Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/xddsGvj60uvGNOouIzcPEMXFnQs.cer
File: xddsGvj60uvGNOouIzcPEMXFnQs.cer (raw, json)
Hash identifier: kskni+2F2BetR5UdfyTmOOrOqK5kFGbkSnnm68V1hAA=
Subject key identifier: C5:D7:6C:1A:F8:FA:D2:EB:C6:34:EA:2E:23:37:0F:10:C5:C5:9D:0B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B5522F376E6CCD5D229CF94B62BB34
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3b/129532-5c88-468e-b41d-fde6fb9af230/1/xddsGvj60uvGNOouIzcPEMXFnQs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3b/129532-5c88-468e-b41d-fde6fb9af230/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:49:42 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 47868
IP: 31.177.24.0/21
IP: 94.125.216.0/21
IP: 2a00:db00::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:52:2f:37:6e:6c:cd:5d:22:9c:f9:4b:62:bb:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c5d76c1af8fad2ebc634ea2e23370f10c5c59d0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:73:e4:34:af:29:22:6c:e6:a6:ef:72:62:10:
cd:08:48:58:ea:74:80:4d:63:1e:02:0f:c4:f4:06:
4e:c9:21:bc:cc:ab:fb:8e:6f:9b:03:ca:34:08:57:
7c:c4:40:e1:6b:a0:87:7d:ee:9f:0e:fb:af:05:7d:
c2:ec:56:f5:ff:9d:a5:cc:dd:d4:f8:81:a4:7e:86:
35:20:89:74:8e:3a:01:d2:88:b2:8c:7f:ce:61:9c:
8b:fb:86:b2:15:43:31:6e:9a:62:c6:18:97:43:a1:
60:6b:af:c1:84:0a:06:c6:57:01:6d:b4:53:9b:e6:
c6:5a:8b:42:60:63:c1:81:5b:2a:ef:cf:7f:02:cd:
dd:42:bc:f7:dd:19:42:4d:ff:e2:35:a6:a7:1c:6a:
89:45:34:11:84:a5:aa:59:2e:c2:fe:35:7c:11:0d:
24:ea:fa:e5:9c:b8:1b:c1:c0:af:6b:ad:9d:bd:7a:
63:27:09:99:0c:ff:7b:bc:b0:5b:6b:5b:5a:72:5c:
c3:b1:ff:ac:5a:e4:80:4a:25:05:97:7f:47:e6:b5:
6b:54:1d:12:a7:77:f5:52:44:1a:41:9a:e4:d1:ab:
14:da:73:eb:5c:ff:3a:bf:79:e2:48:da:8c:96:48:
54:79:94:e8:e7:d6:93:92:af:fe:96:07:1b:3d:ca:
79:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:D7:6C:1A:F8:FA:D2:EB:C6:34:EA:2E:23:37:0F:10:C5:C5:9D:0B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/129532-5c88-468e-b41d-fde6fb9af230/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/129532-5c88-468e-b41d-fde6fb9af230/1/xddsGvj60uvGNOouIzcPEMXFnQs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.177.24.0/21
94.125.216.0/21
IPv6:
2a00:db00::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
47868
Signature Algorithm: sha256WithRSAEncryption
6c:f4:81:dc:11:ad:44:33:00:5c:cf:cb:c7:bf:3a:ff:d4:98:
ee:a5:fb:ec:a4:34:48:48:d4:6d:ac:b6:86:f8:47:ca:90:9d:
83:90:f8:e5:8c:a3:79:eb:a1:f1:08:0d:bc:e1:12:0a:d2:e0:
88:e9:19:ef:e6:56:12:84:29:89:2a:87:36:c8:5c:7c:b1:05:
21:03:77:94:bb:47:c7:c6:58:22:ea:b4:b5:9f:e5:35:60:97:
58:86:cc:cf:cf:fb:4d:64:bb:48:0d:b2:82:03:db:e0:ed:51:
7b:32:65:f9:61:fc:c1:34:5b:a4:4e:5d:75:4f:cd:94:d6:3a:
84:fd:f8:ad:2e:9a:a9:a6:14:d3:a3:0d:78:78:40:25:73:77:
ec:f3:1a:38:13:43:4e:db:c8:f8:d5:d2:e5:94:2f:3a:73:ac:
61:f7:b9:8f:e8:e4:c0:46:b6:41:80:b5:c7:7e:5b:cd:64:d5:
56:30:2c:33:44:2d:6d:a6:1c:35:74:68:f0:f0:ea:5b:72:bc:
47:b4:23:cf:1c:c9:48:37:63:7b:57:2c:ed:59:67:0e:75:ab:
0b:44:7f:e4:60:ef:7f:5d:d2:63:95:a1:87:98:37:2d:b4:b8:
31:a3:83:4f:d4:24:d4:e4:9c:50:17:6c:41:db:d0:31:d8:de:
17:a9:6d:cb
-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgISAZQntVIvN25szV0inPlLYrs0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTU0OTQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNWQ3NmMxYWY4ZmFkMmViYzYzNGVhMmUyMzM3MGYxMGM1YzU5ZDBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHPkNK8pImzmpu9yYhDNCEhY6nSA
TWMeAg/E9AZOySG8zKv7jm+bA8o0CFd8xEDha6CHfe6fDvuvBX3C7Fb1/52lzN3U
+IGkfoY1IIl0jjoB0oiyjH/OYZyL+4ayFUMxbppixhiXQ6Fga6/BhAoGxlcBbbRT
m+bGWotCYGPBgVsq789/As3dQrz33RlCTf/iNaanHGqJRTQRhKWqWS7C/jV8EQ0k
6vrlnLgbwcCva62dvXpjJwmZDP97vLBba1taclzDsf+sWuSASiUFl39H5rVrVB0S
p3f1UkQaQZrk0asU2nPrXP86v3niSNqMlkhUeZTo59aTkq/+lgcbPcp5FwIDAQAB
o4ICtTCCArEwHQYDVR0OBBYEFMXXbBr4+tLrxjTqLiM3DxDFxZ0LMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNiLzEyOTUz
Mi01Yzg4LTQ2OGUtYjQxZC1mZGU2ZmI5YWYyMzAvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2IvMTI5NTMy
LTVjODgtNDY4ZS1iNDFkLWZkZTZmYjlhZjIzMC8xL3hkZHNHdmo2MHV2R05Pb3VJ
emNQRU1YRm5Rcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDQGCCsGAQUF
BwEHAQH/BCUwIzASBAIAATAMAwQDH7EYAwQDXn3YMA0EAgACMAcDBQAqANsAMBoG
CCsGAQUFBwEIAQH/BAswCaAHMAUCAwC6/DANBgkqhkiG9w0BAQsFAAOCAQEAbPSB
3BGtRDMAXM/Lx786/9SY7qX77KQ0SEjUbay2hvhHypCdg5D45Yyjeeuh8QgNvOES
CtLgiOkZ7+ZWEoQpiSqHNshcfLEFIQN3lLtHx8ZYIuq0tZ/lNWCXWIbMz8/7TWS7
SA2yggPb4O1RezJl+WH8wTRbpE5ddU/NlNY6hP34rS6aqaYU06MNeHhAJXN37PMa
OBNDTtvI+NXS5ZQvOnOsYfe5j+jkwEa2QYC1x35bzWTVVjAsM0QtbaYcNXRo8PDq
W3K8R7QjzxzJSDdje1cs7VlnDnWrC0R/5GDvf13SY5Whh5g3LbS4MaODT9Qk1OSc
UBdsQdvQMdjeF6ltyw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:08:14 2025 by rpki-client