Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer
File: 6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer (raw, json)
Hash identifier: pZFwz8DYpS5rCf9q5oS6QVri09J5V0U9kMv8WmBch1A=
Subject key identifier: E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B5C07924E7B20004041E37213E7E65
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:50:10 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 43833
IP: 80.254.224.0/22
IP: 89.29.160.0 -- 89.29.231.255
IP: 89.29.240.0 -- 89.29.253.255
IP: 89.29.255.0/24
IP: 91.223.7.0/24
IP: 176.57.96.0/21
IP: 185.40.36.0/24
IP: 185.64.240.0 -- 185.64.242.255
IP: 185.250.196.0/22
IP: 193.177.212.0/22
IP: 213.181.64.0/19
IP: 2a0c:11c0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:c0:79:24:e7:b2:00:04:04:1e:37:21:3e:7e:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:50:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e92c415d1775ae9993e900a7536b46ab144a9aa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:01:95:22:9a:6b:0d:a7:42:df:04:11:e1:d1:
c7:92:67:ba:28:ff:97:bb:01:73:bc:f2:b4:67:0f:
85:11:bf:68:68:4a:99:92:02:66:f9:41:a8:a5:4a:
a3:35:f2:6e:27:5c:56:ff:d2:4a:3c:42:4f:68:14:
4c:1d:32:09:e0:98:4d:a6:94:e4:1e:1e:70:a4:62:
8e:0a:ce:0a:c8:04:89:b8:4e:18:6b:fd:5f:b4:9f:
bc:b2:1c:59:0f:7f:13:f1:e4:b6:b4:97:3c:d5:ee:
95:f7:04:bb:33:39:bd:0c:27:fc:6e:cb:5d:de:97:
29:73:0c:81:11:6f:43:dd:c7:08:4f:57:2e:96:90:
9b:88:b5:da:2a:ca:db:fe:a3:c5:f7:70:4b:80:70:
81:f0:12:e9:80:29:29:ac:24:9a:fa:84:f2:ae:ca:
e1:a1:3f:ca:00:8e:3b:7a:af:e9:c0:ee:87:fb:f3:
72:cc:2a:6a:3c:9a:24:44:5c:84:f6:74:85:0e:a0:
20:f7:16:2b:f8:09:ff:0b:1b:2a:41:05:51:c8:cd:
2a:98:52:f1:27:29:be:49:89:e5:15:e7:f2:db:9a:
23:c6:c5:8a:ad:39:a9:e8:58:14:7a:fc:a2:e8:60:
d0:a1:33:11:7d:fc:08:c9:76:5b:a7:35:be:9b:13:
a1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.254.224.0/22
89.29.160.0-89.29.231.255
89.29.240.0-89.29.253.255
89.29.255.0/24
91.223.7.0/24
176.57.96.0/21
185.40.36.0/24
185.64.240.0-185.64.242.255
185.250.196.0/22
193.177.212.0/22
213.181.64.0/19
IPv6:
2a0c:11c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43833
Signature Algorithm: sha256WithRSAEncryption
15:f2:0b:47:e9:42:d5:1c:c0:2a:6c:df:b8:dd:2a:e3:10:25:
c1:5a:df:d9:59:2b:f8:aa:00:07:7c:03:a8:b0:0f:04:36:86:
a1:9b:1b:22:f8:83:8d:b5:f9:c5:8d:a4:16:62:98:9b:67:76:
53:eb:c2:a1:26:c3:37:13:2c:bf:f6:ad:06:76:c2:f1:f9:dc:
3e:c6:5d:70:48:71:c5:a6:17:e5:f4:79:61:28:19:55:25:82:
44:f0:61:e1:62:56:2e:2b:42:e0:ca:e6:08:7b:a4:f9:75:9d:
bc:e5:7f:ff:32:f9:60:34:bb:92:de:d9:8a:3d:ff:98:4e:b8:
3e:9a:46:93:f9:78:a8:04:1c:51:b3:b4:2c:eb:36:ae:19:3b:
5c:e5:48:fe:ea:f9:04:7c:e8:10:c6:d2:ec:32:56:63:57:cf:
9d:ec:2e:d9:0d:d8:0f:e1:22:cd:56:48:a2:6f:c1:c2:bf:4d:
9e:f0:1b:1c:fd:2f:2c:b0:53:aa:e8:31:8a:05:fd:23:ae:9a:
3f:2b:21:23:79:8d:b7:1a:63:5e:52:64:aa:dc:8c:30:26:32:
36:e9:91:c9:80:ea:20:14:3b:22:8f:0b:e7:e4:9a:5d:50:b0:
dd:cc:39:45:b6:30:2e:c1:f1:70:60:0f:8a:0a:50:c0:e6:fe:
a8:57:7f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:25:07 2025 by rpki-client