Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Th1cISsoF0fIw-xuhm4Vs5TFu98.cer
File: Th1cISsoF0fIw-xuhm4Vs5TFu98.cer (raw, json)
Hash identifier: msAVTu+LlaFQs3rFww50NcfnP554rHgKqXVDSMUllfg=
Subject key identifier: 4E:1D:5C:21:2B:28:17:47:C8:C3:EC:6E:86:6E:15:B3:94:C5:BB:DF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266B12E96DC46A648134D870BAEDF20B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/06/277503-82e3-4c17-9699-712e2761daf5/1/Th1cISsoF0fIw-xuhm4Vs5TFu98.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/06/277503-82e3-4c17-9699-712e2761daf5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:48:58 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.43.0.0/16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:12:e9:6d:c4:6a:64:81:34:d8:70:ba:ed:f2:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:48:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4e1d5c212b281747c8c3ec6e866e15b394c5bbdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:52:2f:69:6f:aa:0f:fe:81:24:40:df:8c:c3:
91:64:1d:d1:5f:27:61:9f:c3:2e:39:86:8a:7b:c2:
90:3d:db:59:a2:f5:79:24:0d:96:bf:e2:15:2a:1c:
59:37:12:b8:d4:aa:56:24:04:a6:47:79:ec:ad:ea:
d3:1c:cf:6b:34:4c:6a:31:22:6f:43:9f:23:63:3a:
0f:0a:44:20:cb:c4:af:9a:c0:f8:21:57:1c:eb:cc:
ec:c4:60:f6:db:7c:64:9e:b2:9b:f4:39:2b:e4:5b:
4a:eb:54:76:97:99:66:fb:f2:01:8d:06:ea:36:65:
45:c7:30:5c:d8:d5:16:20:64:e9:7c:a2:a9:b1:b3:
4d:58:d8:44:95:41:72:52:85:89:23:dc:ef:79:a7:
05:a7:28:d3:d6:ae:95:70:80:e8:bb:ed:6c:e3:76:
b9:40:03:58:23:30:b6:da:54:21:e5:8f:ec:9b:ed:
d4:3d:f5:3e:47:1f:76:5e:1c:87:55:9c:ad:cb:7b:
6e:1a:62:e3:d0:aa:87:d2:da:86:7e:96:4a:51:88:
18:9d:e0:29:fb:69:fe:36:d5:b1:c9:40:d3:d2:11:
73:f5:90:e2:3f:ca:2c:96:1a:08:06:bd:51:4b:fa:
2f:2f:c1:64:c1:bc:cc:e7:de:2f:73:5a:d5:1b:7e:
16:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:1D:5C:21:2B:28:17:47:C8:C3:EC:6E:86:6E:15:B3:94:C5:BB:DF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/277503-82e3-4c17-9699-712e2761daf5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/277503-82e3-4c17-9699-712e2761daf5/1/Th1cISsoF0fIw-xuhm4Vs5TFu98.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.43.0.0/16
Signature Algorithm: sha256WithRSAEncryption
47:9c:30:b3:ed:53:48:61:62:02:95:f1:e6:21:b8:8b:87:1a:
9f:b6:85:2e:c0:22:13:92:a6:9b:c3:2a:05:d4:f7:6e:2c:3e:
c1:62:13:d1:97:80:30:dd:c0:2c:a5:36:c8:89:9b:72:78:11:
c7:4c:84:17:af:38:24:9a:3d:11:e1:76:37:1d:45:2a:68:92:
60:30:80:bb:67:8a:98:b6:5b:fe:a1:08:22:c6:9a:32:3e:6d:
29:9a:57:1e:b2:5e:94:80:2d:26:25:77:4e:9f:ae:6f:b4:4d:
62:7c:7a:b3:3b:02:2c:bf:c6:c3:30:8f:be:8d:cb:d5:07:c1:
65:80:73:b6:3b:cb:ca:97:b7:c0:a1:36:40:c8:46:0a:7c:71:
06:f4:d4:fc:5f:f5:1b:c8:c5:50:b3:11:3d:df:29:9f:ed:41:
96:74:85:74:0f:59:f0:52:64:a5:f9:09:c4:7f:0e:83:0d:6f:
46:7a:20:bb:95:21:d5:fc:c7:99:99:6d:8c:8e:8d:d5:b4:f7:
32:d8:8b:ed:58:be:b4:70:c5:19:1b:d2:84:86:2a:a9:ef:85:
ad:df:38:5d:3d:36:9f:ef:c8:5d:6d:7c:af:32:4d:92:e7:75:
07:2e:ad:5d:d5:a7:97:ca:fc:22:03:15:18:b3:b6:ca:79:25:
73:b8:08:35
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgISAZQmaxLpbcRqZIE02HC67fILMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDk0ODU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZTFkNWMyMTJiMjgxNzQ3YzhjM2VjNmU4NjZlMTViMzk0YzViYmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVIvaW+qD/6BJEDfjMORZB3RXydh
n8MuOYaKe8KQPdtZovV5JA2Wv+IVKhxZNxK41KpWJASmR3nsrerTHM9rNExqMSJv
Q58jYzoPCkQgy8SvmsD4IVcc68zsxGD223xknrKb9Dkr5FtK61R2l5lm+/IBjQbq
NmVFxzBc2NUWIGTpfKKpsbNNWNhElUFyUoWJI9zveacFpyjT1q6VcIDou+1s43a5
QANYIzC22lQh5Y/sm+3UPfU+Rx92XhyHVZyty3tuGmLj0KqH0tqGfpZKUYgYneAp
+2n+NtWxyUDT0hFz9ZDiP8oslhoIBr1RS/ovL8FkwbzM594vc1rVG34WVQIDAQAB
o4ICgzCCAn8wHQYDVR0OBBYEFE4dXCErKBdHyMPsboZuFbOUxbvfMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA2LzI3NzUw
My04MmUzLTRjMTctOTY5OS03MTJlMjc2MWRhZjUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDYvMjc3NTAz
LTgyZTMtNGMxNy05Njk5LTcxMmUyNzYxZGFmNS8xL1RoMWNJU3NvRjBmSXcteHVo
bTRWczVURnU5OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUF
BwEHAQH/BA8wDTALBAIAATAFAwMAwiswDQYJKoZIhvcNAQELBQADggEBAEecMLPt
U0hhYgKV8eYhuIuHGp+2hS7AIhOSppvDKgXU924sPsFiE9GXgDDdwCylNsiJm3J4
EcdMhBevOCSaPRHhdjcdRSpokmAwgLtnipi2W/6hCCLGmjI+bSmaVx6yXpSALSYl
d06frm+0TWJ8erM7Aiy/xsMwj76Ny9UHwWWAc7Y7y8qXt8ChNkDIRgp8cQb01Pxf
9RvIxVCzET3fKZ/tQZZ0hXQPWfBSZKX5CcR/DoMNb0Z6ILuVIdX8x5mZbYyOjdW0
9zLYi+1YvrRwxRkb0oSGKqnvha3fOF09Np/vyF1tfK8yTZLndQcurV3Vp5fK/CID
FRiztsp5JXO4CDU=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:02 2025 by rpki-client on console.sobornost.net