Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
File: vx1f6v05F0clv-S--RvSfHsvb5E.cer (raw, json)
Hash identifier: fxntH9Wmys46uF04hhD8NdznzFetMMZEoCGyCLuywbc=
Subject key identifier: BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA24C5827CF05C2D8FD90A5FC234D7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:47:54 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.31.6.0/24
IP: 193.31.15.0/24
IP: 193.31.60.0/24
IP: 193.31.62.0/24
IP: 2a0f:96c0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:24:c5:82:7c:f0:5c:2d:8f:d9:0a:5f:c2:34:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:da:9e:b6:88:89:25:03:6f:44:35:af:db:4e:
ee:5d:06:48:c0:2c:2e:5d:f1:5c:f5:0f:a6:b8:1b:
8f:95:ce:49:fb:e1:25:3c:02:5f:95:fd:0d:ab:5f:
6d:b3:8f:e6:3c:86:ab:6d:8d:dd:5b:04:fa:f2:fe:
d2:b0:0b:70:ee:46:28:4a:68:db:09:a1:ee:e0:6e:
0f:62:4f:db:00:02:b8:a1:df:2e:c4:52:d6:98:73:
34:c9:e4:29:43:c3:f4:8f:bf:e8:63:15:8e:2e:df:
a1:c1:86:2e:92:21:87:5f:cf:1e:79:2d:46:67:3e:
63:4c:ca:9d:68:b6:3c:c4:77:33:de:27:e0:05:a6:
18:11:5d:39:a6:f8:14:50:b2:32:55:73:3e:c1:b6:
75:ef:e8:d4:5f:29:d2:12:85:25:b0:07:c9:42:3d:
18:3b:16:1b:58:c6:9e:3c:ee:79:2d:e3:20:99:93:
8e:90:9e:02:4e:f5:56:ff:67:62:2d:5e:04:2b:5d:
49:e4:81:58:21:26:b8:e7:15:0b:55:5c:c8:4a:70:
32:3c:06:d8:f0:7f:5a:ad:d3:a7:e7:6f:30:c0:bd:
2d:62:72:6f:12:7b:7b:a9:17:b4:84:45:42:de:5c:
6f:17:72:bf:bb:96:54:b4:4a:0a:68:97:62:d4:10:
e3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.31.6.0/24
193.31.15.0/24
193.31.60.0/24
193.31.62.0/24
IPv6:
2a0f:96c0::/29
Signature Algorithm: sha256WithRSAEncryption
94:48:c1:82:14:ab:d7:68:f0:02:e7:7b:5e:cd:14:e7:b7:6a:
ce:c4:51:24:4e:73:7f:4d:e0:f1:73:44:5f:d0:62:16:d3:f8:
5e:02:1b:51:17:e4:71:bd:2b:8e:93:e5:57:86:e4:bd:a9:c6:
2b:4c:8d:10:37:bf:0e:e7:b1:21:f6:d2:4c:8d:b2:df:9d:80:
8b:e6:ab:53:c0:2f:e0:66:e7:b8:15:60:f5:7d:fd:42:c2:26:
a3:34:ab:6d:1e:0e:fa:5b:c1:98:ad:43:98:a3:e4:5c:ac:a5:
97:b5:99:83:0d:1e:41:1e:99:84:80:ae:e4:d5:a3:ba:87:e4:
d7:47:b9:d3:a9:21:18:ca:09:22:f1:a1:f8:39:39:9f:73:f0:
b9:b9:c1:dd:92:8f:78:61:04:0b:dd:0b:77:b5:a1:12:21:ec:
63:35:05:85:df:fa:97:b2:b2:86:c6:a8:db:e1:0c:c9:95:06:
6a:1e:44:83:fa:ae:6e:d7:57:ee:f7:f8:15:fa:78:33:bd:21:
b4:30:3c:cf:de:22:02:2b:63:00:3f:04:02:e6:85:3c:5c:27:
a9:6c:4f:f0:95:4c:a4:be:65:08:27:5b:a7:20:ad:5f:b1:5a:
9f:1c:ea:7b:ff:37:96:a1:af:8a:10:50:91:ae:5b:4b:7a:36:
10:32:50:5a
-----BEGIN CERTIFICATE-----
MIIFmTCCBIGgAwIBAgISAZQf+iTFgnzwXC2P2QpfwjTXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDM0NzU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZjFkNWZlYWZkMzkxNzQ3MjViZmU0YmVmOTFiZDI3YzdiMmY2ZjkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtqetoiJJQNvRDWv207uXQZIwCwu
XfFc9Q+muBuPlc5J++ElPAJflf0Nq19ts4/mPIarbY3dWwT68v7SsAtw7kYoSmjb
CaHu4G4PYk/bAAK4od8uxFLWmHM0yeQpQ8P0j7/oYxWOLt+hwYYukiGHX88eeS1G
Zz5jTMqdaLY8xHcz3ifgBaYYEV05pvgUULIyVXM+wbZ17+jUXynSEoUlsAfJQj0Y
OxYbWMaePO55LeMgmZOOkJ4CTvVW/2diLV4EK11J5IFYISa45xULVVzISnAyPAbY
8H9ardOn528wwL0tYnJvEnt7qRe0hEVC3lxvF3K/u5ZUtEoKaJdi1BDj6wIDAQAB
o4ICpTCCAqEwHQYDVR0OBBYEFL8dX+r9ORdHJb/kvvkb0nx7L2+RMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2IzLzYwNjVk
Mi0xMDNlLTRhYjctYmZiMy0xYThjODQyYWZlMmEvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjMvNjA2NWQy
LTEwM2UtNGFiNy1iZmIzLTFhOGM4NDJhZmUyYS8xL3Z4MWY2djA1RjBjbHYtUy0t
UnZTZkhzdmI1RS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEAGCCsGAQUF
BwEHAQH/BDEwLzAeBAIAATAYAwQAwR8GAwQAwR8PAwQAwR88AwQAwR8+MA0EAgAC
MAcDBQMqD5bAMA0GCSqGSIb3DQEBCwUAA4IBAQCUSMGCFKvXaPAC53tezRTnt2rO
xFEkTnN/TeDxc0Rf0GIW0/heAhtRF+RxvSuOk+VXhuS9qcYrTI0QN78O57Eh9tJM
jbLfnYCL5qtTwC/gZue4FWD1ff1CwiajNKttHg76W8GYrUOYo+RcrKWXtZmDDR5B
HpmEgK7k1aO6h+TXR7nTqSEYygki8aH4OTmfc/C5ucHdko94YQQL3Qt3taESIexj
NQWF3/qXsrKGxqjb4QzJlQZqHkSD+q5u11fu9/gV+ngzvSG0MDzP3iICK2MAPwQC
5oU8XCepbE/wlUykvmUIJ1unIK1fsVqfHOp7/zeWoa+KEFCRrltLejYQMlBa
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:22:42 2025 by rpki-client