Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6MPmRSpj-OR6JX5Twaj_p1-R6kA.cer
File: 6MPmRSpj-OR6JX5Twaj_p1-R6kA.cer (raw, json)
Hash identifier: sOPZUyTdlAi86ij9zMx0O2dIoE3vRGtrB7PZIFuTRO8=
Subject key identifier: E8:C3:E6:45:2A:63:F8:E4:7A:25:7E:53:C1:A8:FF:A7:5F:91:EA:40
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FD0E5402DB6AF613C58A9C2E7829D5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:48:48 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 42035
IP: 185.57.25.0 -- 185.57.27.255
IP: 185.199.140.0/22
IP: 2a00:1890::/29
IP: 2a0b:2b40::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:0e:54:02:db:6a:f6:13:c5:8a:9c:2e:78:29:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8c3e6452a63f8e47a257e53c1a8ffa75f91ea40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:5a:69:6d:07:e1:6d:ed:da:41:6a:78:17:5f:
b1:90:d8:61:13:84:cd:a4:5e:57:6e:4a:1f:c6:a7:
4a:a4:c4:e8:49:76:fc:fc:10:23:ff:83:f8:45:fc:
89:db:a6:96:00:bf:07:c4:a1:2c:b5:43:8b:89:5c:
80:18:54:28:6f:6e:4b:74:dc:62:90:02:6d:a6:01:
fc:fc:e2:db:3f:0f:97:16:47:dc:3b:a5:f1:41:15:
44:68:34:bb:e6:17:ff:f5:4e:c5:4d:b3:3c:fd:2a:
2a:b4:45:60:64:17:44:5c:32:c7:0b:6e:4b:25:c1:
3d:12:53:c5:9e:64:46:b8:da:85:8f:a0:0b:b5:86:
90:c0:34:cf:c4:6b:92:1c:2b:6b:b6:0d:54:92:e2:
86:f3:3b:ee:69:2c:d5:f1:e5:fd:89:ac:8b:c1:64:
c7:81:00:e5:b4:72:87:fb:17:32:95:29:38:b8:52:
c0:04:7f:d6:f9:c2:7a:c1:b7:77:c9:8a:35:cb:2c:
ac:5b:bf:16:cb:89:e2:aa:f4:fe:c1:30:29:98:3c:
a7:e0:03:b3:e7:30:ae:0d:9d:bf:b0:4f:a3:c3:5e:
51:15:30:5f:20:c0:21:a8:fc:c8:a6:4d:fc:96:8c:
80:14:ee:27:eb:3d:22:d0:0b:42:27:aa:70:4c:85:
dc:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C3:E6:45:2A:63:F8:E4:7A:25:7E:53:C1:A8:FF:A7:5F:91:EA:40
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/db4658-4275-43ba-9da9-6d810b0ada0a/1/6MPmRSpj-OR6JX5Twaj_p1-R6kA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.57.25.0-185.57.27.255
185.199.140.0/22
IPv6:
2a00:1890::/29
2a0b:2b40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42035
Signature Algorithm: sha256WithRSAEncryption
6c:29:69:f4:d9:20:ca:bd:5a:97:de:15:b9:f3:11:4d:f3:cc:
49:ea:ed:2e:b5:b2:dc:83:4c:cf:f1:8b:9b:b6:04:57:4b:58:
49:0b:bb:00:46:10:26:97:32:83:37:67:ae:b4:b2:63:b7:5d:
3c:a6:e5:a8:ae:4c:93:04:68:d8:6e:93:e8:df:1e:99:0c:d4:
70:be:51:89:31:26:80:5f:24:a4:40:eb:e2:db:6c:dd:de:6f:
52:2a:e5:6b:e2:ef:48:11:87:35:ae:aa:fc:17:75:ec:2e:f2:
4d:6d:d0:71:1b:83:53:7d:63:17:9d:85:72:02:c1:ad:bf:df:
fb:eb:e4:ef:84:92:cd:0f:80:62:60:b1:53:67:9e:5a:c8:de:
9c:fc:aa:e5:0c:31:ed:a5:82:52:1e:34:54:cc:da:ef:7e:f7:
00:9f:fd:f5:72:f4:97:c5:68:cb:fe:bc:17:8a:d9:d0:cd:50:
60:59:78:b5:b9:e2:77:7d:19:19:33:c5:8e:67:90:5a:f0:49:
8c:10:1d:ec:ef:e8:b8:e3:72:8c:62:85:1a:e1:cf:a8:4e:8f:
0e:15:c9:da:26:66:6e:8d:a1:28:89:f4:ff:96:af:05:6f:f2:
d7:e1:7f:49:f3:9b:26:75:80:35:27:13:97:98:8c:a3:46:52:
41:ef:5d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:24:55 2025 by rpki-client