Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3Rc4MRWBIorSh1OUS-i88hafq6k.cer
File: 3Rc4MRWBIorSh1OUS-i88hafq6k.cer (raw, json)
Hash identifier: vf2tL9Wg2PliqRNUvdXRn/NfPSEnotbCn2JwZcuxkvE=
Subject key identifier: DD:17:38:31:15:81:22:8A:D2:87:53:94:4B:E8:BC:F2:16:9F:AB:A9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFAA1536E71FC61A2D317FE4A2F1043
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/05/bc41f1-ca7e-4205-b81b-bebfa2fca46f/1/3Rc4MRWBIorSh1OUS-i88hafq6k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/05/bc41f1-ca7e-4205-b81b-bebfa2fca46f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:48:26 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 93.92.168.0/21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:a1:53:6e:71:fc:61:a2:d3:17:fe:4a:2f:10:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dd1738311581228ad28753944be8bcf2169faba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:da:15:34:42:ea:71:59:69:b2:29:a3:cc:97:
05:6a:af:8e:1b:6c:62:70:27:13:b7:05:c4:41:28:
b1:d5:ea:f8:b0:5a:6a:be:3f:53:1c:40:cf:38:27:
db:86:e1:6e:04:c5:65:ce:ae:91:0a:05:46:bb:2a:
82:85:4f:59:5d:6c:30:a9:03:1a:9d:39:02:fd:a6:
d1:d8:d1:15:c6:80:53:ff:76:dd:41:cd:6f:81:76:
bf:e5:1f:1f:b4:b9:30:96:9f:5f:26:9a:f2:95:b3:
cc:a5:c5:4a:a4:d7:e3:40:3c:f6:d3:6d:fb:52:73:
8c:83:49:c1:98:23:63:12:c6:46:9c:ad:b7:d0:b0:
4b:d3:93:8c:7b:24:2c:ac:3c:37:30:ca:f7:70:44:
6b:40:82:b2:ec:96:43:fe:32:38:2d:29:55:98:2b:
e0:31:34:e5:b1:3c:a7:46:30:9a:e2:9b:96:04:da:
67:75:3f:7a:4c:8e:d2:67:0d:5d:0c:68:39:50:43:
3a:20:b7:80:65:f3:df:f1:33:3a:e7:dd:e7:fd:47:
43:87:28:30:0e:a2:e1:82:3d:93:44:38:84:12:8f:
4d:2a:6e:b1:80:df:08:50:4c:30:73:da:da:3b:00:
b4:92:ce:25:8a:83:4a:e9:01:7a:7b:58:ba:9b:cd:
41:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:17:38:31:15:81:22:8A:D2:87:53:94:4B:E8:BC:F2:16:9F:AB:A9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bc41f1-ca7e-4205-b81b-bebfa2fca46f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/bc41f1-ca7e-4205-b81b-bebfa2fca46f/1/3Rc4MRWBIorSh1OUS-i88hafq6k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.92.168.0/21
Signature Algorithm: sha256WithRSAEncryption
76:6c:43:35:8c:12:01:05:11:35:f5:85:d5:09:1f:09:d9:68:
f5:13:51:5e:56:52:08:9f:dd:15:ad:8d:e0:e1:d0:b1:98:f4:
f5:7e:46:45:93:4b:11:e9:a7:1f:16:97:57:c0:57:f9:53:ca:
61:3b:75:25:b5:62:f2:7a:3a:e5:94:60:98:a0:8f:0a:b8:38:
9c:dc:b6:a3:c5:01:3b:16:bc:60:60:e7:c9:02:41:03:4c:05:
93:15:0b:09:8c:a2:3c:cf:93:c9:88:ca:25:57:6f:2b:51:6e:
1b:d8:4f:42:a0:9c:8b:5c:df:31:f7:a8:e1:44:a1:d4:42:9a:
98:94:d8:38:4e:a5:ba:14:50:55:82:29:c7:c0:4e:58:2a:7c:
e2:7e:5b:3c:ad:46:1d:bc:78:3f:27:be:69:48:e1:52:45:4e:
0f:93:46:8b:e5:0b:5c:9e:f6:95:9b:a8:4e:3c:65:f1:22:31:
28:9f:55:26:bc:9f:98:21:4c:97:c8:70:76:46:41:80:c9:0a:
35:13:3d:34:d1:33:28:9a:9e:2e:a7:99:ed:0f:b0:1d:b5:7a:
fc:4e:f2:b6:d2:df:8b:d2:0d:a2:5c:89:b4:aa:32:2a:67:f0:
dc:58:0a:63:4e:99:15:0d:bf:5d:f3:27:61:46:43:e9:d8:84:
89:c8:c1:58
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQf+qFTbnH8YaLTF/5KLxBDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDM0ODI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZDE3MzgzMTE1ODEyMjhhZDI4NzUzOTQ0YmU4YmNmMjE2OWZhYmE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NoVNELqcVlpsimjzJcFaq+OG2xi
cCcTtwXEQSix1er4sFpqvj9THEDPOCfbhuFuBMVlzq6RCgVGuyqChU9ZXWwwqQMa
nTkC/abR2NEVxoBT/3bdQc1vgXa/5R8ftLkwlp9fJprylbPMpcVKpNfjQDz20237
UnOMg0nBmCNjEsZGnK230LBL05OMeyQsrDw3MMr3cERrQIKy7JZD/jI4LSlVmCvg
MTTlsTynRjCa4puWBNpndT96TI7SZw1dDGg5UEM6ILeAZfPf8TM6593n/UdDhygw
DqLhgj2TRDiEEo9NKm6xgN8IUEwwc9raOwC0ks4lioNK6QF6e1i6m81B3wIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFN0XODEVgSKK0odTlEvovPIWn6upMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA1L2JjNDFm
MS1jYTdlLTQyMDUtYjgxYi1iZWJmYTJmY2E0NmYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDUvYmM0MWYx
LWNhN2UtNDIwNS1iODFiLWJlYmZhMmZjYTQ2Zi8xLzNSYzRNUldCSW9yU2gxT1VT
LWk4OGhhZnE2ay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQDXVyoMA0GCSqGSIb3DQEBCwUAA4IBAQB2bEM1
jBIBBRE19YXVCR8J2Wj1E1FeVlIIn90VrY3g4dCxmPT1fkZFk0sR6acfFpdXwFf5
U8phO3UltWLyejrllGCYoI8KuDic3LajxQE7FrxgYOfJAkEDTAWTFQsJjKI8z5PJ
iMolV28rUW4b2E9CoJyLXN8x96jhRKHUQpqYlNg4TqW6FFBVginHwE5YKnzifls8
rUYdvHg/J75pSOFSRU4Pk0aL5QtcnvaVm6hOPGXxIjEon1UmvJ+YIUyXyHB2RkGA
yQo1Ez000TMomp4up5ntD7AdtXr8TvK20t+L0g2iXIm0qjIqZ/DcWApjTpkVDb9d
8ydhRkPp2ISJyMFY
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:36:48 2025 by rpki-client