Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/m-Io1xO-xtTJq87C8Aoo6CH8J78.cer
File: m-Io1xO-xtTJq87C8Aoo6CH8J78.cer (raw, json)
Hash identifier: QeVYXnyNFDeBw8Ko8OaBE+TRI4qR3ONrgD2IW8XSyVM=
Subject key identifier: 9B:E2:28:D7:13:BE:C6:D4:C9:AB:CE:C2:F0:0A:28:E8:21:FC:27:BF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C8BC13E6F5F8505536B94262D67D4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:48:12 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.238.124.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:8b:c1:3e:6f:5f:85:05:53:6b:94:26:2d:67:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9be228d713bec6d4c9abcec2f00a28e821fc27bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0f:c7:26:19:bc:2a:11:03:08:10:0f:17:cf:
d8:6c:ae:fb:ab:65:a7:31:56:df:f5:8b:d5:28:5f:
4f:2a:54:18:3f:2a:60:6c:ab:70:47:d4:c8:43:11:
6e:49:8f:de:6b:de:93:c6:e3:f6:22:d0:e0:f4:d5:
0c:42:a4:dd:a6:e2:fd:21:cb:26:d9:d0:b4:24:1f:
7a:2f:ae:94:9c:9f:39:60:ab:62:54:e7:26:64:4c:
8f:c0:7a:c8:c4:de:4a:7c:47:2f:12:26:cf:07:a5:
59:f4:10:06:40:16:e4:20:22:c4:b0:94:fa:9a:48:
b5:87:ad:58:9f:7e:2e:02:9a:9d:72:ff:f4:d5:11:
0e:d2:12:20:34:9a:12:e5:c5:f5:05:2c:86:7a:dd:
a1:e2:68:93:10:bd:21:c1:8a:7b:f2:13:b5:7f:c7:
58:b2:d3:fc:18:1f:d8:ed:c6:ae:b2:19:59:f5:e5:
68:e0:19:74:e3:3f:8a:80:57:6c:b6:40:b0:dd:32:
50:9a:21:96:55:a3:82:c9:02:45:9d:ac:ed:39:1b:
78:05:d7:78:f7:c9:95:ff:4c:41:89:1d:16:7e:a3:
af:b8:fb:f9:0b:71:2b:ad:96:05:8e:21:af:af:4c:
85:62:04:4a:b7:51:f6:7b:bc:76:a9:a8:8b:d2:e1:
d7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E2:28:D7:13:BE:C6:D4:C9:AB:CE:C2:F0:0A:28:E8:21:FC:27:BF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/79f15a-5cba-4d40-b30b-e35a223b49c7/1/m-Io1xO-xtTJq87C8Aoo6CH8J78.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.238.124.0/22
Signature Algorithm: sha256WithRSAEncryption
71:c9:17:ea:85:6b:4a:60:8b:32:42:eb:f8:1c:ea:1f:cf:bb:
8b:8d:f1:12:15:e7:68:d8:8f:82:83:42:d4:ba:be:17:38:01:
1b:6f:04:bc:cf:c7:e6:f1:7f:74:47:fe:26:42:0f:8b:dd:5f:
48:6e:e7:0c:65:c0:48:fa:c6:2c:0c:2f:dd:e3:eb:40:fd:74:
45:b9:71:78:ba:42:53:b2:26:00:83:c6:b6:2d:ee:0a:f2:e8:
e2:c6:7b:d8:63:0b:b2:9a:04:f4:be:f4:09:59:14:e2:55:2a:
47:58:03:df:24:d8:41:44:93:34:df:76:88:df:3b:99:a7:d3:
9f:c5:f3:20:89:f7:1d:14:7a:c1:a0:c0:d9:c2:0f:25:d4:f2:
31:9a:b9:5b:a6:55:b2:63:d0:b2:8b:94:2f:04:90:e0:02:2d:
5c:0d:cd:61:1e:47:ad:36:dd:0b:2b:f5:ff:25:dc:88:01:ab:
30:ec:08:57:20:40:85:58:81:78:3b:94:a6:b5:be:aa:c9:1e:
ab:61:ea:01:9c:7a:13:93:ad:36:95:52:4f:50:53:21:c6:d3:
63:aa:55:7a:01:a5:b9:d3:57:eb:2e:10:b1:b4:5b:e9:3f:fb:
c4:3a:a2:7b:eb:b6:45:53:19:61:07:11:8f:df:f2:a1:4e:0c:
1a:3e:41:1c
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQfjIvBPm9fhQVTa5QmLWfUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDE0ODEyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YmUyMjhkNzEzYmVjNmQ0YzlhYmNlYzJmMDBhMjhlODIxZmMyN2JmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArA/HJhm8KhEDCBAPF8/YbK77q2Wn
MVbf9YvVKF9PKlQYPypgbKtwR9TIQxFuSY/ea96TxuP2ItDg9NUMQqTdpuL9Icsm
2dC0JB96L66UnJ85YKtiVOcmZEyPwHrIxN5KfEcvEibPB6VZ9BAGQBbkICLEsJT6
mki1h61Yn34uApqdcv/01REO0hIgNJoS5cX1BSyGet2h4miTEL0hwYp78hO1f8dY
stP8GB/Y7caushlZ9eVo4Bl04z+KgFdstkCw3TJQmiGWVaOCyQJFnaztORt4Bdd4
98mV/0xBiR0WfqOvuPv5C3ErrZYFjiGvr0yFYgRKt1H2e7x2qaiL0uHXDwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFJviKNcTvsbUyavOwvAKKOgh/Ce/MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzg5Lzc5ZjE1
YS01Y2JhLTRkNDAtYjMwYi1lMzVhMjIzYjQ5YzcvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODkvNzlmMTVh
LTVjYmEtNGQ0MC1iMzBiLWUzNWEyMjNiNDljNy8xL20tSW8xeE8teHRUSnE4N0M4
QW9vNkNIOEo3OC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCwe58MA0GCSqGSIb3DQEBCwUAA4IBAQBxyRfq
hWtKYIsyQuv4HOofz7uLjfESFedo2I+Cg0LUur4XOAEbbwS8z8fm8X90R/4mQg+L
3V9IbucMZcBI+sYsDC/d4+tA/XRFuXF4ukJTsiYAg8a2Le4K8ujixnvYYwuymgT0
vvQJWRTiVSpHWAPfJNhBRJM033aI3zuZp9OfxfMgifcdFHrBoMDZwg8l1PIxmrlb
plWyY9Cyi5QvBJDgAi1cDc1hHketNt0LK/X/JdyIAasw7AhXIECFWIF4O5Smtb6q
yR6rYeoBnHoTk602lVJPUFMhxtNjqlV6AaW501frLhCxtFvpP/vEOqJ767ZFUxlh
BxGP3/KhTgwaPkEc
-----END CERTIFICATE-----
Generated at Mon Apr 7 14:13:41 2025 by rpki-client