Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vIPChDwWSbAFTJEST-4DEUCV4WM.cer
File: vIPChDwWSbAFTJEST-4DEUCV4WM.cer (raw, json)
Hash identifier: dHdxm1ClihTU+MPaUpVVlPkQHSWwFUmHx/Gz+llwX5o=
Subject key identifier: BC:83:C2:84:3C:16:49:B0:05:4C:91:12:4F:EE:03:11:40:95:E1:63
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C448A96A4E674FDB219FB089557D4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/vIPChDwWSbAFTJEST-4DEUCV4WM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:47:53 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.240.184.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:44:8a:96:a4:e6:74:fd:b2:19:fb:08:95:57:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bc83c2843c1649b0054c91124fee03114095e163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c4:c8:65:39:e2:91:90:b2:ae:36:c7:1f:13:
59:38:43:c3:7d:be:3f:b1:d3:ea:7c:71:06:06:3e:
7a:9e:5d:ac:5c:6c:8e:fd:cf:c4:b4:74:cc:e2:71:
1c:78:b2:09:0f:18:96:16:a5:7c:f5:20:40:c7:34:
52:a6:da:da:e6:2d:26:a6:13:7c:ac:48:c8:60:81:
9b:4b:83:23:ba:49:83:3f:d8:5f:f0:ae:9a:f1:de:
8e:5c:70:e0:13:93:b5:d2:34:ac:89:e5:25:c2:e4:
42:db:6f:a8:c9:9b:b2:5f:5a:45:27:64:19:c2:c9:
cd:fa:92:b2:89:d3:e6:28:7f:fb:97:2c:89:a8:75:
db:00:aa:52:c3:ae:95:b2:f0:86:2a:aa:ad:05:bf:
05:50:87:0a:45:4e:30:40:75:00:a6:7a:27:12:22:
b3:72:07:e1:8d:95:38:fc:9d:94:d1:51:12:82:d9:
b6:de:f1:18:1d:68:47:93:5d:a4:65:77:52:15:50:
9e:dd:cf:17:86:c7:80:d4:30:1a:ff:29:c5:25:95:
e9:19:30:e7:c7:13:c1:61:97:9f:27:bd:2d:69:15:
7a:96:1a:1c:35:48:ca:9c:89:f0:c8:23:92:ac:b1:
22:d2:9c:9a:79:cd:14:79:e9:3c:e1:61:ab:be:56:
03:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:83:C2:84:3C:16:49:B0:05:4C:91:12:4F:EE:03:11:40:95:E1:63
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a75946-57b4-41eb-b6b5-5295f5b3f19b/1/vIPChDwWSbAFTJEST-4DEUCV4WM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.184.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:de:92:03:75:3d:17:59:10:5f:60:4d:12:b6:ae:84:c3:f7:
1b:2f:13:72:64:19:d6:cc:da:fb:d5:46:6a:26:47:4b:91:78:
58:53:aa:f3:64:37:d2:fe:8c:8d:f1:b3:24:c6:03:00:78:c4:
17:c5:e7:77:47:0d:ad:7f:f4:bb:bc:af:f8:1f:4e:a0:63:1a:
3e:21:66:25:83:6b:c3:0f:5a:4b:1e:ff:0d:2a:53:b8:79:86:
a7:a6:8c:a9:7c:0a:7e:05:04:73:1b:c0:24:b9:3f:22:18:b9:
b8:f5:04:01:f5:43:48:19:00:34:42:96:39:f6:59:80:50:3f:
a7:37:56:33:24:34:c6:eb:c8:aa:be:8b:ae:bb:c6:04:96:bb:
44:a4:0b:bb:f4:12:37:55:7f:7a:64:c7:80:77:ef:9e:5f:74:
35:a7:a7:49:6a:43:be:47:98:0a:71:f2:58:19:71:47:66:8b:
ad:df:e5:eb:0a:a2:d8:f1:9e:89:7e:08:a2:25:6c:fe:33:d9:
8a:a6:68:e2:3a:08:a0:8d:81:69:fb:e2:bb:86:03:dc:6b:6c:
95:6c:9d:ce:01:65:c2:fd:7b:d5:57:88:cb:d2:2b:0c:ba:26:
37:9f:b5:56:f8:5d:0e:88:2a:24:ab:d1:6a:f4:8a:22:2f:04:
5e:c3:ae:f4
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQfjESKlqTmdP2yGfsIlVfUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDE0NzUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzgzYzI4NDNjMTY0OWIwMDU0YzkxMTI0ZmVlMDMxMTQwOTVlMTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMTIZTnikZCyrjbHHxNZOEPDfb4/
sdPqfHEGBj56nl2sXGyO/c/EtHTM4nEceLIJDxiWFqV89SBAxzRSptra5i0mphN8
rEjIYIGbS4MjukmDP9hf8K6a8d6OXHDgE5O10jSsieUlwuRC22+oyZuyX1pFJ2QZ
wsnN+pKyidPmKH/7lyyJqHXbAKpSw66VsvCGKqqtBb8FUIcKRU4wQHUApnonEiKz
cgfhjZU4/J2U0VESgtm23vEYHWhHk12kZXdSFVCe3c8XhseA1DAa/ynFJZXpGTDn
xxPBYZefJ70taRV6lhocNUjKnInwyCOSrLEi0pyaec0Ueek84WGrvlYDVwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFLyDwoQ8FkmwBUyREk/uAxFAleFjMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2JlL2E3NTk0
Ni01N2I0LTQxZWItYjZiNS01Mjk1ZjViM2YxOWIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmUvYTc1OTQ2
LTU3YjQtNDFlYi1iNmI1LTUyOTVmNWIzZjE5Yi8xL3ZJUENoRHdXU2JBRlRKRVNU
LTRERVVDVjRXTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCufC4MA0GCSqGSIb3DQEBCwUAA4IBAQCb3pID
dT0XWRBfYE0Stq6Ew/cbLxNyZBnWzNr71UZqJkdLkXhYU6rzZDfS/oyN8bMkxgMA
eMQXxed3Rw2tf/S7vK/4H06gYxo+IWYlg2vDD1pLHv8NKlO4eYanpoypfAp+BQRz
G8AkuT8iGLm49QQB9UNIGQA0QpY59lmAUD+nN1YzJDTG68iqvouuu8YElrtEpAu7
9BI3VX96ZMeAd++eX3Q1p6dJakO+R5gKcfJYGXFHZout3+XrCqLY8Z6JfgiiJWz+
M9mKpmjiOgigjYFp++K7hgPca2yVbJ3OAWXC/XvVV4jL0isMuiY3n7VW+F0OiCok
q9Fq9IoiLwRew670
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:08:36 2025 by rpki-client