Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7FOM3K-fkkZJfceuRYRTef5qcXQ.cer
File: 7FOM3K-fkkZJfceuRYRTef5qcXQ.cer (raw, json)
Hash identifier: 7ZDg3Jby8PfNRwJ350Ho1OhjMKs18+wfjU4ov0tnNDY=
Subject key identifier: EC:53:8C:DC:AF:9F:92:46:49:7D:C7:AE:45:84:53:79:FE:6A:71:74
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FC337E310E466C6D297564A38D536B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:49:01 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 92.118.16.0/22
IP: 2a09:a340::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:33:7e:31:0e:46:6c:6d:29:75:64:a3:8d:53:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec538cdcaf9f9246497dc7ae45845379fe6a7174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:47:a6:5e:be:62:d1:8e:1d:e8:b3:94:1b:5f:
0f:66:b1:11:e7:62:f2:9b:ca:81:36:30:dc:dc:b2:
37:c5:d5:79:6e:96:09:d6:a7:90:88:49:ca:d9:c8:
7d:60:88:fc:54:84:4e:e3:a1:c9:b3:af:d5:1c:ac:
88:98:98:e3:e3:76:11:23:cd:2f:08:a6:91:0f:e0:
93:ea:c4:b7:a4:e8:a8:b2:e0:95:f6:69:1d:29:db:
ca:d1:c5:1d:a7:a8:8c:5b:e9:1c:37:42:e6:19:2f:
8e:b6:81:38:7d:2f:64:41:75:7c:44:e2:c7:6a:49:
7c:d2:c2:a7:31:27:c5:96:73:29:ef:36:e9:eb:81:
50:8a:75:8d:4c:bb:1e:ed:0f:ad:09:ca:36:5f:d1:
53:45:61:65:ee:13:38:6f:99:38:5d:cc:c2:ac:21:
7e:93:43:2d:9a:91:6b:1a:5e:9d:3d:21:cf:16:21:
59:ae:a2:c2:41:8f:37:74:5c:e1:ee:b7:8c:63:0a:
84:9b:96:a1:bb:ef:61:f2:6c:43:6e:51:c0:8e:c5:
14:e5:15:7e:b7:10:9d:8b:dd:4f:ba:4c:4d:f9:c8:
43:6e:da:70:8e:8a:1c:51:01:2b:d5:6f:71:68:15:
5c:57:8d:91:72:07:93:8d:66:c5:5e:ae:32:c8:90:
8e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:53:8C:DC:AF:9F:92:46:49:7D:C7:AE:45:84:53:79:FE:6A:71:74
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/7d64f8-dde2-4a7f-951a-c06c62af9da5/1/7FOM3K-fkkZJfceuRYRTef5qcXQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.16.0/22
IPv6:
2a09:a340::/29
Signature Algorithm: sha256WithRSAEncryption
37:31:2f:41:96:c2:f1:6a:89:68:4e:47:3f:2b:98:40:12:e8:
1b:7c:eb:41:fc:d8:0c:12:e2:51:0a:8e:1e:41:8b:49:9e:bc:
8d:35:7b:9e:5e:41:b4:38:dd:c6:6d:9f:86:9a:98:86:0e:75:
ec:37:65:7c:4c:6e:b8:9b:22:40:18:20:b6:f3:8f:cd:aa:c7:
aa:cb:dc:6f:8e:98:07:84:b8:fc:03:6d:86:c0:04:4f:e3:e3:
93:15:cd:c4:6f:19:4c:00:7d:0b:f8:cf:e8:5c:49:22:a8:c9:
6f:b4:35:9b:10:9b:20:d5:ff:ec:32:a9:8e:01:17:e7:3a:ec:
76:6b:c4:f5:60:53:56:0b:79:25:4c:0d:6f:a7:ed:7e:44:e7:
db:28:46:c8:58:6d:da:9c:c5:49:b4:af:0c:60:82:9e:55:55:
e0:7b:7a:e9:09:f0:39:c7:bd:36:33:16:a2:1d:9d:15:80:b9:
68:69:08:f5:48:e5:6c:cb:d7:c2:8c:9a:85:fd:67:97:50:59:
90:ac:99:85:a0:12:2d:6b:0c:e7:0e:58:17:11:0d:ea:68:9f:
6a:fc:0f:7b:47:e3:58:55:5f:37:33:b3:02:91:72:a5:55:98:
3a:27:84:1d:4a:7c:ee:f8:49:0d:da:ac:51:fb:78:83:02:54:
45:98:fd:6a
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZQi/DN+MQ5GbG0pdWSjjVNrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTc0OTAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYzUzOGNkY2FmOWY5MjQ2NDk3ZGM3YWU0NTg0NTM3OWZlNmE3MTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkemXr5i0Y4d6LOUG18PZrER52Ly
m8qBNjDc3LI3xdV5bpYJ1qeQiEnK2ch9YIj8VIRO46HJs6/VHKyImJjj43YRI80v
CKaRD+CT6sS3pOiosuCV9mkdKdvK0cUdp6iMW+kcN0LmGS+OtoE4fS9kQXV8ROLH
akl80sKnMSfFlnMp7zbp64FQinWNTLse7Q+tCco2X9FTRWFl7hM4b5k4XczCrCF+
k0MtmpFrGl6dPSHPFiFZrqLCQY83dFzh7reMYwqEm5ahu+9h8mxDblHAjsUU5RV+
txCdi91PukxN+chDbtpwjoocUQEr1W9xaBVcV42RcgeTjWbFXq4yyJCOswIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFOxTjNyvn5JGSX3HrkWEU3n+anF0MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzhlLzdkNjRm
OC1kZGUyLTRhN2YtOTUxYS1jMDZjNjJhZjlkYTUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOGUvN2Q2NGY4
LWRkZTItNGE3Zi05NTFhLWMwNmM2MmFmOWRhNS8xLzdGT00zSy1ma2taSmZjZXVS
WVJUZWY1cWNYUS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCXHYQMA0EAgACMAcDBQMqCaNAMA0GCSqGSIb3
DQEBCwUAA4IBAQA3MS9BlsLxaoloTkc/K5hAEugbfOtB/NgMEuJRCo4eQYtJnryN
NXueXkG0ON3GbZ+GmpiGDnXsN2V8TG64myJAGCC284/Nqseqy9xvjpgHhLj8A22G
wARP4+OTFc3EbxlMAH0L+M/oXEkiqMlvtDWbEJsg1f/sMqmOARfnOux2a8T1YFNW
C3klTA1vp+1+ROfbKEbIWG3anMVJtK8MYIKeVVXge3rpCfA5x702MxaiHZ0VgLlo
aQj1SOVsy9fCjJqF/WeXUFmQrJmFoBItawznDlgXEQ3qaJ9q/A97R+NYVV83M7MC
kXKlVZg6J4QdSnzu+EkN2qxR+3iDAlRFmP1q
-----END CERTIFICATE-----
Generated at Sun Apr 6 16:02:16 2025 by rpki-client