Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.cer
File: k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.cer (raw, json)
Hash identifier: 94ehsWdoKsVUImLpZXor4VTRRVAOoGnUNDEwSBxTM1o=
Subject key identifier: 93:51:5F:25:98:6E:4B:57:2A:78:B1:09:D9:95:C9:DD:F5:DA:12:66
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194244514A1CF5C83916274AA5A16AA9467
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:48:14 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 143.126.0.0/16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:14:a1:cf:5c:83:91:62:74:aa:5a:16:aa:94:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=93515f25986e4b572a78b109d995c9ddf5da1266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:20:05:2f:e8:9b:c6:83:ba:fc:85:1c:86:19:
00:6d:68:a7:2e:59:42:2a:d2:4b:b7:18:cc:a4:08:
c2:4d:ff:69:d2:f0:25:64:21:32:eb:51:f2:fe:8b:
c4:bd:4c:4a:14:cb:87:9f:6f:84:1a:cc:29:d3:65:
03:20:8c:35:b8:ea:24:17:2d:eb:9a:47:85:ca:56:
53:0c:da:35:10:c0:cf:84:85:f2:42:ba:4d:38:76:
64:49:55:89:da:1b:ad:5a:93:77:f3:41:8b:8d:60:
3e:3b:3d:5e:0c:14:bf:c9:45:85:fb:7e:0c:c3:a8:
ae:1f:7a:4e:b4:3b:4d:67:ca:13:3b:ad:c2:60:79:
26:ab:e8:ca:af:9b:34:da:0e:98:23:ca:54:d8:97:
b1:a8:3d:1e:78:d5:75:1e:09:9c:24:46:87:1c:9c:
01:39:03:c0:c9:ee:88:88:4a:68:aa:c8:b8:ed:29:
51:fd:b2:85:47:21:02:c3:8e:0b:8f:cf:79:f0:54:
19:35:90:5c:30:db:b0:95:7d:6c:29:16:a6:46:13:
25:57:73:6b:83:7a:21:c2:f2:15:7e:a1:66:38:07:
e7:ac:ef:59:8c:cb:5a:17:3e:ba:70:39:b0:38:fb:
73:3a:ac:e1:90:ae:9d:7e:b4:16:45:69:cf:f6:7b:
b0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:51:5F:25:98:6E:4B:57:2A:78:B1:09:D9:95:C9:DD:F5:DA:12:66
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.126.0.0/16
Signature Algorithm: sha256WithRSAEncryption
86:53:3b:3d:c8:fe:f3:bc:b2:7b:5b:92:c7:47:d7:cf:d9:73:
1f:48:41:87:54:96:25:67:1f:b4:3d:6c:2a:26:94:fd:86:98:
21:80:24:be:a7:1a:dd:d9:d6:d7:e4:99:0e:6f:56:e1:c6:1e:
cd:0c:22:a1:94:b0:7a:dc:56:9a:6e:d3:b4:f0:01:b1:10:d8:
5a:e6:3d:50:33:ec:c5:a9:4e:c3:98:a1:e8:51:3e:0f:56:ff:
7b:bb:9f:70:1c:ce:bc:66:60:4f:7e:02:19:cf:b8:74:5d:1c:
9b:a4:71:b0:5f:aa:4b:c3:e7:78:9c:20:a2:bb:49:44:93:bd:
40:c0:f1:8b:78:f6:20:1d:54:52:19:05:32:23:60:af:ee:67:
14:54:84:64:e6:01:d4:dd:4d:91:02:c4:56:25:46:61:cd:62:
fd:d3:a5:3f:f4:e3:ca:05:50:93:69:6a:98:ea:7d:fd:67:68:
c8:8c:4d:ad:7c:44:38:38:fb:27:0a:95:12:2c:18:9c:20:1b:
05:0a:35:91:2d:d7:10:47:e3:91:24:38:6c:06:98:ce:1d:76:
9f:c9:78:ca:45:43:39:ff:d6:5d:3f:84:2a:8a:81:3d:a2:5a:
6a:d6:bd:07:f9:6c:c7:ed:11:2d:a8:10:70:e3:59:13:20:e0:
fa:40:8e:f0
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgISAZQkRRShz1yDkWJ0qloWqpRnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMjM0ODE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MzUxNWYyNTk4NmU0YjU3MmE3OGIxMDlkOTk1YzlkZGY1ZGExMjY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCAFL+ibxoO6/IUchhkAbWinLllC
KtJLtxjMpAjCTf9p0vAlZCEy61Hy/ovEvUxKFMuHn2+EGswp02UDIIw1uOokFy3r
mkeFylZTDNo1EMDPhIXyQrpNOHZkSVWJ2hutWpN380GLjWA+Oz1eDBS/yUWF+34M
w6iuH3pOtDtNZ8oTO63CYHkmq+jKr5s02g6YI8pU2JexqD0eeNV1HgmcJEaHHJwB
OQPAye6IiEpoqsi47SlR/bKFRyECw44Lj8958FQZNZBcMNuwlX1sKRamRhMlV3Nr
g3ohwvIVfqFmOAfnrO9ZjMtaFz66cDmwOPtzOqzhkK6dfrQWRWnP9nuwPQIDAQAB
o4ICgzCCAn8wHQYDVR0OBBYEFJNRXyWYbktXKnixCdmVyd312hJmMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2Q5Lzg0YjAz
Yi01NjE5LTQyNzItOTQ3Zi0xM2Q1MTMyOGE5ZjcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDkvODRiMDNi
LTU2MTktNDI3Mi05NDdmLTEzZDUxMzI4YTlmNy8xL2sxRmZKWmh1UzFjcWVMRUoy
WlhKM2ZYYUVtWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUF
BwEHAQH/BA8wDTALBAIAATAFAwMAj34wDQYJKoZIhvcNAQELBQADggEBAIZTOz3I
/vO8sntbksdH18/Zcx9IQYdUliVnH7Q9bComlP2GmCGAJL6nGt3Z1tfkmQ5vVuHG
Hs0MIqGUsHrcVppu07TwAbEQ2FrmPVAz7MWpTsOYoehRPg9W/3u7n3AczrxmYE9+
AhnPuHRdHJukcbBfqkvD53icIKK7SUSTvUDA8Yt49iAdVFIZBTIjYK/uZxRUhGTm
AdTdTZECxFYlRmHNYv3TpT/048oFUJNpapjqff1naMiMTa18RDg4+ycKlRIsGJwg
GwUKNZEt1xBH45EkOGwGmM4ddp/JeMpFQzn/1l0/hCqKgT2iWmrWvQf5bMftES2o
EHDjWRMg4PpAjvA=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:21 2025 by rpki-client on console.sobornost.net