Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.cer
File: zDIxY7u0ZfKg-i-T-lDvOw1Mapo.cer (raw, json)
Hash identifier: NG4PhkEZAuodvaHBuk0cnEs6J2Xj0h9SDt9qHmvPua4=
Subject key identifier: CC:32:31:63:BB:B4:65:F2:A0:FA:2F:93:FA:50:EF:3B:0D:4C:6A:9A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FF9FD582E015F34951C520AE7A6E45D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:47:44 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 48415
IP: 91.223.245.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:f9:fd:58:2e:01:5f:34:95:1c:52:0a:e7:a6:e4:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cc323163bbb465f2a0fa2f93fa50ef3b0d4c6a9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e5:09:ac:c6:34:aa:0f:df:d7:db:7a:da:e4:
48:b9:11:81:11:5a:30:fb:8c:14:ca:88:e3:b5:c8:
1b:e2:4c:6f:d7:2d:73:0e:02:5c:3c:57:f7:10:28:
17:47:92:60:60:89:55:3a:66:0f:53:5e:58:2c:8c:
ad:27:43:e4:40:0a:15:0e:bf:f9:f9:96:10:9c:7f:
87:26:6b:de:8c:7a:7a:1e:94:97:e3:04:9b:b3:c2:
1a:df:4f:ee:c2:b6:38:f2:eb:7f:60:52:2d:0c:a1:
cc:e3:a0:a9:ca:b5:ed:cd:1f:98:61:6f:92:7f:e8:
3c:db:22:7e:ab:1e:1b:78:ed:20:6b:2d:18:36:35:
65:6b:a2:56:63:2c:69:81:c8:6f:1c:61:c1:74:0a:
40:4b:54:f0:4c:b7:e5:94:55:f7:d0:9f:2f:d5:3b:
f3:b8:90:ba:54:a6:74:98:ba:c9:2f:53:bd:ad:3f:
b3:81:5a:1e:79:3a:eb:9a:8f:13:82:3a:c6:8b:02:
98:d5:a9:45:aa:cb:26:77:87:1d:81:24:af:f2:3b:
4c:90:2a:a6:eb:cc:94:10:4b:a8:83:af:d9:fc:da:
c0:d9:74:a4:f6:8e:cc:c2:28:fa:c3:5a:95:a2:30:
bb:99:28:5b:54:c9:fa:87:b2:73:31:36:9b:5e:cb:
d4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:32:31:63:BB:B4:65:F2:A0:FA:2F:93:FA:50:EF:3B:0D:4C:6A:9A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.245.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48415
Signature Algorithm: sha256WithRSAEncryption
32:c9:2b:98:5b:a0:5d:f4:97:24:8f:cf:0c:4d:bb:4b:0d:ff:
0d:58:ec:fb:cc:4d:4b:a2:5b:22:ec:7b:08:fd:c7:3d:41:ac:
c0:9c:30:fa:08:9c:72:b6:1e:30:79:ce:3a:aa:27:79:17:21:
46:20:54:d3:00:f1:fb:ae:76:e8:09:1f:83:88:d2:79:10:f2:
fa:e0:19:da:71:51:40:ec:8f:56:b7:64:46:85:30:43:0a:4d:
e3:60:fa:c4:ba:07:1b:94:3a:66:59:7a:56:38:ee:3e:39:af:
e9:6c:1b:56:32:d5:28:81:ae:33:89:54:05:a4:91:0b:c1:70:
cf:49:4a:32:4e:4b:9c:8c:dc:f8:05:4f:09:17:43:d4:aa:2d:
c5:74:2a:0a:5e:58:15:4b:b8:f2:15:62:1c:56:7f:f4:34:b7:
71:27:10:70:d4:24:98:2d:fe:1b:fa:a7:a0:7b:8c:fa:ea:d5:
fd:a0:61:b1:68:fa:58:b5:43:71:99:7e:e7:82:d0:d9:8b:fc:
9d:9a:b1:aa:e4:ca:5a:d0:93:71:b2:a3:72:36:30:ce:98:1a:
bf:64:7f:ec:7d:5d:e4:7a:70:eb:94:79:6d:59:14:a6:f2:0c:
7d:88:f8:60:61:84:a3:76:73:87:a2:e8:b8:af:61:bd:bc:3a:
e1:fa:fe:fe
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgISAZQf+f1YLgFfNJUcUgrnpuRdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDM0NzQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYzMyMzE2M2JiYjQ2NWYyYTBmYTJmOTNmYTUwZWYzYjBkNGM2YTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+UJrMY0qg/f19t62uRIuRGBEVow
+4wUyojjtcgb4kxv1y1zDgJcPFf3ECgXR5JgYIlVOmYPU15YLIytJ0PkQAoVDr/5
+ZYQnH+HJmvejHp6HpSX4wSbs8Ia30/uwrY48ut/YFItDKHM46CpyrXtzR+YYW+S
f+g82yJ+qx4beO0gay0YNjVla6JWYyxpgchvHGHBdApAS1TwTLfllFX30J8v1Tvz
uJC6VKZ0mLrJL1O9rT+zgVoeeTrrmo8TgjrGiwKY1alFqssmd4cdgSSv8jtMkCqm
68yUEEuog6/Z/NrA2XSk9o7Mwij6w1qVojC7mShbVMn6h7JzMTabXsvU6wIDAQAB
o4ICoDCCApwwHQYDVR0OBBYEFMwyMWO7tGXyoPovk/pQ7zsNTGqaMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRiLzcxM2Jk
Ny1mNzNiLTQ2MTQtOGU5Mi0xZWYwMDkwYjcxNTQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGIvNzEzYmQ3
LWY3M2ItNDYxNC04ZTkyLTFlZjAwOTBiNzE1NC8xL3pESXhZN3UwWmZLZy1pLVQt
bER2T3cxTWFwby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAW9/1MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUC
AwC9HzANBgkqhkiG9w0BAQsFAAOCAQEAMskrmFugXfSXJI/PDE27Sw3/DVjs+8xN
S6JbIux7CP3HPUGswJww+giccrYeMHnOOqoneRchRiBU0wDx+6526Akfg4jSeRDy
+uAZ2nFRQOyPVrdkRoUwQwpN42D6xLoHG5Q6Zll6VjjuPjmv6WwbVjLVKIGuM4lU
BaSRC8Fwz0lKMk5LnIzc+AVPCRdD1KotxXQqCl5YFUu48hViHFZ/9DS3cScQcNQk
mC3+G/qnoHuM+urV/aBhsWj6WLVDcZl+54LQ2Yv8nZqxquTKWtCTcbKjcjYwzpga
v2R/7H1d5Hpw65R5bVkUpvIMfYj4YGGEo3Zzh6LouK9hvbw64fr+/g==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:10:19 2025 by rpki-client