Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6Md5F2XIhNCFX-0_-MPycJmpoBo.cer
File: 6Md5F2XIhNCFX-0_-MPycJmpoBo.cer (raw, json)
Hash identifier: vGabtOMyrFbEOUb35H4QdsHVKgnjNkAlmwRNoVMrfE0=
Subject key identifier: E8:C7:79:17:65:C8:84:D0:85:5F:ED:3F:F8:C3:F2:70:99:A9:A0:1A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194206853F5981E22E11407D2E1F80220C1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/12/4bdfcb-4385-47cc-b081-95b1d71bcc89/1/6Md5F2XIhNCFX-0_-MPycJmpoBo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/12/4bdfcb-4385-47cc-b081-95b1d71bcc89/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:48:15 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.1.154.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:53:f5:98:1e:22:e1:14:07:d2:e1:f8:02:20:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8c7791765c884d0855fed3ff8c3f27099a9a01a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1a:b5:48:0b:df:eb:9d:9f:fa:80:1f:98:a5:
b7:c5:83:38:58:db:f3:3c:4a:c3:bd:be:ee:4f:be:
79:80:6a:3c:38:92:06:c7:c5:98:17:c1:34:39:13:
f2:14:c2:6a:4b:f1:f5:d5:05:a5:da:4b:8b:0b:07:
a9:b9:d4:43:50:da:22:9a:0e:8d:0c:19:13:10:12:
9d:1b:6c:27:8f:c1:a1:6b:9e:fa:f8:5a:bd:8b:0d:
74:66:fd:63:bd:bc:f1:33:d4:be:1f:ec:cb:b4:ed:
f0:ca:52:97:0d:e2:9e:0f:ff:14:ff:9c:ab:4d:74:
d4:e8:4d:f3:a4:e0:7d:f2:67:a7:f4:dc:33:a6:86:
1e:e6:e8:ff:29:44:40:2a:ee:c5:fe:eb:66:8d:81:
ea:6f:5f:af:bf:8f:30:f8:ee:72:e4:57:27:77:a2:
1b:74:56:6c:19:ce:cb:5f:c1:81:17:fe:ed:26:90:
f3:d1:91:d4:cc:58:5c:3a:f7:c5:7e:6b:f0:03:ab:
fb:e0:3a:d9:46:48:2b:12:4c:d1:bb:a9:29:14:9e:
11:87:8d:cf:64:e8:44:3a:ca:ad:2c:6a:12:de:2a:
00:65:e5:05:ad:9a:1d:c8:7b:ef:86:2d:1b:a7:eb:
64:b3:98:46:d9:28:f2:b4:51:7d:07:9a:a1:6a:92:
c0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C7:79:17:65:C8:84:D0:85:5F:ED:3F:F8:C3:F2:70:99:A9:A0:1A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4bdfcb-4385-47cc-b081-95b1d71bcc89/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4bdfcb-4385-47cc-b081-95b1d71bcc89/1/6Md5F2XIhNCFX-0_-MPycJmpoBo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.1.154.0/24
Signature Algorithm: sha256WithRSAEncryption
15:6e:7e:95:a2:c6:29:a2:f1:5f:dc:e6:38:4f:f8:0b:7d:01:
6a:65:82:b9:98:9e:b5:eb:66:09:b7:d3:c5:96:0e:3f:22:2d:
d2:cd:37:7e:33:63:ef:be:30:d2:d7:97:c9:8a:2c:4d:80:be:
7f:2c:35:2e:15:f0:f2:fd:a9:69:14:ef:b3:61:e7:97:fd:ff:
e5:69:19:19:3e:7c:6c:6f:d5:78:77:f5:e1:17:61:67:c2:34:
a3:8c:31:f1:2d:fa:c9:71:57:92:77:6a:c6:0f:52:f2:8c:90:
fb:b8:c3:36:4f:12:ab:50:49:6f:8f:fa:9a:34:65:aa:46:4b:
b6:0d:e4:3a:a1:05:3d:d5:e1:5d:50:c6:11:0a:1b:10:57:2d:
9b:1a:43:79:cc:08:32:57:82:6e:0c:13:85:2c:f9:c7:a3:c2:
13:96:1e:4d:25:9b:86:88:af:f6:d5:aa:23:23:48:89:32:15:
52:30:f0:0a:a9:e7:3d:a1:28:7c:57:da:d0:a2:46:2a:c6:1a:
ef:ff:eb:9e:bb:f4:af:ac:93:86:d0:3a:12:cc:f7:d0:bf:07:
d5:b9:f2:b4:97:2e:b4:a9:19:5b:66:64:c0:f2:50:57:20:6b:
59:15:51:2a:a7:23:93:cb:a4:b2:c2:ae:38:fa:ca:82:a5:14:
7d:9d:91:f0
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQgaFP1mB4i4RQH0uH4AiDBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDU0ODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOGM3NzkxNzY1Yzg4NGQwODU1ZmVkM2ZmOGMzZjI3MDk5YTlhMDFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBq1SAvf652f+oAfmKW3xYM4WNvz
PErDvb7uT755gGo8OJIGx8WYF8E0ORPyFMJqS/H11QWl2kuLCwepudRDUNoimg6N
DBkTEBKdG2wnj8Gha576+Fq9iw10Zv1jvbzxM9S+H+zLtO3wylKXDeKeD/8U/5yr
TXTU6E3zpOB98men9NwzpoYe5uj/KURAKu7F/utmjYHqb1+vv48w+O5y5Fcnd6Ib
dFZsGc7LX8GBF/7tJpDz0ZHUzFhcOvfFfmvwA6v74DrZRkgrEkzRu6kpFJ4Rh43P
ZOhEOsqtLGoS3ioAZeUFrZodyHvvhi0bp+tks5hG2SjytFF9B5qhapLASwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFOjHeRdlyITQhV/tP/jD8nCZqaAaMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzEyLzRiZGZj
Yi00Mzg1LTQ3Y2MtYjA4MS05NWIxZDcxYmNjODkvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTIvNGJkZmNi
LTQzODUtNDdjYy1iMDgxLTk1YjFkNzFiY2M4OS8xLzZNZDVGMlhJaE5DRlgtMF8t
TVB5Y0ptcG9Cby5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAwgGaMA0GCSqGSIb3DQEBCwUAA4IBAQAVbn6V
osYpovFf3OY4T/gLfQFqZYK5mJ6162YJt9PFlg4/Ii3SzTd+M2PvvjDS15fJiixN
gL5/LDUuFfDy/alpFO+zYeeX/f/laRkZPnxsb9V4d/XhF2FnwjSjjDHxLfrJcVeS
d2rGD1LyjJD7uMM2TxKrUElvj/qaNGWqRku2DeQ6oQU91eFdUMYRChsQVy2bGkN5
zAgyV4JuDBOFLPnHo8ITlh5NJZuGiK/21aojI0iJMhVSMPAKqec9oSh8V9rQokYq
xhrv/+ueu/SvrJOG0DoSzPfQvwfVufK0ly60qRlbZmTA8lBXIGtZFVEqpyOTy6Sy
wq44+sqCpRR9nZHw
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:44 2025 by rpki-client on console.sobornost.net