Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yp4g0QNLRO916V_ffriIFbb30vg.cer
File: yp4g0QNLRO916V_ffriIFbb30vg.cer (raw, json)
Hash identifier: as6nyVnEy1vFXZr/F6gXvUfw03JSqY2ySRKmLlhAEk4=
Subject key identifier: CA:9E:20:D1:03:4B:44:EF:75:E9:5F:DF:7E:B8:88:15:B6:F7:D2:F8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B3C4C2F576A0E88E1605C3CBD1B53B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:49:08 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.26.188.0/22
IP: 2a00:8ce0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:c4:c2:f5:76:a0:e8:8e:16:05:c3:cb:d1:b5:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca9e20d1034b44ef75e95fdf7eb88815b6f7d2f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:91:2e:60:0b:6c:83:ec:f7:65:8a:58:f0:47:
b3:9f:ab:92:15:8f:91:bc:34:d8:d2:41:4e:af:e4:
16:11:19:44:cb:89:c1:e5:5a:2e:33:df:60:7c:4b:
c5:a8:dd:a3:a4:54:a8:76:61:ec:88:84:a9:fd:9f:
43:13:4f:66:cf:7f:ab:ea:8d:19:1a:9d:92:fa:c8:
d2:97:db:db:a5:11:04:61:41:81:61:8a:cb:63:36:
5d:12:ea:ad:a8:be:93:f6:d7:d8:fd:40:d4:55:03:
e0:d9:b0:91:c5:a2:de:3f:a2:ab:e6:36:9b:43:4d:
78:96:ed:0e:6e:a7:19:a9:a3:23:7d:51:19:2f:a1:
77:32:b4:31:b4:17:ae:d0:21:52:9f:2b:64:65:80:
d3:c2:12:3f:51:c0:f9:be:fb:e8:f3:a0:94:a0:79:
f7:0e:09:99:fd:26:45:c3:2c:6d:c4:a0:22:4a:4c:
98:ce:50:7d:21:db:4e:53:84:e3:12:5c:76:fa:23:
a0:16:2b:eb:1e:15:72:c0:dd:b6:79:4d:de:fa:9c:
37:a9:19:92:61:bf:a7:df:8d:b5:1d:66:40:0f:3c:
c3:b0:c4:6f:19:1c:4e:51:f8:79:0e:71:91:e5:fa:
02:37:1e:82:4c:d0:bd:11:cd:29:c0:5d:88:ed:c0:
5f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:9E:20:D1:03:4B:44:EF:75:E9:5F:DF:7E:B8:88:15:B6:F7:D2:F8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/13a680-f698-4c97-9bb6-12701ab51acf/1/yp4g0QNLRO916V_ffriIFbb30vg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.26.188.0/22
IPv6:
2a00:8ce0::/32
Signature Algorithm: sha256WithRSAEncryption
0f:2d:e4:6b:2d:5b:86:ea:84:78:57:63:3a:93:0f:4f:f7:53:
fc:cc:78:3e:83:ad:1e:69:7a:d3:07:d4:10:5d:a3:bc:13:92:
f2:f4:be:3a:37:76:18:1b:c3:1a:30:96:19:28:66:0f:8e:83:
a5:d8:6b:d4:e6:b1:86:16:45:0f:29:ce:c6:3a:f0:f8:22:ad:
14:35:47:06:ac:c9:85:0d:c6:3e:53:93:29:ac:35:00:b2:85:
ff:c3:53:17:28:04:3c:0b:3f:5b:6f:c1:c0:7f:b2:33:a3:11:
0e:d8:ea:84:a5:97:3d:1e:da:6a:02:d6:31:9e:a2:2c:e7:28:
2a:fb:41:39:60:73:77:d4:5a:f6:19:cf:fe:ae:a4:05:66:aa:
a6:b9:cc:cf:a1:43:61:8d:62:dc:c7:b4:a4:1d:0f:3b:ba:b9:
83:7b:07:8b:4d:f9:4a:f3:7c:b4:10:8c:b4:b9:2c:79:9d:91:
a1:24:82:9e:6d:55:83:df:5b:49:f5:32:a4:24:31:7b:87:9f:
87:a6:2d:c4:31:af:69:a3:91:86:35:8f:7c:de:74:1a:00:76:
04:2b:6a:de:cc:9c:ad:ab:f9:57:02:65:21:17:12:84:b7:4b:
48:8b:bd:09:7d:53:47:46:22:05:6f:56:9f:38:4d:e4:da:3f:
37:56:4a:ce
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZQks8TC9Xag6I4WBcPL0bU7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDE0OTA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYTllMjBkMTAzNGI0NGVmNzVlOTVmZGY3ZWI4ODgxNWI2ZjdkMmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZEuYAtsg+z3ZYpY8Eezn6uSFY+R
vDTY0kFOr+QWERlEy4nB5VouM99gfEvFqN2jpFSodmHsiISp/Z9DE09mz3+r6o0Z
Gp2S+sjSl9vbpREEYUGBYYrLYzZdEuqtqL6T9tfY/UDUVQPg2bCRxaLeP6Kr5jab
Q014lu0ObqcZqaMjfVEZL6F3MrQxtBeu0CFSnytkZYDTwhI/UcD5vvvo86CUoHn3
DgmZ/SZFwyxtxKAiSkyYzlB9IdtOU4TjElx2+iOgFivrHhVywN22eU3e+pw3qRmS
Yb+n3421HWZADzzDsMRvGRxOUfh5DnGR5foCNx6CTNC9Ec0pwF2I7cBfZwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFMqeINEDS0Tvdelf3364iBW299L4MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQ3LzEzYTY4
MC1mNjk4LTRjOTctOWJiNi0xMjcwMWFiNTFhY2YvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDcvMTNhNjgw
LWY2OTgtNGM5Ny05YmI2LTEyNzAxYWI1MWFjZi8xL3lwNGcwUU5MUk85MTZWX2Zm
cmlJRmJiMzB2Zy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuRq8MA0EAgACMAcDBQAqAIzgMA0GCSqGSIb3
DQEBCwUAA4IBAQAPLeRrLVuG6oR4V2M6kw9P91P8zHg+g60eaXrTB9QQXaO8E5Ly
9L46N3YYG8MaMJYZKGYPjoOl2GvU5rGGFkUPKc7GOvD4Iq0UNUcGrMmFDcY+U5Mp
rDUAsoX/w1MXKAQ8Cz9bb8HAf7IzoxEO2OqEpZc9HtpqAtYxnqIs5ygq+0E5YHN3
1Fr2Gc/+rqQFZqqmuczPoUNhjWLcx7SkHQ87urmDeweLTflK83y0EIy0uSx5nZGh
JIKebVWD31tJ9TKkJDF7h5+Hpi3EMa9po5GGNY983nQaAHYEK2rezJytq/lXAmUh
FxKEt0tIi70JfVNHRiIFb1afOE3k2j83VkrO
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:58:21 2025 by rpki-client