Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0i6VxFGd6SCOPSIzKqvsaxoup1Y.cer
File: 0i6VxFGd6SCOPSIzKqvsaxoup1Y.cer (raw, json)
Hash identifier: IcM3Y9mJIxUafkPTgFiMg20ZTNmdhtmv82rXd5AOzZU=
Subject key identifier: D2:2E:95:C4:51:9D:E9:20:8E:3D:22:33:2A:AB:EC:6B:1A:2E:A7:56
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942369BC4A329AFF46858DF6DD615CA626
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:48:39 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 46.183.64.0/21
IP: 2a0b:c180::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:bc:4a:32:9a:ff:46:85:8d:f6:dd:61:5c:a6:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d22e95c4519de9208e3d22332aabec6b1a2ea756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:79:73:32:81:65:72:1d:db:56:df:5b:74:66:
13:23:e6:ab:e1:3a:6c:c0:77:0e:b5:45:3f:60:ee:
0c:3f:ff:b3:9e:ce:ce:46:83:fd:ab:da:32:4c:bc:
e7:d3:00:b6:9d:e9:3a:d6:3a:80:a5:62:14:10:81:
48:79:59:64:a0:2b:4a:08:be:0e:f7:9a:95:7c:68:
2a:1e:05:74:36:fa:ad:df:c1:e7:0c:48:a4:58:e4:
76:52:4b:12:88:81:2c:62:eb:5a:98:ed:cb:1b:9e:
d8:b3:67:d8:db:6e:a8:d0:1f:1d:67:7b:32:00:17:
ea:04:8a:f9:d9:2c:7b:f3:57:44:21:36:2f:23:be:
b4:7c:50:de:d4:0b:69:2b:88:f2:0c:4d:d5:23:bc:
1b:85:26:fa:28:b8:ee:c2:9b:41:83:d2:2c:a5:91:
c8:c7:be:29:a2:c5:e1:0e:8e:22:c4:7c:c1:80:78:
b6:9d:e3:0f:d8:df:55:75:71:34:00:4e:eb:ee:bb:
47:c0:1b:2b:c3:33:28:83:23:b9:7d:cf:d4:ab:ac:
7c:34:ef:c7:4f:49:c9:30:43:2f:8e:de:79:4a:25:
70:e6:eb:ff:40:94:ab:38:b8:d1:b4:89:33:da:db:
bb:be:19:03:83:2f:2a:ad:64:e9:b9:5c:a3:d3:65:
86:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:2E:95:C4:51:9D:E9:20:8E:3D:22:33:2A:AB:EC:6B:1A:2E:A7:56
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.183.64.0/21
IPv6:
2a0b:c180::/32
Signature Algorithm: sha256WithRSAEncryption
87:cf:ee:b8:54:d7:b2:90:87:23:d5:51:ef:6d:54:d7:df:33:
f2:66:67:f7:0b:cc:23:9a:93:b1:7d:ae:6e:f5:01:a6:88:ac:
d8:64:8b:91:4b:02:ec:93:27:c3:17:6c:b9:2c:21:d3:fe:24:
d0:d1:b5:3b:c1:dd:ad:c1:7d:65:bf:7f:4c:35:89:72:8d:a4:
e2:65:b1:5e:78:d2:1c:7c:2f:63:74:05:92:57:99:12:e0:a3:
60:c1:c2:d5:dc:a1:6b:2b:37:13:9b:3a:6f:08:37:ee:fc:5c:
f3:fd:01:66:81:00:6d:3c:8f:8a:8f:18:c0:27:44:8c:bf:a1:
82:4d:93:a7:41:ff:21:59:52:2b:f2:57:15:8a:b4:f4:6f:df:
d6:9e:cf:fa:c0:6c:5d:2f:12:05:60:db:ca:fc:03:36:f9:10:
97:26:5f:52:0c:f6:df:a9:ac:ba:6a:56:22:ab:56:58:63:02:
ae:24:9c:23:27:db:53:b5:97:5e:eb:50:aa:09:e4:d6:21:4d:
6e:2e:05:00:ca:66:6a:ce:1a:a6:ec:45:4d:2f:8b:60:b1:63:
db:37:b4:e8:d2:b5:d0:31:b9:19:d9:3f:7e:df:88:69:c7:4d:
9c:37:d7:0d:1c:b5:ed:21:2f:e4:c5:c0:e6:5e:0b:56:22:f9:
05:62:9a:d7
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZQjabxKMpr/RoWN9t1hXKYmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTk0ODM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMjJlOTVjNDUxOWRlOTIwOGUzZDIyMzMyYWFiZWM2YjFhMmVhNzU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXlzMoFlch3bVt9bdGYTI+ar4Tps
wHcOtUU/YO4MP/+zns7ORoP9q9oyTLzn0wC2nek61jqApWIUEIFIeVlkoCtKCL4O
95qVfGgqHgV0Nvqt38HnDEikWOR2UksSiIEsYutamO3LG57Ys2fY226o0B8dZ3sy
ABfqBIr52Sx781dEITYvI760fFDe1AtpK4jyDE3VI7wbhSb6KLjuwptBg9IspZHI
x74posXhDo4ixHzBgHi2neMP2N9VdXE0AE7r7rtHwBsrwzMogyO5fc/Uq6x8NO/H
T0nJMEMvjt55SiVw5uv/QJSrOLjRtIkz2tu7vhkDgy8qrWTpuVyj02WGgQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFNIulcRRnekgjj0iMyqr7GsaLqdWMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzUwLzk5MTUz
ZC00NzAyLTQzNzUtOGU0NC1mMmU1NGRkZWEzYjMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTAvOTkxNTNk
LTQ3MDItNDM3NS04ZTQ0LWYyZTU0ZGRlYTNiMy8xLzBpNlZ4RkdkNlNDT1BTSXpL
cXZzYXhvdXAxWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQDLrdAMA0EAgACMAcDBQAqC8GAMA0GCSqGSIb3
DQEBCwUAA4IBAQCHz+64VNeykIcj1VHvbVTX3zPyZmf3C8wjmpOxfa5u9QGmiKzY
ZIuRSwLskyfDF2y5LCHT/iTQ0bU7wd2twX1lv39MNYlyjaTiZbFeeNIcfC9jdAWS
V5kS4KNgwcLV3KFrKzcTmzpvCDfu/Fzz/QFmgQBtPI+KjxjAJ0SMv6GCTZOnQf8h
WVIr8lcVirT0b9/Wns/6wGxdLxIFYNvK/AM2+RCXJl9SDPbfqay6alYiq1ZYYwKu
JJwjJ9tTtZde61CqCeTWIU1uLgUAymZqzhqm7EVNL4tgsWPbN7To0rXQMbkZ2T9+
34hpx02cN9cNHLXtIS/kxcDmXgtWIvkFYprX
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:26:58 2025 by rpki-client