Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_VPDr_MeJ9KhvE2bPudbuKm1eDg.cer
File: _VPDr_MeJ9KhvE2bPudbuKm1eDg.cer (raw, json)
Hash identifier: HLwKZj5GdSN5CVa9W3yFM9BlU0YZ2SyYo1uH2BMONSQ=
Subject key identifier: FD:53:C3:AF:F3:1E:27:D2:A1:BC:4D:9B:3E:E7:5B:B8:A9:B5:78:38
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D65954BD67055F1FDB6C4DDA45F761
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d3/d1e68a-1c87-483d-a89d-56dbff14ee05/1/_VPDr_MeJ9KhvE2bPudbuKm1eDg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d3/d1e68a-1c87-483d-a89d-56dbff14ee05/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:48:26 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 196810
IP: 89.207.232.0/21
IP: 178.23.168.0/21
IP: 185.15.200.0/22
IP: 185.170.16.0/22
IP: 185.213.204.0/22
IP: 185.224.40.0/22
IP: 194.104.2.0/23
IP: 194.104.86.0/23
IP: 2a02:ab40::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:59:54:bd:67:05:5f:1f:db:6c:4d:da:45:f7:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd53c3aff31e27d2a1bc4d9b3ee75bb8a9b57838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0b:80:bf:28:f2:05:d4:8a:f2:e2:fa:61:dd:
5d:9c:ad:0c:78:5e:1c:83:0e:3a:6b:13:22:fb:01:
8a:70:ea:9a:90:cb:45:66:73:82:aa:d1:ed:85:25:
ef:e5:ce:9b:33:bc:1f:fc:56:35:8e:09:68:85:84:
78:a9:14:07:9b:50:14:86:4f:0e:eb:d2:98:7a:ed:
7a:45:b2:4e:fe:71:84:11:55:d1:2c:49:08:2b:bc:
8f:2d:ec:4f:07:92:0e:fa:be:c2:dd:5d:03:2b:04:
48:a2:b6:c6:9c:1d:be:e7:b8:23:5f:b0:52:87:40:
ff:61:ed:38:d9:5b:dd:a5:7f:7f:df:a8:bf:9b:b6:
f1:80:ae:ed:1d:39:57:71:96:77:86:57:8f:f9:5c:
2d:1e:ac:be:7f:39:58:00:e1:98:2d:5e:e8:1f:5c:
f5:21:d3:ac:86:5f:6f:e8:81:af:6a:c2:6a:d5:85:
76:72:9e:21:54:92:ae:96:e1:69:bd:c0:5e:f5:91:
05:3c:d4:43:05:4c:36:3a:c4:83:4a:14:c1:43:6d:
14:22:cf:ec:51:e7:5d:96:b0:d0:c2:78:46:af:e4:
b3:59:67:e4:0c:89:19:1a:e6:3e:1c:31:46:a4:34:
7a:7b:18:f8:68:ed:b9:30:e4:4c:32:de:86:3f:6a:
e9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:53:C3:AF:F3:1E:27:D2:A1:BC:4D:9B:3E:E7:5B:B8:A9:B5:78:38
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d1e68a-1c87-483d-a89d-56dbff14ee05/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/d1e68a-1c87-483d-a89d-56dbff14ee05/1/_VPDr_MeJ9KhvE2bPudbuKm1eDg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.207.232.0/21
178.23.168.0/21
185.15.200.0/22
185.170.16.0/22
185.213.204.0/22
185.224.40.0/22
194.104.2.0/23
194.104.86.0/23
IPv6:
2a02:ab40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
196810
Signature Algorithm: sha256WithRSAEncryption
2d:3f:54:ae:8b:4e:11:b9:26:c5:28:ab:fb:f4:02:21:2e:d4:
ef:dd:0b:3a:fd:c0:72:07:87:42:24:ed:dc:1c:c7:f7:20:e1:
06:a7:80:8c:fb:f7:32:d4:49:1e:de:18:17:56:8b:db:c8:68:
d4:d5:4b:fc:ad:87:c0:e4:a7:66:37:7a:af:41:45:f9:9a:3f:
d7:ed:1f:d6:6d:21:ca:bb:40:c8:82:78:90:38:5c:f5:b4:6d:
1f:b3:ee:1b:15:b3:3c:b2:59:3a:12:7d:45:43:26:c2:ff:95:
8d:9b:96:be:d0:9f:16:b6:84:50:32:cb:40:59:1e:84:ea:16:
07:5a:9c:f2:c0:52:c2:49:d1:ec:22:84:91:2a:68:d8:7e:33:
1e:88:82:46:ac:ec:90:98:00:5e:76:b6:42:89:10:2c:f6:6c:
2d:f3:29:56:40:14:7a:ee:a3:5f:05:86:9d:5b:a6:97:6c:55:
a7:fd:b9:12:df:6f:94:f4:cc:68:1a:ef:37:ea:6f:a2:31:aa:
99:d0:2c:b6:28:0e:da:46:6e:37:b1:ce:ca:35:d8:09:02:80:
33:8f:4e:03:9a:bf:35:58:d8:d6:47:fb:82:bf:ed:fd:e1:3f:
ac:fb:85:7e:3c:ba:ab:40:51:06:00:7f:9d:41:62:15:ec:09:
56:0c:ba:d0
-----BEGIN CERTIFICATE-----
MIIFzTCCBLWgAwIBAgISAZQg1llUvWcFXx/bbE3aRfdhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDc0ODI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZDUzYzNhZmYzMWUyN2QyYTFiYzRkOWIzZWU3NWJiOGE5YjU3ODM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQuAvyjyBdSK8uL6Yd1dnK0MeF4c
gw46axMi+wGKcOqakMtFZnOCqtHthSXv5c6bM7wf/FY1jglohYR4qRQHm1AUhk8O
69KYeu16RbJO/nGEEVXRLEkIK7yPLexPB5IO+r7C3V0DKwRIorbGnB2+57gjX7BS
h0D/Ye042VvdpX9/36i/m7bxgK7tHTlXcZZ3hleP+VwtHqy+fzlYAOGYLV7oH1z1
IdOshl9v6IGvasJq1YV2cp4hVJKuluFpvcBe9ZEFPNRDBUw2OsSDShTBQ20UIs/s
UeddlrDQwnhGr+SzWWfkDIkZGuY+HDFGpDR6exj4aO25MORMMt6GP2rpCQIDAQAB
o4IC2TCCAtUwHQYDVR0OBBYEFP1Tw6/zHifSobxNmz7nW7iptXg4MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2QzL2QxZTY4
YS0xYzg3LTQ4M2QtYTg5ZC01NmRiZmYxNGVlMDUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDMvZDFlNjhh
LTFjODctNDgzZC1hODlkLTU2ZGJmZjE0ZWUwNS8xL19WUERyX01lSjlLaHZFMmJQ
dWRidUttMWVEZy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFgGCCsGAQUF
BwEHAQH/BEkwRzA2BAIAATAwAwQDWc/oAwQDsheoAwQCuQ/IAwQCuaoQAwQCudXM
AwQCueAoAwQBwmgCAwQBwmhWMA0EAgACMAcDBQMqAqtAMBoGCCsGAQUFBwEIAQH/
BAswCaAHMAUCAwMAyjANBgkqhkiG9w0BAQsFAAOCAQEALT9UrotOEbkmxSir+/QC
IS7U790LOv3AcgeHQiTt3BzH9yDhBqeAjPv3MtRJHt4YF1aL28ho1NVL/K2HwOSn
Zjd6r0FF+Zo/1+0f1m0hyrtAyIJ4kDhc9bRtH7PuGxWzPLJZOhJ9RUMmwv+VjZuW
vtCfFraEUDLLQFkehOoWB1qc8sBSwknR7CKEkSpo2H4zHoiCRqzskJgAXna2QokQ
LPZsLfMpVkAUeu6jXwWGnVuml2xVp/25Et9vlPTMaBrvN+pvojGqmdAstigO2kZu
N7HOyjXYCQKAM49OA5q/NVjY1kf7gr/t/eE/rPuFfjy6q0BRBgB/nUFiFewJVgy6
0A==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:39:50 2025 by rpki-client