Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/B6kIPgEhBVotScWTBfQ6g93l2bc.cer
File: B6kIPgEhBVotScWTBfQ6g93l2bc.cer (raw, json)
Hash identifier: TCa1Idp9C9v2sH/YGjL/+RU8/XwTigxT3SlmlfgQLwg=
Subject key identifier: 07:A9:08:3E:01:21:05:5A:2D:49:C5:93:05:F4:3A:83:DD:E5:D9:B7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D70B65D273E0DB32C92C21ABC4C041
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:48:03 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 176.110.100.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:0b:65:d2:73:e0:db:32:c9:2c:21:ab:c4:c0:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=07a9083e0121055a2d49c59305f43a83dde5d9b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e9:1f:75:27:55:2d:0b:8c:6d:dc:b5:aa:b3:
e2:9c:dc:aa:6b:28:fc:a3:82:4e:01:00:84:f7:93:
c1:8b:d5:ee:35:3c:3a:62:72:82:c9:79:4b:20:bd:
1e:7e:50:4d:d3:d2:eb:6c:54:0b:7a:fa:98:16:3d:
a8:cc:e2:0d:4f:46:f6:61:4b:74:13:12:84:6a:3d:
17:26:d4:10:06:3a:09:7e:92:77:81:1c:0d:0a:30:
a2:08:14:32:32:74:31:25:18:dc:73:94:d5:05:90:
35:53:f8:fe:22:a6:e5:b5:09:c6:46:1d:de:66:f9:
a0:fe:9f:10:8c:70:e2:63:23:f2:1f:63:d9:56:6c:
55:c3:91:90:88:3a:a8:26:28:3f:70:76:c5:c2:6c:
ec:0a:ee:02:00:89:32:f9:1a:88:2b:c0:6c:bf:20:
e7:05:32:09:dd:4e:50:50:6d:28:bc:a8:c5:da:1c:
55:5c:db:ae:32:6b:04:8f:8a:95:75:fe:1f:c2:59:
06:e5:b4:d5:de:83:f1:22:8c:df:a9:36:98:ab:10:
0c:3b:90:06:37:aa:5a:d5:8e:03:05:0c:86:3a:de:
18:b5:b4:1c:e7:4d:59:7d:42:cb:91:cd:36:16:bb:
47:61:a4:b0:11:8b:91:34:76:fd:1b:3e:8f:bb:1f:
42:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:A9:08:3E:01:21:05:5A:2D:49:C5:93:05:F4:3A:83:DD:E5:D9:B7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.110.100.0/24
Signature Algorithm: sha256WithRSAEncryption
73:e1:50:e4:e0:72:26:cd:60:4b:d0:bb:f6:9a:2f:10:fb:39:
44:4d:7f:2c:ec:c4:1d:80:b5:53:f0:7a:7a:f8:5c:94:03:36:
6c:67:07:0d:46:9f:82:4a:21:90:b0:d6:18:d1:a1:a4:3a:6b:
76:c1:dd:45:a7:d9:2b:ef:63:a5:d9:57:47:b8:bf:75:d9:6b:
06:92:26:c9:ff:27:00:6d:e6:c4:29:a0:1f:c7:f4:83:e2:3f:
b5:61:20:9a:0c:07:ad:1c:56:40:9e:b8:18:9c:28:cf:e4:ba:
d1:e9:92:8d:fd:f8:b0:65:7c:01:f0:00:3b:c0:30:7c:c0:78:
83:d2:1a:a5:5a:92:c3:8d:6c:0b:af:d8:df:d6:db:a5:b7:fc:
7c:1d:10:96:9a:83:e2:fe:66:4a:e1:07:4a:7a:a3:b9:06:63:
8c:a7:fa:5f:98:54:d8:71:b0:ce:27:c1:0e:f0:02:34:f1:6d:
c7:be:e2:c7:8c:22:c5:3d:49:a7:bb:9e:bf:4c:e6:d0:f4:9d:
59:43:cd:20:01:6d:12:5b:62:62:97:f4:a0:7c:b9:90:c5:75:
0e:7e:e1:aa:c9:8c:06:dc:e7:f1:67:29:36:34:d7:85:32:7c:
30:01:9e:b8:ab:0b:dc:aa:b6:18:fa:12:30:3c:35:b2:0d:35:
08:eb:43:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:37:33 2025 by rpki-client