Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.cer
File: 6ZTnQGQVjpeQSZCUdRDrmUGYbKE.cer (raw, json)
Hash identifier: IJsN41Fr7wdNR+V5akB3QwwJeAAyb/c/cN2gmTnsyac=
Subject key identifier: E9:94:E7:40:64:15:8E:97:90:49:90:94:75:10:EB:99:41:98:6C:A1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D9523F2B13DB3BF23531962C794231
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ff/1c12e5-c80d-4733-bc4a-3620cefcc724/1/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ff/1c12e5-c80d-4733-bc4a-3620cefcc724/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:24 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 77.246.243.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:52:3f:2b:13:db:3b:f2:35:31:96:2c:79:42:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e994e74064158e97904990947510eb9941986ca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:61:ea:53:85:54:0b:18:9e:d3:8b:4e:fc:4d:
0a:55:78:f3:ef:b8:bc:27:32:ed:b3:56:86:5f:6f:
59:f8:78:12:95:c9:3e:4a:16:5e:c5:2a:eb:41:bd:
71:ad:d8:4f:99:1e:1b:c6:7d:9f:5f:40:6e:be:bb:
8f:24:1d:73:6b:17:f3:f7:96:0e:fe:cc:60:71:ec:
70:81:99:ee:8b:82:51:0d:ac:bc:a1:b0:46:58:e8:
38:62:d0:96:10:d2:16:ca:77:99:c3:e4:c7:9b:3e:
40:9c:db:2e:a2:d6:a4:c9:85:18:a6:9e:67:b5:28:
fe:49:50:90:38:ea:73:74:b3:8b:5b:88:1b:45:04:
fb:a1:7a:f3:f9:7e:fa:c9:aa:e8:c4:58:b7:d5:90:
7b:31:14:5d:9e:00:62:9b:2e:29:ca:3d:89:6d:59:
7f:1f:b4:70:a7:0a:08:5e:31:76:10:8a:88:64:a2:
62:3f:95:6f:09:1e:c9:d5:b1:77:1d:6c:4d:11:67:
56:bf:51:f1:09:77:f5:2c:b2:8f:2e:98:c7:f4:42:
05:a0:45:4f:07:e2:e0:f1:69:d3:d0:dd:bb:eb:50:
ec:8f:d1:06:2a:4d:96:31:4e:db:6f:43:4c:3d:c3:
b3:dd:0d:e5:4b:26:ca:2f:2d:b9:b6:f3:bd:88:f4:
5b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:94:E7:40:64:15:8E:97:90:49:90:94:75:10:EB:99:41:98:6C:A1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1c12e5-c80d-4733-bc4a-3620cefcc724/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1c12e5-c80d-4733-bc4a-3620cefcc724/1/6ZTnQGQVjpeQSZCUdRDrmUGYbKE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.243.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:31:90:11:2a:1c:d6:85:24:fe:2b:38:92:bb:cd:c4:b8:82:
80:c3:2a:ff:94:ad:12:99:9a:60:d2:0f:3a:66:0a:e7:b2:16:
d9:f8:d8:40:3e:33:05:16:fc:6a:bf:c0:c1:2f:ab:96:01:97:
fa:73:74:aa:23:67:62:fd:1a:82:a7:1f:7d:91:d8:ed:fc:d2:
9c:52:0d:77:0a:dd:ac:bd:e7:e4:18:a9:49:97:13:24:84:7c:
27:2f:9a:9d:da:da:e8:32:47:52:33:ae:23:b9:ba:ec:82:02:
a9:df:74:2e:27:f5:05:7e:c3:a3:cc:a0:fa:be:0d:e0:67:f7:
b5:fc:00:8a:4c:47:ed:f7:95:e4:40:b2:92:8e:be:54:8e:52:
fc:df:7c:9c:d9:46:bc:39:d1:a4:4f:2b:d2:f6:77:7e:b7:1e:
c2:39:a6:c9:d2:4b:7b:98:12:6c:a9:0d:6f:9b:60:cc:d1:92:
48:62:db:24:9b:d8:41:4c:3d:86:27:da:ed:5a:29:5b:7e:65:
e1:d1:eb:9b:a2:ab:06:dc:65:0b:04:b9:fe:9a:da:3a:16:57:
95:d2:ec:45:ab:80:32:da:10:1a:17:d9:a6:f2:ce:02:80:68:
17:fd:6f:c0:16:0b:2c:45:b9:e6:21:03:30:6b:22:7d:b5:0a:
41:f0:66:50
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQm2VI/KxPbO/I1MZYseUIxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMTE0OTI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOTk0ZTc0MDY0MTU4ZTk3OTA0OTkwOTQ3NTEwZWI5OTQxOTg2Y2ExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGHqU4VUCxie04tO/E0KVXjz77i8
JzLts1aGX29Z+HgSlck+ShZexSrrQb1xrdhPmR4bxn2fX0BuvruPJB1zaxfz95YO
/sxgcexwgZnui4JRDay8obBGWOg4YtCWENIWyneZw+THmz5AnNsuotakyYUYpp5n
tSj+SVCQOOpzdLOLW4gbRQT7oXrz+X76yaroxFi31ZB7MRRdngBimy4pyj2JbVl/
H7RwpwoIXjF2EIqIZKJiP5VvCR7J1bF3HWxNEWdWv1HxCXf1LLKPLpjH9EIFoEVP
B+Lg8WnT0N2761Dsj9EGKk2WMU7bb0NMPcOz3Q3lSybKLy25tvO9iPRbHwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFOmU50BkFY6XkEmQlHUQ65lBmGyhMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2ZmLzFjMTJl
NS1jODBkLTQ3MzMtYmM0YS0zNjIwY2VmY2M3MjQvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmYvMWMxMmU1
LWM4MGQtNDczMy1iYzRhLTM2MjBjZWZjYzcyNC8xLzZaVG5RR1FWanBlUVNaQ1Vk
UkRybVVHWWJLRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQATfbzMA0GCSqGSIb3DQEBCwUAA4IBAQCjMZAR
KhzWhST+KziSu83EuIKAwyr/lK0SmZpg0g86ZgrnshbZ+NhAPjMFFvxqv8DBL6uW
AZf6c3SqI2di/RqCpx99kdjt/NKcUg13Ct2svefkGKlJlxMkhHwnL5qd2troMkdS
M64jubrsggKp33QuJ/UFfsOjzKD6vg3gZ/e1/ACKTEft95XkQLKSjr5UjlL833yc
2Ua8OdGkTyvS9nd+tx7COabJ0kt7mBJsqQ1vm2DM0ZJIYtskm9hBTD2GJ9rtWilb
fmXh0euboqsG3GULBLn+mto6FleV0uxFq4Ay2hAaF9mm8s4CgGgX/W/AFgssRbnm
IQMwayJ9tQpB8GZQ
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:53:46 2025 by rpki-client