Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.cer
File: yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.cer (raw, json)
Hash identifier: AOrhyxJ59K7yyiBSTZs04+GL9RFSS6SX6t4+z6N9jTA=
Subject key identifier: CA:18:3A:66:91:30:9A:79:D6:E6:60:5B:0D:5C:11:E3:FF:7E:91:94
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D935D78BB47C232A331F14345333F6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2e/0774bb-3b0b-4f47-b151-19e708469cee/1/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2e/0774bb-3b0b-4f47-b151-19e708469cee/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:16 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 130.192.0.0 -- 130.192.95.255
IP: 130.192.160.0/21
IP: 130.192.176.0/20
IP: 130.192.224.0/20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:35:d7:8b:b4:7c:23:2a:33:1f:14:34:53:33:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca183a6691309a79d6e6605b0d5c11e3ff7e9194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2a:7f:0f:4f:91:92:41:5c:38:1d:e1:85:ea:
70:12:4c:27:b5:a2:2f:19:6d:95:1c:aa:25:0f:f6:
17:9c:3f:e4:eb:4e:2e:eb:70:6e:59:99:79:30:e0:
54:76:5a:db:24:cd:ca:f5:60:41:c2:ad:e9:a8:0e:
c6:3b:ee:c3:3b:b8:90:80:c6:1e:bd:05:4a:0e:4d:
d2:62:0e:d2:43:6a:f2:36:85:7a:b2:1c:9c:e6:26:
a9:c2:28:42:52:23:89:d6:a0:eb:67:02:65:89:13:
e5:d5:1e:70:5c:4f:92:15:60:8a:75:ce:8a:05:f7:
06:43:d8:22:46:12:33:8e:a1:aa:e9:55:6e:d7:1b:
41:f5:bd:58:6d:46:9c:c2:5f:25:c9:a2:4b:5a:d4:
0b:38:57:28:67:b6:c0:76:30:95:d4:e4:f3:6a:36:
f6:da:7a:57:45:ef:5e:6a:7d:6e:3e:0c:6f:3a:c3:
06:b8:e3:c3:35:1f:c8:60:a4:95:e2:93:8b:22:6d:
eb:39:fc:31:d2:c4:d2:17:c9:7f:4d:c9:ff:46:16:
dc:05:d5:a6:d3:ef:fe:f6:2b:0c:e2:f6:3c:c3:34:
7d:6b:6d:b2:b1:c4:78:a6:85:27:5e:f2:27:ba:c5:
09:34:d6:1c:69:9e:ea:0c:24:2f:0d:38:97:d0:d1:
0b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:18:3A:66:91:30:9A:79:D6:E6:60:5B:0D:5C:11:E3:FF:7E:91:94
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0774bb-3b0b-4f47-b151-19e708469cee/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0774bb-3b0b-4f47-b151-19e708469cee/1/yhg6ZpEwmnnW5mBbDVwR4_9-kZQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.192.0.0-130.192.95.255
130.192.160.0/21
130.192.176.0/20
130.192.224.0/20
Signature Algorithm: sha256WithRSAEncryption
0d:66:37:38:2f:f6:95:b1:ab:ae:40:11:1b:f7:80:7b:b3:ec:
f0:9f:ae:05:94:fd:04:6d:8c:10:84:c8:61:aa:23:6c:48:fe:
28:6a:9f:30:fd:b4:a0:de:e4:3d:99:f7:6c:96:38:39:7e:52:
51:0e:6c:5f:0d:63:cf:97:32:e6:1f:24:ef:d8:8f:da:24:57:
7f:bc:f0:62:22:aa:4a:be:e2:67:d8:6d:88:42:8c:77:03:c4:
a5:80:69:84:e9:9b:c3:4e:7d:1a:e7:97:9b:68:af:2e:43:b4:
c1:a3:30:d1:9f:a2:55:11:a8:77:87:57:8e:3e:37:69:4d:5c:
92:1e:a8:2e:a7:8e:6a:c2:89:6d:3a:e0:f1:04:9c:7f:a7:31:
33:61:8b:60:20:f1:bc:86:27:54:69:a5:11:f6:b1:91:50:57:
92:0c:9d:36:68:82:7c:2b:38:60:7d:eb:7e:2d:ae:d2:5c:73:
0b:3e:a1:4e:3b:d9:36:f6:f5:4c:13:41:9f:9b:4c:d8:69:d2:
b6:c9:bb:14:35:e2:ea:8f:48:81:9f:86:cd:24:9b:c0:39:ae:
af:01:83:bd:4e:02:99:c9:32:dc:8f:b8:3f:ed:71:59:d8:1b:
11:ff:b4:61:e8:ec:fa:f0:bb:86:7a:bd:63:7f:4d:fa:cb:4d:
12:1a:84:68
-----BEGIN CERTIFICATE-----
MIIFkTCCBHmgAwIBAgISAZQm2TXXi7R8IyozHxQ0UzP2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTE0OTE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYTE4M2E2NjkxMzA5YTc5ZDZlNjYwNWIwZDVjMTFlM2ZmN2U5MTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyp/D0+RkkFcOB3hhepwEkwntaIv
GW2VHKolD/YXnD/k604u63BuWZl5MOBUdlrbJM3K9WBBwq3pqA7GO+7DO7iQgMYe
vQVKDk3SYg7SQ2ryNoV6shyc5iapwihCUiOJ1qDrZwJliRPl1R5wXE+SFWCKdc6K
BfcGQ9giRhIzjqGq6VVu1xtB9b1YbUacwl8lyaJLWtQLOFcoZ7bAdjCV1OTzajb2
2npXRe9ean1uPgxvOsMGuOPDNR/IYKSV4pOLIm3rOfwx0sTSF8l/Tcn/RhbcBdWm
0+/+9isM4vY8wzR9a22yscR4poUnXvInusUJNNYcaZ7qDCQvDTiX0NEL5wIDAQAB
o4ICnTCCApkwHQYDVR0OBBYEFMoYOmaRMJp51uZgWw1cEeP/fpGUMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzJlLzA3NzRi
Yi0zYjBiLTRmNDctYjE1MS0xOWU3MDg0NjljZWUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmUvMDc3NGJi
LTNiMGItNGY0Ny1iMTUxLTE5ZTcwODQ2OWNlZS8xL3loZzZacEV3bW5uVzVtQmJE
VndSNF85LWtaUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDgGCCsGAQUF
BwEHAQH/BCkwJzAlBAIAATAfMAsDAwaCwAMEBYLAQAMEA4LAoAMEBILAsAMEBILA
4DANBgkqhkiG9w0BAQsFAAOCAQEADWY3OC/2lbGrrkARG/eAe7Ps8J+uBZT9BG2M
EITIYaojbEj+KGqfMP20oN7kPZn3bJY4OX5SUQ5sXw1jz5cy5h8k79iP2iRXf7zw
YiKqSr7iZ9htiEKMdwPEpYBphOmbw059GueXm2ivLkO0waMw0Z+iVRGod4dXjj43
aU1ckh6oLqeOasKJbTrg8QScf6cxM2GLYCDxvIYnVGmlEfaxkVBXkgydNmiCfCs4
YH3rfi2u0lxzCz6hTjvZNvb1TBNBn5tM2GnStsm7FDXi6o9IgZ+GzSSbwDmurwGD
vU4Cmcky3I+4P+1xWdgbEf+0Yejs+vC7hnq9Y39N+stNEhqEaA==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:34:19 2025 by rpki-client on console.sobornost.net