Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VHGK9qNvZqkZOTZKr8hkRauKbg4.cer
File: VHGK9qNvZqkZOTZKr8hkRauKbg4.cer (raw, json)
Hash identifier: b12fIDfSKIgE1GrzWnqlY47jo/PdLTzsV5kCQ401zGw=
Subject key identifier: 54:71:8A:F6:A3:6F:66:A9:19:39:36:4A:AF:C8:64:45:AB:8A:6E:0E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA04148270B19CC30D2762D181B870
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:47:46 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2001:67c:2c2c::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:04:14:82:70:b1:9c:c3:0d:27:62:d1:81:b8:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=54718af6a36f66a91939364aafc86445ab8a6e0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c9:e2:4c:ad:4a:19:8c:12:c3:1c:59:8d:60:
c4:cc:63:2b:a2:bf:d5:d8:39:75:22:53:fc:26:38:
d4:bd:31:30:3d:bc:e0:fd:35:92:86:bc:b6:cf:d1:
7a:d5:24:5b:13:0e:f8:c5:d3:a7:41:e1:56:68:2d:
33:84:27:49:27:e9:4a:3a:39:38:e2:d4:4c:ca:af:
53:e8:47:9f:39:f4:b3:08:08:cd:00:d0:a5:9a:8b:
ed:76:9a:b8:66:c0:bc:32:df:96:da:4d:c2:92:90:
94:6f:8d:9c:c4:21:76:ee:6d:c6:0f:be:49:1b:dc:
c8:6a:21:0c:da:fb:6e:16:58:2f:71:a6:28:e8:a4:
21:b6:07:89:f5:76:cf:95:34:6e:be:57:79:09:aa:
60:d2:75:57:dd:7d:4d:ab:82:71:a4:36:85:2a:ec:
d7:b2:8e:9b:ec:7a:e7:02:e9:e5:b3:07:0a:f6:7d:
8e:2f:8f:23:d0:e7:be:4d:ed:20:bd:62:ac:f8:8a:
55:49:2c:4a:60:36:c1:50:48:06:9b:13:23:d8:87:
23:b9:fb:1a:c9:34:05:c3:e9:7e:e7:58:83:51:b6:
2d:24:43:45:d9:89:2d:9b:66:57:f7:d0:d8:5c:7e:
4b:42:f8:7b:14:a6:60:65:ce:f0:94:cd:11:ad:17:
5c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:71:8A:F6:A3:6F:66:A9:19:39:36:4A:AF:C8:64:45:AB:8A:6E:0E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2c2c::/48
Signature Algorithm: sha256WithRSAEncryption
47:3f:8f:84:fe:1f:ae:e5:1f:c0:35:63:71:fe:48:d7:07:8a:
49:b5:ca:03:ab:d6:37:c6:f6:07:a7:da:a9:26:59:89:f2:11:
16:7c:d4:86:fb:fa:14:dd:02:81:14:cb:8a:d6:a3:00:23:c1:
9e:4b:8e:5e:e9:cd:af:99:13:49:b5:53:90:5f:d7:6e:58:8e:
0c:4c:11:1e:5a:54:f3:c4:cc:dc:7f:d2:fe:56:d6:38:11:f9:
c1:fd:bf:c4:e9:f3:ec:0e:d2:e7:68:fe:cb:12:bc:a4:6b:3f:
74:2c:5d:8b:31:85:67:66:89:d9:cd:d7:81:4f:cb:e3:0b:65:
0d:bf:fd:ba:f8:e3:7a:1b:31:68:b9:0c:e4:30:e2:d5:fd:ff:
9d:8d:a4:d8:fa:d6:db:fa:03:8f:bd:6a:fb:6d:97:bb:d5:d2:
24:76:81:51:7d:1f:cf:6b:6c:29:fa:4d:08:59:ca:d2:d4:06:
7f:36:95:8c:88:04:df:d7:b1:4d:9a:43:74:fe:30:5f:15:2a:
cb:c7:ff:07:a7:cb:6f:95:94:df:a7:e5:81:1b:32:cf:b0:d2:
54:3b:58:af:66:86:ae:18:fc:92:2e:3f:b5:b2:a8:d9:58:4b:
ba:e2:f7:83:ea:ae:76:61:f6:5f:70:64:a2:7c:65:73:f4:1a:
54:38:c5:43
-----BEGIN CERTIFICATE-----
MIIFezCCBGOgAwIBAgISAZQf+gQUgnCxnMMNJ2LRgbhwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDM0NzQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NDcxOGFmNmEzNmY2NmE5MTkzOTM2NGFhZmM4NjQ0NWFiOGE2ZTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMniTK1KGYwSwxxZjWDEzGMror/V
2Dl1IlP8JjjUvTEwPbzg/TWShry2z9F61SRbEw74xdOnQeFWaC0zhCdJJ+lKOjk4
4tRMyq9T6EefOfSzCAjNANClmovtdpq4ZsC8Mt+W2k3CkpCUb42cxCF27m3GD75J
G9zIaiEM2vtuFlgvcaYo6KQhtgeJ9XbPlTRuvld5Capg0nVX3X1Nq4JxpDaFKuzX
so6b7HrnAunlswcK9n2OL48j0Oe+Te0gvWKs+IpVSSxKYDbBUEgGmxMj2Icjufsa
yTQFw+l+51iDUbYtJENF2Yktm2ZX99DYXH5LQvh7FKZgZc7wlM0RrRdcwQIDAQAB
o4IChzCCAoMwHQYDVR0OBBYEFFRxivajb2apGTk2Sq/IZEWrim4OMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEzL2NkMmY0
MS01OWUwLTRiOGItODIwNi1iZWQ1NWM0N2E1NzgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTMvY2QyZjQx
LTU5ZTAtNGI4Yi04MjA2LWJlZDU1YzQ3YTU3OC8xL1ZIR0s5cU52WnFrWk9UWkty
OGhrUmF1S2JnNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCwsMA0GCSqGSIb3DQEBCwUAA4IBAQBH
P4+E/h+u5R/ANWNx/kjXB4pJtcoDq9Y3xvYHp9qpJlmJ8hEWfNSG+/oU3QKBFMuK
1qMAI8GeS45e6c2vmRNJtVOQX9duWI4MTBEeWlTzxMzcf9L+VtY4EfnB/b/E6fPs
DtLnaP7LErykaz90LF2LMYVnZonZzdeBT8vjC2UNv/26+ON6GzFouQzkMOLV/f+d
jaTY+tbb+gOPvWr7bZe71dIkdoFRfR/Pa2wp+k0IWcrS1AZ/NpWMiATf17FNmkN0
/jBfFSrLx/8Hp8tvlZTfp+WBGzLPsNJUO1ivZoauGPySLj+1sqjZWEu64veD6q52
YfZfcGSifGVz9BpUOMVD
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:33:10 2025 by rpki-client