Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6WTScFqbJv1IKpwQ6Sbq572kHps.cer
File: 6WTScFqbJv1IKpwQ6Sbq572kHps.cer (raw, json)
Hash identifier: 7wj6uj2tOnNGFVOgJX2DpWjHBG6sjH8r8O7DpH9E5NE=
Subject key identifier: E9:64:D2:70:5A:9B:26:FD:48:2A:9C:10:E9:26:EA:E7:BD:A4:1E:9B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D9F36FBCD2E83F478900B1E11CEA37
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/08/a6636d-cc53-4cee-84cc-f4e361e4da2d/1/6WTScFqbJv1IKpwQ6Sbq572kHps.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/08/a6636d-cc53-4cee-84cc-f4e361e4da2d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:50:05 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.198.112.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:f3:6f:bc:d2:e8:3f:47:89:00:b1:e1:1c:ea:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:50:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e964d2705a9b26fd482a9c10e926eae7bda41e9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:bb:0e:8e:f8:88:35:90:28:a0:56:8c:27:bd:
fb:ec:02:7d:8a:20:9a:21:8f:45:49:1f:82:27:8c:
92:79:88:72:59:31:6f:b2:34:28:d7:01:9f:ce:b2:
19:fc:33:73:80:01:06:f3:cf:2b:cb:75:ff:a8:2a:
51:7f:ae:34:ca:dd:a1:71:da:af:5e:40:f9:77:c0:
b6:ec:cf:0c:6b:fe:35:ac:73:e6:82:00:fd:33:12:
b5:a6:f0:12:be:85:f5:2b:b7:de:e0:40:61:a3:c1:
82:76:ee:52:2c:f8:0c:9a:d0:6c:2c:96:66:69:d6:
36:5e:eb:7f:fc:ef:62:f1:db:be:40:21:44:b7:92:
ac:e0:25:cb:63:71:6b:ba:dc:a6:64:a6:f5:e6:d3:
81:1e:0a:b7:02:73:90:b1:ee:51:38:d3:56:09:83:
33:56:be:1e:df:35:76:e8:77:6b:4f:48:4e:34:f0:
85:d0:4a:ae:da:b0:28:ec:66:fa:ba:f1:17:4a:38:
87:fb:f0:51:9f:0d:a6:f9:05:9d:63:ef:d0:ce:a6:
aa:9c:91:2c:ea:d6:09:40:d1:fc:80:fa:83:66:1b:
47:f2:f9:e6:33:08:70:9d:9d:f0:97:31:51:d2:ab:
b1:fb:c2:86:c1:8b:0c:80:30:e8:b9:f9:9c:52:56:
a7:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:64:D2:70:5A:9B:26:FD:48:2A:9C:10:E9:26:EA:E7:BD:A4:1E:9B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a6636d-cc53-4cee-84cc-f4e361e4da2d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a6636d-cc53-4cee-84cc-f4e361e4da2d/1/6WTScFqbJv1IKpwQ6Sbq572kHps.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.198.112.0/22
Signature Algorithm: sha256WithRSAEncryption
55:74:98:70:d0:e6:42:52:ce:30:66:a4:cc:ff:f0:42:98:11:
25:8b:4c:3e:ff:63:22:5a:8d:f3:33:9c:d5:da:af:e9:7d:4b:
9a:3f:40:f3:b4:ae:34:07:48:7d:37:3f:92:2c:19:e3:e3:e7:
e3:1b:77:83:c7:d4:e4:ec:cf:d7:fa:af:8f:f6:a7:af:a8:41:
97:0d:32:ef:5a:22:62:96:a2:5a:fa:6f:60:f7:70:52:00:29:
b7:54:65:98:ad:b2:4e:be:72:31:7e:65:17:8b:d9:2e:10:a2:
b3:9f:4b:e1:cf:3f:27:22:6f:df:88:3d:4c:49:7c:dc:93:ed:
d6:ba:42:75:f5:47:3f:41:99:7c:69:1f:2f:f3:43:70:6b:1b:
fd:eb:a9:11:21:24:22:84:ff:e6:0c:4c:a0:da:7d:5e:c7:e9:
c3:e1:6d:af:99:27:82:b5:98:64:90:d8:5d:11:77:d5:f5:8a:
f4:b6:89:67:69:e7:1f:2e:71:64:b2:da:1a:70:bf:2b:11:be:
ac:02:8e:f0:86:e0:1e:b7:8f:91:ed:38:f9:aa:23:c7:96:a2:
6e:57:e7:07:57:b8:06:34:d1:7c:6a:27:75:64:77:54:a2:33:
af:2d:9c:f0:01:7e:ae:0a:cc:26:cc:6b:06:d7:78:4f:6a:94:
37:ce:57:ef
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQm2fNvvNLoP0eJALHhHOo3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTE1MDA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOTY0ZDI3MDVhOWIyNmZkNDgyYTljMTBlOTI2ZWFlN2JkYTQxZTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7sOjviINZAooFaMJ7377AJ9iiCa
IY9FSR+CJ4ySeYhyWTFvsjQo1wGfzrIZ/DNzgAEG888ry3X/qCpRf640yt2hcdqv
XkD5d8C27M8Ma/41rHPmggD9MxK1pvASvoX1K7fe4EBho8GCdu5SLPgMmtBsLJZm
adY2Xut//O9i8du+QCFEt5Ks4CXLY3FrutymZKb15tOBHgq3AnOQse5RONNWCYMz
Vr4e3zV26HdrT0hONPCF0Equ2rAo7Gb6uvEXSjiH+/BRnw2m+QWdY+/QzqaqnJEs
6tYJQNH8gPqDZhtH8vnmMwhwnZ3wlzFR0qux+8KGwYsMgDDoufmcUlanFwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFOlk0nBamyb9SCqcEOkm6ue9pB6bMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA4L2E2NjM2
ZC1jYzUzLTRjZWUtODRjYy1mNGUzNjFlNGRhMmQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDgvYTY2MzZk
LWNjNTMtNGNlZS04NGNjLWY0ZTM2MWU0ZGEyZC8xLzZXVFNjRnFiSnYxSUtwd1E2
U2JxNTcya0hwcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCucZwMA0GCSqGSIb3DQEBCwUAA4IBAQBVdJhw
0OZCUs4wZqTM//BCmBEli0w+/2MiWo3zM5zV2q/pfUuaP0DztK40B0h9Nz+SLBnj
4+fjG3eDx9Tk7M/X+q+P9qevqEGXDTLvWiJilqJa+m9g93BSACm3VGWYrbJOvnIx
fmUXi9kuEKKzn0vhzz8nIm/fiD1MSXzck+3WukJ19Uc/QZl8aR8v80Nwaxv966kR
ISQihP/mDEyg2n1ex+nD4W2vmSeCtZhkkNhdEXfV9Yr0tolnaecfLnFkstoacL8r
Eb6sAo7whuAet4+R7Tj5qiPHlqJuV+cHV7gGNNF8aid1ZHdUojOvLZzwAX6uCswm
zGsG13hPapQ3zlfv
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:07:29 2025 by rpki-client