Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vh89wilTBsx9-HLO7M1olNDg6uY.cer
File: vh89wilTBsx9-HLO7M1olNDg6uY.cer (raw, json)
Hash identifier: vJ4V1yyi9RESt0gX1WfHMXZS4k3hL+7ZdSWRLetKWMo=
Subject key identifier: BE:1F:3D:C2:29:53:06:CC:7D:F8:72:CE:EC:CD:68:94:D0:E0:EA:E6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D6D98B2D0AB4FCAF7BBBFE20E6C669
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:47:50 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.130.200.0/22
IP: 2a0c:9000::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:d9:8b:2d:0a:b4:fc:af:7b:bb:fe:20:e6:c6:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be1f3dc2295306cc7df872ceeccd6894d0e0eae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cf:e3:f8:f1:75:df:a2:48:7a:3a:dd:19:f8:
cf:a6:ac:59:a3:4b:ce:45:49:36:e9:3e:8a:5c:5e:
22:cb:26:84:8b:73:db:f6:2a:38:32:08:01:8d:35:
cc:9d:dd:83:ab:e4:17:fe:72:99:5f:90:71:9b:c8:
1b:44:35:7e:39:69:e7:fb:56:b1:ac:bb:1c:8b:0d:
ac:18:b4:f0:68:10:3f:30:1b:ec:68:61:be:fc:aa:
74:e7:df:f3:85:d6:f0:cc:03:51:10:c8:b6:8b:87:
01:e7:be:30:72:ba:20:ac:4d:58:27:27:33:86:7a:
13:8e:52:84:fb:d4:2b:9f:70:6e:f7:82:16:1f:9d:
11:2e:ec:a1:f3:0a:41:b8:c2:0e:cb:aa:60:05:2c:
d4:17:5a:12:a4:cc:cb:b4:e0:37:be:67:0b:67:42:
e3:87:52:db:78:4d:dd:df:32:86:58:5d:68:d8:10:
f4:a6:19:7d:a3:8b:48:66:e5:b5:9c:59:71:19:07:
16:4f:05:4c:87:a9:5c:e2:dc:dd:54:d3:c6:32:a1:
00:27:6e:f7:aa:3f:e3:ba:cf:96:78:00:76:15:51:
64:e1:ae:08:48:93:1d:19:87:75:70:9f:05:cb:7d:
03:0f:df:8d:ec:9d:f6:4c:9f:4d:11:15:e2:8b:68:
fe:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:1F:3D:C2:29:53:06:CC:7D:F8:72:CE:EC:CD:68:94:D0:E0:EA:E6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.130.200.0/22
IPv6:
2a0c:9000::/29
Signature Algorithm: sha256WithRSAEncryption
80:53:84:e1:47:ec:90:f2:c8:c9:ae:7f:3e:27:ef:6d:1a:24:
4c:92:5b:f9:84:74:dc:2c:78:65:ed:20:66:e7:79:4a:83:ee:
67:c5:2d:5f:cf:bf:d3:ea:ef:e1:eb:8b:50:a8:fd:6d:0d:87:
43:ec:91:1f:81:c8:8e:28:1c:10:12:05:fa:47:2e:d0:c0:53:
ad:b2:e1:63:6c:2a:df:a0:f8:66:21:ec:e2:3f:ce:51:7d:73:
f7:51:b5:af:14:b6:68:bf:87:cf:c7:09:7c:2c:de:e3:c4:8c:
c6:35:2e:f2:a2:4c:4f:bf:2d:fd:bb:12:2f:85:a2:7b:fe:8f:
b0:71:c1:81:35:30:3f:d5:b5:83:00:be:fc:34:5a:83:d0:9d:
8b:0c:fa:21:f9:82:df:3f:fb:44:8f:e9:5c:7e:3d:f2:6d:b1:
ae:4f:e0:e6:90:94:6b:69:7d:ad:85:b7:f7:04:46:9b:01:fa:
a6:19:59:4a:17:e3:f2:56:03:16:2d:fd:cb:be:c2:01:64:90:
3e:27:82:9f:2e:4e:9c:e3:f3:40:03:79:7c:5e:ac:7f:fb:a0:
9c:c4:dc:d8:d7:af:b3:3c:65:75:22:2a:5a:ec:47:75:5c:a8:
e7:22:02:79:f2:62:6d:be:2f:e2:89:f5:4f:d3:2f:d9:8d:5b:
4b:e0:01:12
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZQj1tmLLQq0/K97u/4g5sZpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMjE0NzUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZTFmM2RjMjI5NTMwNmNjN2RmODcyY2VlY2NkNjg5NGQwZTBlYWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArM/j+PF136JIejrdGfjPpqxZo0vO
RUk26T6KXF4iyyaEi3Pb9io4MggBjTXMnd2Dq+QX/nKZX5Bxm8gbRDV+OWnn+1ax
rLsciw2sGLTwaBA/MBvsaGG+/Kp059/zhdbwzANREMi2i4cB574wcrogrE1YJycz
hnoTjlKE+9Qrn3Bu94IWH50RLuyh8wpBuMIOy6pgBSzUF1oSpMzLtOA3vmcLZ0Lj
h1LbeE3d3zKGWF1o2BD0phl9o4tIZuW1nFlxGQcWTwVMh6lc4tzdVNPGMqEAJ273
qj/jus+WeAB2FVFk4a4ISJMdGYd1cJ8Fy30DD9+N7J32TJ9NERXii2j+WwIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFL4fPcIpUwbMffhyzuzNaJTQ4OrmMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzA4LzFiZGJm
OC0zOTVmLTRhODUtYTQ0YS1iNTFhZGZmYzZlZWMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDgvMWJkYmY4
LTM5NWYtNGE4NS1hNDRhLWI1MWFkZmZjNmVlYy8xL3ZoODl3aWxUQnN4OS1ITE83
TTFvbE5EZzZ1WS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuYLIMA0EAgACMAcDBQMqDJAAMA0GCSqGSIb3
DQEBCwUAA4IBAQCAU4ThR+yQ8sjJrn8+J+9tGiRMklv5hHTcLHhl7SBm53lKg+5n
xS1fz7/T6u/h64tQqP1tDYdD7JEfgciOKBwQEgX6Ry7QwFOtsuFjbCrfoPhmIezi
P85RfXP3UbWvFLZov4fPxwl8LN7jxIzGNS7yokxPvy39uxIvhaJ7/o+wccGBNTA/
1bWDAL78NFqD0J2LDPoh+YLfP/tEj+lcfj3ybbGuT+DmkJRraX2thbf3BEabAfqm
GVlKF+PyVgMWLf3LvsIBZJA+J4KfLk6c4/NAA3l8Xqx/+6CcxNzY16+zPGV1Iipa
7Ed1XKjnIgJ58mJtvi/iifVP0y/ZjVtL4AES
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:46:36 2025 by rpki-client