Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Vzm709YFZftZWALsfGl-ohq9l-Q.cer
File: Vzm709YFZftZWALsfGl-ohq9l-Q.cer (raw, json)
Hash identifier: mFC897889C8ov2U+1WIuJO4oniLMFkZdoCLwA8s2pWk=
Subject key identifier: 57:39:BB:D3:D6:05:65:FB:59:58:02:EC:7C:69:7E:A2:1A:BD:97:E4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FBA6AC6FB7ED7B8D86930B3A403C6D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:48:25 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.87.152.0/22
IP: 193.57.174.0/23
IP: 193.57.202.0/23
IP: 2a05:c080::/29
IP: 2a0f:bc40::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:a6:ac:6f:b7:ed:7b:8d:86:93:0b:3a:40:3c:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5739bbd3d60565fb595802ec7c697ea21abd97e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2b:19:77:7e:f4:6d:d7:70:fd:b3:77:3c:ed:
41:94:2c:36:61:81:af:30:17:d0:0a:a3:8f:27:ee:
78:48:49:10:22:e6:51:47:5c:39:5a:05:7f:a8:c1:
01:cd:2e:d3:ca:87:11:7b:fb:ea:fe:c7:ee:55:37:
24:37:c2:5a:b3:6b:35:f6:66:04:de:67:ed:63:8b:
3e:e1:d1:7c:3c:7f:1c:61:07:d4:19:02:a2:6d:a6:
9e:3a:ca:0d:e7:4f:26:d3:44:10:7c:78:4c:dc:43:
c5:7e:bc:e0:1a:9f:19:8c:c1:51:a1:79:27:27:e5:
a9:f7:49:96:37:80:e3:98:0f:b2:87:a3:b7:14:de:
e0:90:b0:8a:98:86:01:39:6c:8f:6d:7e:d9:1d:8c:
e2:73:29:97:b5:b8:a9:ba:ac:b9:a8:e2:44:a9:be:
3f:c8:69:fd:26:2c:37:64:6a:6b:e1:c1:48:ee:3c:
78:25:71:51:75:8e:0a:c1:7f:89:95:2f:97:11:3e:
e6:e0:85:06:18:56:27:1f:fc:60:53:3b:cf:07:f4:
7d:e8:cb:6d:d6:df:a9:29:72:c8:4b:c9:f9:d2:d9:
56:9d:99:28:30:24:06:81:6c:b7:25:06:3f:af:51:
64:bc:a7:ee:dd:15:35:c7:63:54:dc:b3:a7:75:a6:
a0:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:39:BB:D3:D6:05:65:FB:59:58:02:EC:7C:69:7E:A2:1A:BD:97:E4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.87.152.0/22
193.57.174.0/23
193.57.202.0/23
IPv6:
2a05:c080::/29
2a0f:bc40::/29
Signature Algorithm: sha256WithRSAEncryption
86:c6:b2:35:38:f4:d6:06:b4:cc:1f:39:7f:e5:1b:a4:32:8f:
a7:8d:f6:23:77:6b:fd:99:ae:00:ce:24:5f:61:b9:91:99:61:
c8:73:71:e2:56:24:f9:f5:03:37:f5:f2:a7:ed:48:46:bb:94:
dc:05:a4:be:70:19:32:fd:f9:92:3b:e1:99:86:4d:b5:d4:f0:
9e:fa:4e:97:e5:09:10:f6:7b:d5:d3:7b:28:14:c9:ee:27:80:
6b:38:d6:e9:a3:1e:8b:e3:32:31:c6:63:05:47:b1:7b:3d:fe:
b4:5a:4b:d5:55:99:d7:7a:8e:82:33:75:ee:4c:48:7a:14:a0:
94:ed:8c:4c:43:66:c4:e4:7a:28:2b:78:4e:d0:64:97:d6:2e:
aa:44:d3:98:6e:76:d2:85:18:89:c9:26:ed:b6:0f:a5:0b:cd:
d9:21:bf:90:f4:7f:1b:52:5f:e6:f2:93:96:64:91:1a:ec:79:
27:bd:cb:62:9d:00:b6:fe:66:44:25:36:da:11:5f:ec:4b:d0:
51:50:9d:3f:35:f5:0a:1f:ac:f9:e3:8f:ac:50:5f:6c:5c:65:
a4:8a:68:fa:41:f5:eb:24:8f:f7:f3:86:3d:be:07:5f:34:15:
ca:15:9a:19:47:a0:2b:8b:65:9c:cb:44:6f:57:da:83:1f:f8:
18:b7:c1:c7
-----BEGIN CERTIFICATE-----
MIIFmjCCBIKgAwIBAgISAZQi+6asb7fte42Gkws6QDxtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTc0ODI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NzM5YmJkM2Q2MDU2NWZiNTk1ODAyZWM3YzY5N2VhMjFhYmQ5N2U0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyysZd370bddw/bN3PO1BlCw2YYGv
MBfQCqOPJ+54SEkQIuZRR1w5WgV/qMEBzS7TyocRe/vq/sfuVTckN8Jas2s19mYE
3mftY4s+4dF8PH8cYQfUGQKibaaeOsoN508m00QQfHhM3EPFfrzgGp8ZjMFRoXkn
J+Wp90mWN4DjmA+yh6O3FN7gkLCKmIYBOWyPbX7ZHYzicymXtbipuqy5qOJEqb4/
yGn9Jiw3ZGpr4cFI7jx4JXFRdY4KwX+JlS+XET7m4IUGGFYnH/xgUzvPB/R96Mtt
1t+pKXLIS8n50tlWnZkoMCQGgWy3JQY/r1FkvKfu3RU1x2NU3LOndaageQIDAQAB
o4ICpjCCAqIwHQYDVR0OBBYEFFc5u9PWBWX7WVgC7HxpfqIavZfkMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2YxLzlhMjZm
MS0zYWI1LTQ5ZjYtYmM1Ny01ZDYyOTU5ZDEwNWIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjEvOWEyNmYx
LTNhYjUtNDlmNi1iYzU3LTVkNjI5NTlkMTA1Yi8xL1Z6bTcwOVlGWmZ0WldBTHNm
R2wtb2hxOWwtUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEEGCCsGAQUF
BwEHAQH/BDIwMDAYBAIAATASAwQCuVeYAwQBwTmuAwQBwTnKMBQEAgACMA4DBQMq
BcCAAwUDKg+8QDANBgkqhkiG9w0BAQsFAAOCAQEAhsayNTj01ga0zB85f+UbpDKP
p432I3dr/ZmuAM4kX2G5kZlhyHNx4lYk+fUDN/Xyp+1IRruU3AWkvnAZMv35kjvh
mYZNtdTwnvpOl+UJEPZ71dN7KBTJ7ieAazjW6aMei+MyMcZjBUexez3+tFpL1VWZ
13qOgjN17kxIehSglO2MTENmxOR6KCt4TtBkl9YuqkTTmG520oUYickm7bYPpQvN
2SG/kPR/G1Jf5vKTlmSRGux5J73LYp0Atv5mRCU22hFf7EvQUVCdPzX1Ch+s+eOP
rFBfbFxlpIpo+kH16ySP9/OGPb4HXzQVyhWaGUegK4tlnMtEb1fagx/4GLfBxw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:13:58 2025 by rpki-client