Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/t53pRY0ZDmNDKfnfFQO1IiwWJO4.cer
File: t53pRY0ZDmNDKfnfFQO1IiwWJO4.cer (raw, json)
Hash identifier: AAmvCtCPKuJ3Jn0C4N97YXT26Gz2+Q3O4oWT+Vp2ahk=
Subject key identifier: B7:9D:E9:45:8D:19:0E:63:43:29:F9:DF:15:03:B5:22:2C:16:24:EE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B2402CC0630BC5F31CD7C3D13F9657
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f5/3be899-a52f-43ad-8e89-f1cd9fa28cc5/1/t53pRY0ZDmNDKfnfFQO1IiwWJO4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f5/3be899-a52f-43ad-8e89-f1cd9fa28cc5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:37 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 61076
IP: 91.198.102.0/24
IP: 185.231.52.0/22
IP: 2a0c:4100::/29
IP: 2a13:bc80::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:40:2c:c0:63:0b:c5:f3:1c:d7:c3:d1:3f:96:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b79de9458d190e634329f9df1503b5222c1624ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2c:aa:30:58:31:af:8a:b5:29:4a:5a:ba:e6:
48:36:76:ef:2e:86:6b:40:29:66:d3:b4:d2:09:e5:
5d:e5:ec:cf:6f:b0:0b:0b:62:ad:c4:70:3a:09:49:
68:d6:27:0e:0e:2e:82:6b:ae:ea:cb:21:1b:f8:b4:
6f:97:c2:97:f5:c3:fd:89:ec:bd:2f:53:24:b1:35:
74:30:8c:68:a0:cd:c1:41:2f:8a:38:93:11:90:37:
5f:c7:60:cb:5c:7c:4e:3b:74:47:e1:dd:4d:31:ab:
94:f3:82:ea:35:0b:bb:af:5f:3a:b4:73:76:c7:79:
e9:c4:09:54:84:6e:a6:a9:55:26:06:4c:b1:21:d7:
bd:61:5d:48:af:98:32:08:53:e1:3a:13:c9:fb:51:
e1:0c:f9:fd:74:f0:63:92:67:6d:2a:0f:38:4e:59:
47:12:f1:15:ab:3b:c2:ce:15:66:ee:2a:98:b3:90:
5d:c2:35:07:f6:0d:15:c5:5e:69:d4:8f:71:9b:02:
9d:09:a1:34:1c:16:80:45:a5:86:82:1b:44:cc:03:
90:e8:2e:b0:d1:c0:4c:1b:dd:d8:ec:b3:a9:fe:b1:
87:f2:29:e1:0a:8e:83:1b:7e:b1:79:52:93:2a:03:
99:49:0b:b6:fc:7d:80:09:d2:6d:ee:2b:70:a4:22:
b1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:9D:E9:45:8D:19:0E:63:43:29:F9:DF:15:03:B5:22:2C:16:24:EE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3be899-a52f-43ad-8e89-f1cd9fa28cc5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3be899-a52f-43ad-8e89-f1cd9fa28cc5/1/t53pRY0ZDmNDKfnfFQO1IiwWJO4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.102.0/24
185.231.52.0/22
IPv6:
2a0c:4100::/29
2a13:bc80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
61076
Signature Algorithm: sha256WithRSAEncryption
4c:bd:17:d5:c5:0c:6e:6c:de:9b:af:31:13:d1:f6:dd:b6:eb:
05:46:b6:f9:ab:e6:a0:f6:5f:0c:8f:2b:7d:10:27:2a:12:79:
c9:16:ad:4c:dc:a4:8d:0d:9c:fb:29:9b:42:66:18:eb:21:8b:
68:91:46:19:16:a7:23:fd:1d:91:f0:30:70:cf:da:14:bf:7a:
98:f7:6c:5f:17:3b:e3:e3:ec:2d:f3:b1:7a:4b:c2:02:1f:2a:
ce:d4:ff:90:5f:3d:94:ee:24:a4:ff:22:f1:24:76:71:d9:35:
3c:1c:25:56:89:5a:77:de:37:30:51:f8:68:71:b4:5a:48:13:
7c:88:e7:ed:95:d2:d2:0a:5b:5a:49:0f:32:3d:2e:83:d2:14:
a2:67:e1:b2:fc:cf:1c:24:71:48:13:64:0e:29:20:d1:2c:dd:
1b:4e:f9:00:c5:e7:8d:1c:d1:2c:19:47:63:a0:be:11:71:53:
b4:88:c8:7f:38:99:28:b8:b1:d6:26:18:fd:67:31:c0:17:80:
31:08:2f:6b:94:eb:f1:b6:dd:1e:8b:6e:9f:60:31:7a:51:e7:
a9:d4:63:4c:e1:84:82:e2:34:03:bf:a6:aa:3f:89:d5:f4:90:
5e:e1:eb:a2:17:aa:05:a3:ab:56:7f:a5:5e:4e:90:93:f3:33:
b6:9c:33:b9
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgISAZQhskAswGMLxfMc18PRP5ZXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTE0ODM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNzlkZTk0NThkMTkwZTYzNDMyOWY5ZGYxNTAzYjUyMjJjMTYyNGVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriyqMFgxr4q1KUpauuZINnbvLoZr
QClm07TSCeVd5ezPb7ALC2KtxHA6CUlo1icODi6Ca67qyyEb+LRvl8KX9cP9iey9
L1MksTV0MIxooM3BQS+KOJMRkDdfx2DLXHxOO3RH4d1NMauU84LqNQu7r186tHN2
x3npxAlUhG6mqVUmBkyxIde9YV1Ir5gyCFPhOhPJ+1HhDPn9dPBjkmdtKg84TllH
EvEVqzvCzhVm7iqYs5BdwjUH9g0VxV5p1I9xmwKdCaE0HBaARaWGghtEzAOQ6C6w
0cBMG93Y7LOp/rGH8inhCo6DG36xeVKTKgOZSQu2/H2ACdJt7itwpCKxPwIDAQAB
o4ICvDCCArgwHQYDVR0OBBYEFLed6UWNGQ5jQyn53xUDtSIsFiTuMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Y1LzNiZTg5
OS1hNTJmLTQzYWQtOGU4OS1mMWNkOWZhMjhjYzUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjUvM2JlODk5
LWE1MmYtNDNhZC04ZTg5LWYxY2Q5ZmEyOGNjNS8xL3Q1M3BSWTBaRG1OREtmbmZG
UU8xSWl3V0pPNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDsGCCsGAQUF
BwEHAQH/BCwwKjASBAIAATAMAwQAW8ZmAwQCuec0MBQEAgACMA4DBQMqDEEAAwUD
KhO8gDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMA7pQwDQYJKoZIhvcNAQELBQAD
ggEBAEy9F9XFDG5s3puvMRPR9t226wVGtvmr5qD2XwyPK30QJyoSeckWrUzcpI0N
nPspm0JmGOshi2iRRhkWpyP9HZHwMHDP2hS/epj3bF8XO+Pj7C3zsXpLwgIfKs7U
/5BfPZTuJKT/IvEkdnHZNTwcJVaJWnfeNzBR+GhxtFpIE3yI5+2V0tIKW1pJDzI9
LoPSFKJn4bL8zxwkcUgTZA4pINEs3RtO+QDF540c0SwZR2OgvhFxU7SIyH84mSi4
sdYmGP1nMcAXgDEIL2uU6/G23R6Lbp9gMXpR56nUY0zhhILiNAO/pqo/idX0kF7h
66IXqgWjq1Z/pV5OkJPzM7acM7k=
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:53:06 2025 by rpki-client