Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/l8YNTUWM7DuNYYoBMAZCtYjDFzs.cer
File: l8YNTUWM7DuNYYoBMAZCtYjDFzs.cer (raw, json)
Hash identifier: Cp+7a8sIOOVhLMMtGjRwJ4L7VbwtOmB77r3kSWcGEsA=
Subject key identifier: 97:C6:0D:4D:45:8C:EC:3B:8D:61:8A:01:30:06:42:B5:88:C3:17:3B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194214443697B2D28A91CA335B489CDBFE1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:29 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.199.171.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:43:69:7b:2d:28:a9:1c:a3:35:b4:89:cd:bf:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=97c60d4d458cec3b8d618a01300642b588c3173b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:63:94:5b:5a:3c:cc:98:49:12:55:5c:19:cc:
05:8d:b1:e4:72:a0:0e:40:4f:f6:83:e9:38:fc:e3:
74:6b:5e:ae:31:28:50:96:c1:23:90:15:79:46:6b:
20:89:a6:f0:ad:55:f5:42:bd:ae:dd:4d:0a:19:8f:
51:7b:ea:ab:3e:9f:f5:7a:d2:cb:00:ed:03:ab:bf:
f0:fc:50:0e:85:0c:ee:97:ab:da:61:18:c4:92:9c:
dc:59:ba:2a:3b:4d:76:40:fd:5a:0e:e1:c0:25:32:
00:26:d9:0c:69:e4:80:2d:2a:c5:8d:2c:3a:38:e4:
c0:cb:65:c2:ec:4e:3e:50:83:37:ee:73:a5:ce:d6:
09:4b:3a:52:18:37:a3:6e:e0:e4:5b:da:17:28:8a:
9c:95:43:10:16:ea:04:91:1e:8c:ef:10:c4:17:7a:
ae:bd:c1:77:1f:71:f9:c2:b2:c2:b4:cf:be:0f:1c:
6e:9e:e6:34:6b:5b:e3:34:cd:b5:6b:15:59:9d:82:
6f:48:24:61:c2:93:34:e9:98:55:a1:fc:ea:7c:a6:
de:d1:c3:40:5c:a7:7c:0d:da:ad:17:5a:64:27:b3:
19:86:1b:4a:4a:db:e0:6f:71:af:be:0b:04:00:9e:
34:ed:a1:31:b1:29:06:ec:7e:d4:ea:87:d8:84:4e:
34:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C6:0D:4D:45:8C:EC:3B:8D:61:8A:01:30:06:42:B5:88:C3:17:3B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/eb4b17-aa6b-4fc2-a03f-7c036178126c/1/l8YNTUWM7DuNYYoBMAZCtYjDFzs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.171.0/24
Signature Algorithm: sha256WithRSAEncryption
88:66:12:fd:49:cb:6a:ff:c0:c7:d9:ff:98:97:fd:ff:45:dc:
5c:4b:c6:d2:ec:32:7f:bd:1d:e6:e7:ea:f8:42:d8:75:8c:e6:
fb:d6:d0:01:f3:a1:e3:c0:18:bb:f9:a6:a8:96:10:8e:82:ee:
1a:e1:6a:64:0d:6f:b6:ef:5b:84:43:08:58:3c:f4:94:30:13:
05:4f:ff:82:9e:08:9d:13:b8:58:cc:51:a5:a7:95:bc:52:b1:
c3:2c:c3:8d:2e:8e:86:3a:af:e8:97:f6:94:fa:a1:48:27:2b:
2b:4e:01:9e:29:9d:6f:65:51:e6:15:fe:f4:3a:52:ee:80:46:
c7:9c:e8:09:b6:54:be:cc:e8:67:f4:5f:5b:9d:1d:51:02:72:
aa:2f:65:ed:01:78:52:98:a2:f6:c9:85:cc:96:18:8e:c8:a4:
0b:c1:c3:d5:08:02:90:27:3d:e4:57:2e:2e:c3:72:c3:8a:d3:
75:e8:d5:a0:26:c7:3b:e0:9f:4e:ae:31:ec:3f:03:7f:53:e1:
ba:3e:84:4d:3d:4e:07:b2:65:2d:5e:8f:a7:ed:0b:10:21:79:
e5:a4:cc:2c:72:4c:f6:7a:e0:3e:36:8a:52:3a:b1:c0:f2:19:
70:1d:18:bc:99:1b:e5:a1:77:a6:39:dc:36:bc:e5:7a:3f:f8:
c9:31:2a:af
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQhRENpey0oqRyjNbSJzb/hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDk0ODI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5N2M2MGQ0ZDQ1OGNlYzNiOGQ2MThhMDEzMDA2NDJiNTg4YzMxNzNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5mOUW1o8zJhJElVcGcwFjbHkcqAO
QE/2g+k4/ON0a16uMShQlsEjkBV5RmsgiabwrVX1Qr2u3U0KGY9Re+qrPp/1etLL
AO0Dq7/w/FAOhQzul6vaYRjEkpzcWboqO012QP1aDuHAJTIAJtkMaeSALSrFjSw6
OOTAy2XC7E4+UIM37nOlztYJSzpSGDejbuDkW9oXKIqclUMQFuoEkR6M7xDEF3qu
vcF3H3H5wrLCtM++DxxunuY0a1vjNM21axVZnYJvSCRhwpM06ZhVofzqfKbe0cNA
XKd8DdqtF1pkJ7MZhhtKStvgb3GvvgsEAJ407aExsSkG7H7U6ofYhE40CwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFJfGDU1FjOw7jWGKATAGQrWIwxc7MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzRhL2ViNGIx
Ny1hYTZiLTRmYzItYTAzZi03YzAzNjE3ODEyNmMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGEvZWI0YjE3
LWFhNmItNGZjMi1hMDNmLTdjMDM2MTc4MTI2Yy8xL2w4WU5UVVdNN0R1TllZb0JN
QVpDdFlqREZ6cy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAW8erMA0GCSqGSIb3DQEBCwUAA4IBAQCIZhL9
Sctq/8DH2f+Yl/3/RdxcS8bS7DJ/vR3m5+r4Qth1jOb71tAB86HjwBi7+aaolhCO
gu4a4WpkDW+271uEQwhYPPSUMBMFT/+CngidE7hYzFGlp5W8UrHDLMONLo6GOq/o
l/aU+qFIJysrTgGeKZ1vZVHmFf70OlLugEbHnOgJtlS+zOhn9F9bnR1RAnKqL2Xt
AXhSmKL2yYXMlhiOyKQLwcPVCAKQJz3kVy4uw3LDitN16NWgJsc74J9OrjHsPwN/
U+G6PoRNPU4HsmUtXo+n7QsQIXnlpMwsckz2euA+NopSOrHA8hlwHRi8mRvloXem
Odw2vOV6P/jJMSqv
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:24 2025 by rpki-client on console.sobornost.net