Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6ixOp53bewA94B8dBfbb9xaxEzY.cer
File: 6ixOp53bewA94B8dBfbb9xaxEzY.cer (raw, json)
Hash identifier: tWyWk05WQh/L/yDm3r1Mt8AG85z3FJXGzZcyHVzVZgg=
Subject key identifier: EA:2C:4E:A7:9D:DB:7B:00:3D:E0:1F:1D:05:F6:DB:F7:16:B1:13:36
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425222CA39E7519248C970D253F4AEE39
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:49:44 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.238.172.0/22
IP: 91.241.24.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:2c:a3:9e:75:19:24:8c:97:0d:25:3f:4a:ee:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ea2c4ea79ddb7b003de01f1d05f6dbf716b11336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:44:fc:c7:c3:a6:06:9c:ab:b7:47:99:bd:07:
6e:7d:a4:07:ac:16:fd:cf:e9:d3:64:1e:c5:8b:cc:
75:91:1a:4d:68:94:2e:66:23:c7:2d:3c:3f:cc:7a:
ab:72:c5:fd:d8:45:20:bf:e2:d5:2c:0d:13:e9:c5:
ba:f1:6c:02:bf:74:f5:17:27:20:15:b5:bc:df:f5:
22:9a:8f:b3:0d:d1:1c:df:f7:98:47:32:b5:92:89:
9d:33:ef:ae:01:3d:91:1b:93:2f:8b:d1:1a:64:4e:
26:4e:2f:6b:2e:3f:0d:4f:18:50:e2:e4:fc:19:5f:
d0:d9:2b:2c:b0:9d:bf:54:cc:00:41:61:a3:71:c3:
5a:48:35:9b:af:65:32:55:d0:bc:cb:5c:6b:dd:11:
14:d8:a6:26:0b:88:b7:34:0c:b7:af:9d:5a:df:dd:
1d:d3:a8:f4:6c:0b:ed:90:42:84:b3:bc:f4:47:67:
60:81:30:ab:2d:9e:c9:d7:e3:33:ff:a4:20:96:45:
cc:9f:59:f5:2c:95:c2:78:7a:c0:45:04:7a:99:ce:
7e:64:87:75:d4:16:4c:e6:c1:55:86:d2:31:e2:30:
1c:bd:7a:34:d0:80:c1:f2:04:2d:96:68:e8:1c:c0:
97:80:b1:04:28:ee:28:a5:c1:bd:3e:4e:f2:2f:f9:
88:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:2C:4E:A7:9D:DB:7B:00:3D:E0:1F:1D:05:F6:DB:F7:16:B1:13:36
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.172.0/22
91.241.24.0/22
Signature Algorithm: sha256WithRSAEncryption
36:d3:97:89:2e:45:a1:13:0a:02:90:ad:cd:27:5f:57:0b:dd:
a7:8c:38:1d:10:f2:f9:08:1f:5e:37:ac:e1:6d:98:00:28:24:
b2:e0:41:9c:87:cb:bc:0d:78:1f:96:79:3c:bc:63:73:60:51:
7e:86:9e:f3:d0:35:94:0c:60:3e:54:2d:56:e7:e3:30:45:bb:
3b:4b:4b:a4:07:20:47:57:6b:e1:e2:f9:ab:8f:a1:ca:fb:3b:
6a:3d:61:b8:3c:4c:cf:11:2d:0b:9f:08:18:97:94:f1:98:10:
14:c8:c2:bd:ea:33:ba:e3:11:41:15:e4:7b:d3:8c:08:f5:5f:
d0:9b:a9:b9:2b:94:69:55:0d:ba:8c:cc:83:0a:b7:25:4f:f4:
96:02:23:c7:81:81:6c:7e:15:00:d5:dc:ed:d3:bf:47:32:9c:
97:91:00:ff:6a:dd:73:ce:06:20:55:24:45:44:f7:fc:07:72:
b2:c1:01:85:a7:6e:c3:09:a9:59:6d:32:a6:59:e2:7d:fa:30:
f7:64:9f:66:f8:16:ea:23:86:af:94:ef:79:dd:ee:6f:80:1a:
86:1e:ca:6d:e1:af:b8:58:27:97:8a:4a:e0:d1:35:24:8e:5c:
c2:c3:1a:27:9d:14:5a:03:d0:0d:ec:16:87:1a:15:fb:a0:52:
71:38:0c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:18:05 2025 by rpki-client