:01:63:40:60:7b:
d6:d9:29:2e:4f:24:50:b7:e0:79:b1:d1:d0:d1:22:
5f:05:3d:1e:36:04:7d:e8:3d:84:e0:fb:f4:78:2d:
63:af:22:78:8a:a5:7c:81:20:5b:f0:7e:42:6c:b0:
83:c0:6d:8e:78:92:5b:1b:ee:52:57:f9:3d:8c:22:
3c:25:ab:35:6d:90:bf:51:75:ee:ba:9c:8d:d0:dc:
3d:6d:23:97:ce:29:65:77:bf:21:91:54:7b:cc:5c:
19:ef:a0:de:59:df:8f:33:c6:2a:b4:71:0e:43:3a:
5e:ee:71:99:47:10:6c:22:51:3c:da:fc:af:79:41:
9a:c8:21:30:e8:36:0b:b3:34:cd:0c:5d:9c:a8:50:
2d:1c:e9:8e:30:2c:12:36:2a:49:19:a2:b8:96:b5:
cc:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:3F:98:71:53:6D:60:BF:74:BD:F6:90:60:C9:0D:54:10:7D:8E:38
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f6bbd3-ae27-4dc7-b669-c5263b3303b9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f6bbd3-ae27-4dc7-b669-c5263b3303b9/1/nz-YcVNtYL90vfaQYMkNVBB9jjg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.254.128.0/22
Signature Algorithm: sha256WithRSAEncryption
57:6c:35:4a:27:b3:c3:dd:b2:12:3a:c1:4f:72:fd:c3:2d:9d:
41:a1:02:3f:78:e0:4c:bf:48:d5:08:2b:6d:d1:52:c2:75:c4:
bc:13:65:94:f9:ef:48:13:29:64:f3:fd:41:cf:b7:e5:87:02:
dd:6e:6f:9f:e4:2f:32:3d:7e:98:1c:f0:e9:a4:ec:a8:a4:0b:
ed:67:88:03:8d:e9:59:63:cd:ed:f1:67:05:c8:e2:d1:50:72:
24:53:45:52:fb:d6:0e:42:fc:8e:b3:82:a0:ce:21:0c:42:7d:
20:7c:e6:29:3d:3b:ac:f9:47:06:c6:90:68:4a:7f:34:93:03:
e4:b5:9b:e7:e7:73:2a:ea:f7:1c:40:5e:19:bb:c2:d3:07:1c:
c0:01:e2:0e:26:e1:f9:b0:4e:1d:c1:2a:22:42:70:33:d5:bf:
74:cf:7a:9c:aa:ef:e9:6c:8d:f3:38:7a:33:08:7c:b1:5f:50:
8f:35:93:fc:c0:7f:7d:4f:f3:8f:d8:71:ed:d5:c8:80:52:f1:
ad:ae:e6:f7:10:b9:25:c1:da:b9:01:de:28:28:0c:60:9e:64:
48:30:1c:42:6c:30:ca:14:dc:db:1d:1c:7a:93:81:d6:5b:e8:
73:43:60:53:cc:f2:a2:24:66:79:81:0c:f8:d8:27:43:e5:3d:
05:45:00:af
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQoIUXr49/Uv6AP0jkh+JmvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTc0NzM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZjNmOTg3MTUzNmQ2MGJmNzRiZGY2OTA2MGM5MGQ1NDEwN2Q4ZTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsi664Wa0ExYAjbAB5rpb7As1lZO4
xtJyIm40NitlzeCBtNTUnx4SOv0XMZR56XaV4gdt12qUsHYQ4yc2pqwwXm1Cxnpw
RFz31nb4KQbwZxO1AMZu9bFo8NCRmiQyuaTwLCBMAWNAYHvW2SkuTyRQt+B5sdHQ
0SJfBT0eNgR96D2E4Pv0eC1jryJ4iqV8gSBb8H5CbLCDwG2OeJJbG+5SV/k9jCI8
Jas1bZC/UXXuupyN0Nw9bSOXzilld78hkVR7zFwZ76DeWd+PM8YqtHEOQzpe7nGZ
RxBsIlE82vyveUGayCEw6DYLszTNDF2cqFAtHOmOMCwSNipJGaK4lrXMdQIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFJ8/mHFTbWC/dL32kGDJDVQQfY44MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzIzL2Y2YmJk
My1hZTI3LTRkYzctYjY2OS1jNTI2M2IzMzAzYjkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjMvZjZiYmQz
LWFlMjctNGRjNy1iNjY5LWM1MjYzYjMzMDNiOS8xL256LVljVk50WUw5MHZmYVFZ
TWtOVkJCOWpqZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCuf6AMA0GCSqGSIb3DQEBCwUAA4IBAQBXbDVK
J7PD3bISOsFPcv3DLZ1BoQI/eOBMv0jVCCtt0VLCdcS8E2WU+e9IEylk8/1Bz7fl
hwLdbm+f5C8yPX6YHPDppOyopAvtZ4gDjelZY83t8WcFyOLRUHIkU0VS+9YOQvyO
s4KgziEMQn0gfOYpPTus+UcGxpBoSn80kwPktZvn53Mq6vccQF4Zu8LTBxzAAeIO
JuH5sE4dwSoiQnAz1b90z3qcqu/pbI3zOHozCHyxX1CPNZP8wH99T/OP2HHt1ciA
UvGtrub3ELklwdq5Ad4oKAxgnmRIMBxCbDDKFNzbHRx6k4HWW+hzQ2BTzPKiJGZ5
gQz42CdD5T0FRQCv
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:58:40 2025 by rpki-client