Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
File: m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer (raw, json)
Hash identifier: VGJQMe8gjvAbYfD1j+8u/xBoHFe9E5kstebjG1R7u18=
Subject key identifier: 9B:BC:42:39:C9:CB:98:1F:19:A4:95:E6:33:D3:BE:C8:89:FC:BE:89
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266BA54DCA4B42369E454DA57F64B510
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:49:36 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 43940
AS: 201777
IP: 62.4.32.0/19
IP: 109.72.96.0/20
IP: 185.64.0.0/22
IP: 185.179.92.0/22
IP: 185.215.88.0/22
IP: 213.133.0.0/19
IP: 213.196.64.0/19
IP: 2a03:7a0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:a5:4d:ca:4b:42:36:9e:45:4d:a5:7f:64:b5:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:49:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9bbc4239c9cb981f19a495e633d3bec889fcbe89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:13:c6:17:25:60:3e:b9:f5:b5:89:cd:fa:7b:
ed:2c:4c:8d:c8:02:ce:a7:88:a8:27:4c:4e:6e:4d:
70:44:81:36:45:64:be:42:72:fe:4c:8a:82:1b:85:
23:79:9a:51:f1:c3:52:e0:eb:66:73:f3:b6:2d:44:
58:83:f0:06:05:5c:87:8c:8f:99:85:6e:7b:c2:84:
f7:db:f7:e5:e8:33:40:a2:ef:36:3f:4b:2d:18:52:
cf:e8:17:c2:7e:68:e0:d7:b9:ca:f3:97:cc:f5:22:
c6:2d:60:ec:ca:3e:60:6f:fc:4f:46:55:5a:38:f1:
7e:0d:14:91:70:52:54:ff:ed:fb:76:98:e9:7c:83:
d9:1c:82:75:cb:c6:d9:0c:b9:ae:14:96:d9:67:af:
5c:2f:f1:b5:cf:f6:9f:8a:19:a2:7d:77:df:73:fa:
5a:df:20:3f:66:10:bb:77:68:75:65:1e:74:0f:95:
35:a3:c4:d8:c6:91:52:c9:0a:df:25:7a:6b:16:35:
8a:4e:89:24:1a:ec:c2:bd:6d:8f:3e:f5:82:1b:ac:
9d:70:46:65:c1:ba:10:a9:d2:f4:60:6e:fd:c2:c4:
de:02:03:3a:59:5d:c0:05:37:72:59:9b:9a:9c:91:
2f:21:8c:51:cf:7c:aa:80:5f:15:84:2d:20:87:36:
d9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:BC:42:39:C9:CB:98:1F:19:A4:95:E6:33:D3:BE:C8:89:FC:BE:89
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.4.32.0/19
109.72.96.0/20
185.64.0.0/22
185.179.92.0/22
185.215.88.0/22
213.133.0.0/19
213.196.64.0/19
IPv6:
2a03:7a0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43940
201777
Signature Algorithm: sha256WithRSAEncryption
2b:7b:5d:42:d9:6f:c9:b2:bb:96:28:87:99:be:50:47:19:92:
0f:0d:43:56:94:e3:45:88:b0:32:ba:62:e5:73:20:22:5a:d8:
61:d5:10:af:80:9f:a9:26:7d:bc:3d:bc:df:46:fb:43:34:55:
6c:31:25:b0:6d:61:59:df:fe:17:10:78:ce:85:97:44:22:c4:
cc:c6:2b:7c:2c:ce:44:66:5a:c9:37:4a:61:8b:a4:57:38:6b:
66:4c:d7:7a:0b:24:69:f2:c4:46:b5:d4:16:68:a8:fa:5b:6d:
c3:81:b7:2f:cb:da:8b:e0:36:f9:d5:1b:b6:7e:a9:f8:72:0b:
a3:9d:55:97:9e:f0:17:ba:6c:bd:09:d0:41:59:eb:fc:22:aa:
5f:38:1c:12:ec:18:17:6d:73:ea:91:b3:1e:5f:2d:63:4b:1c:
05:f2:91:c8:b7:4a:9e:07:bf:f8:84:0c:73:6e:83:35:2a:d1:
db:d4:3d:19:10:99:80:6b:e3:88:b0:84:79:04:71:43:63:16:
1e:d6:88:ad:2e:31:2b:90:86:dc:7c:84:85:af:8a:9c:5a:75:
10:59:07:09:60:ad:c7:f2:eb:70:0b:0b:ae:1a:95:94:40:10:
b3:24:c4:41:e1:31:fd:0c:15:87:91:9d:c7:ec:75:cc:fe:d4:
2c:55:bf:93
-----BEGIN CERTIFICATE-----
MIIFzDCCBLSgAwIBAgISAZQma6VNyktCNp5FTaV/ZLUQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDk0OTM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YmJjNDIzOWM5Y2I5ODFmMTlhNDk1ZTYzM2QzYmVjODg5ZmNiZTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhPGFyVgPrn1tYnN+nvtLEyNyALO
p4ioJ0xObk1wRIE2RWS+QnL+TIqCG4UjeZpR8cNS4Otmc/O2LURYg/AGBVyHjI+Z
hW57woT32/fl6DNAou82P0stGFLP6BfCfmjg17nK85fM9SLGLWDsyj5gb/xPRlVa
OPF+DRSRcFJU/+37dpjpfIPZHIJ1y8bZDLmuFJbZZ69cL/G1z/afihmifXffc/pa
3yA/ZhC7d2h1ZR50D5U1o8TYxpFSyQrfJXprFjWKTokkGuzCvW2PPvWCG6ydcEZl
wboQqdL0YG79wsTeAgM6WV3ABTdyWZuanJEvIYxRz3yqgF8VhC0ghzbZOQIDAQAB
o4IC2DCCAtQwHQYDVR0OBBYEFJu8QjnJy5gfGaSV5jPTvsiJ/L6JMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNiL2M4NGE0
ZC05ZTU3LTQ3NTYtYmRiYi0wMWFhMDU2YjFmNmYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2IvYzg0YTRk
LTllNTctNDc1Ni1iZGJiLTAxYWEwNTZiMWY2Zi8xL203eENPY25MbUI4WnBKWG1N
OU8teUluOHZvay5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFIGCCsGAQUF
BwEHAQH/BEMwQTAwBAIAATAqAwQFPgQgAwQEbUhgAwQCuUAAAwQCubNcAwQCuddY
AwQF1YUAAwQF1cRAMA0EAgACMAcDBQMqAwegMB8GCCsGAQUFBwEIAQH/BBAwDqAM
MAoCAwCrpAIDAxQxMA0GCSqGSIb3DQEBCwUAA4IBAQAre11C2W/JsruWKIeZvlBH
GZIPDUNWlONFiLAyumLlcyAiWthh1RCvgJ+pJn28PbzfRvtDNFVsMSWwbWFZ3/4X
EHjOhZdEIsTMxit8LM5EZlrJN0phi6RXOGtmTNd6CyRp8sRGtdQWaKj6W23Dgbcv
y9qL4Db51Ru2fqn4cgujnVWXnvAXumy9CdBBWev8IqpfOBwS7BgXbXPqkbMeXy1j
SxwF8pHIt0qeB7/4hAxzboM1KtHb1D0ZEJmAa+OIsIR5BHFDYxYe1oitLjErkIbc
fISFr4qcWnUQWQcJYK3H8utwCwuuGpWUQBCzJMRB4TH9DBWHkZ3H7HXM/tQsVb+T
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:19:55 2025 by rpki-client