Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DL6R62OkTx6fGoPt0hih7HXCXpE.cer
File: DL6R62OkTx6fGoPt0hih7HXCXpE.cer (raw, json)
Hash identifier: 65ASnX1xZwjqiHKDKDKOJjNkrGhFB2RsOFiwDCF+LDM=
Subject key identifier: 0C:BE:91:EB:63:A4:4F:1E:9F:1A:83:ED:D2:18:A1:EC:75:C2:5E:91
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421443521D7F78CE5F9EBBD093E65B6D5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:25 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.235.199.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:35:21:d7:f7:8c:e5:f9:eb:bd:09:3e:65:b6:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0cbe91eb63a44f1e9f1a83edd218a1ec75c25e91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:06:e2:74:5c:27:03:df:62:ca:3b:b1:be:de:
47:4c:63:de:5f:bc:cc:14:98:69:76:43:26:d3:d4:
3f:95:8c:1b:6e:65:02:cf:e2:e4:f1:ab:45:c1:97:
52:69:8d:bc:b5:b1:a0:f4:79:df:c9:64:e0:81:fe:
ce:89:55:81:79:66:86:5a:66:96:01:5f:3a:43:33:
b1:50:32:bb:9b:60:14:49:c1:90:35:2c:ee:6f:db:
f8:da:cc:95:39:a5:15:8a:a1:68:fd:33:66:2f:59:
57:9e:9d:25:78:b4:70:26:60:1d:be:f2:39:bc:00:
21:90:95:f2:52:0f:ee:e9:e9:0d:b2:17:dc:5a:84:
5f:a3:f1:48:75:a4:92:28:77:36:e7:46:93:85:f7:
21:4e:b0:5b:d8:f5:20:9e:52:09:4b:4c:d7:54:aa:
b7:38:ee:d5:e7:be:99:81:44:4c:ca:11:c4:4a:e7:
7d:e7:fe:5a:75:a2:31:b5:0d:5a:f4:3a:0c:44:b1:
92:65:4b:89:57:04:51:e5:4d:37:53:3c:ce:25:be:
bb:1c:82:94:61:7b:d8:02:eb:6b:33:c8:79:f9:ad:
10:c9:28:e9:ec:b4:27:65:12:d4:2c:5c:22:ae:1c:
70:2c:b0:b8:e2:cd:dc:3e:06:c0:b0:45:55:2b:55:
d3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:BE:91:EB:63:A4:4F:1E:9F:1A:83:ED:D2:18:A1:EC:75:C2:5E:91
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7e51b4-0ab4-4719-b330-bdc5ae8abdb1/1/DL6R62OkTx6fGoPt0hih7HXCXpE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.199.0/24
Signature Algorithm: sha256WithRSAEncryption
35:20:fb:26:45:a3:b4:7f:21:07:b9:ee:54:c4:f2:bd:1a:49:
0c:1b:86:fc:c8:77:e5:f4:c1:99:0f:ac:f5:9c:cd:8a:cd:38:
55:0b:ab:c5:9b:0c:85:b3:24:f1:7c:b1:18:90:0b:e4:90:86:
c6:aa:cb:c3:7a:b1:68:c5:ba:87:21:8d:ae:68:2d:74:e6:0b:
0c:49:ed:21:e2:52:35:e3:ec:ab:c1:af:14:4d:52:ba:f5:43:
ec:df:89:c9:03:d0:68:82:89:eb:9d:dc:12:0f:4d:dd:3f:1f:
17:f1:b0:76:db:eb:03:d9:62:e9:b2:6f:82:eb:d1:52:9d:5d:
ad:47:b6:dc:cf:c7:44:ac:87:16:b0:7b:4c:58:80:14:6e:fb:
c8:79:dd:ba:8d:51:60:77:8e:89:d5:98:8b:2b:f3:8e:d7:37:
f8:5b:23:9d:7d:37:39:f0:97:d5:b3:11:38:a7:3d:56:64:79:
13:20:1c:96:7d:61:6c:f6:d3:05:08:47:18:dd:8e:a2:91:f5:
6f:39:f1:73:92:77:11:c7:e8:43:7b:79:5b:f1:32:57:7c:bf:
00:3b:53:f8:90:36:45:b8:66:64:bb:bc:82:08:2d:b4:1c:d4:
8c:fb:66:07:97:cd:91:24:9b:eb:d3:6e:56:18:06:6e:49:f8:
15:4f:99:1d
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQhRDUh1/eM5fnrvQk+ZbbVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDk0ODI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwY2JlOTFlYjYzYTQ0ZjFlOWYxYTgzZWRkMjE4YTFlYzc1YzI1ZTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogbidFwnA99iyjuxvt5HTGPeX7zM
FJhpdkMm09Q/lYwbbmUCz+Lk8atFwZdSaY28tbGg9HnfyWTggf7OiVWBeWaGWmaW
AV86QzOxUDK7m2AUScGQNSzub9v42syVOaUViqFo/TNmL1lXnp0leLRwJmAdvvI5
vAAhkJXyUg/u6ekNshfcWoRfo/FIdaSSKHc250aThfchTrBb2PUgnlIJS0zXVKq3
OO7V576ZgURMyhHESud95/5adaIxtQ1a9DoMRLGSZUuJVwRR5U03UzzOJb67HIKU
YXvYAutrM8h5+a0QySjp7LQnZRLULFwirhxwLLC44s3cPgbAsEVVK1XTqwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFAy+ketjpE8enxqD7dIYoex1wl6RMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzE2LzdlNTFi
NC0wYWI0LTQ3MTktYjMzMC1iZGM1YWU4YWJkYjEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTYvN2U1MWI0
LTBhYjQtNDcxOS1iMzMwLWJkYzVhZThhYmRiMS8xL0RMNlI2Mk9rVHg2ZkdvUHQw
aGloN0hYQ1hwRS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAuevHMA0GCSqGSIb3DQEBCwUAA4IBAQA1IPsm
RaO0fyEHue5UxPK9GkkMG4b8yHfl9MGZD6z1nM2KzThVC6vFmwyFsyTxfLEYkAvk
kIbGqsvDerFoxbqHIY2uaC105gsMSe0h4lI14+yrwa8UTVK69UPs34nJA9Bogonr
ndwSD03dPx8X8bB22+sD2WLpsm+C69FSnV2tR7bcz8dErIcWsHtMWIAUbvvIed26
jVFgd46J1ZiLK/OO1zf4WyOdfTc58JfVsxE4pz1WZHkTIByWfWFs9tMFCEcY3Y6i
kfVvOfFzkncRx+hDe3lb8TJXfL8AO1P4kDZFuGZku7yCCC20HNSM+2YHl82RJJvr
025WGAZuSfgVT5kd
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:21:24 2025 by rpki-client