Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6rBmxuGACj9b0uQG6aYg0qD29lM.cer
File: 6rBmxuGACj9b0uQG6aYg0qD29lM.cer (raw, json)
Hash identifier: oMXvwVdFZlWf6IxUeLnSuOfHu/4xeU4H0PhzuoaKyXQ=
Subject key identifier: EA:B0:66:C6:E1:80:0A:3F:5B:D2:E4:06:E9:A6:20:D2:A0:F6:F6:53
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FC6B8768E7882C81EE457555A73260
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/6rBmxuGACj9b0uQG6aYg0qD29lM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:48:07 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 147.86.0.0/16
IP: 192.152.98.0/24
IP: 193.8.136.0/23
IP: 193.73.125.0/24
IP: 193.135.240.0/21
IP: 193.222.241.0 -- 193.222.250.255
IP: 2a0b:1200::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:6b:87:68:e7:88:2c:81:ee:45:75:55:a7:32:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eab066c6e1800a3f5bd2e406e9a620d2a0f6f653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d2:47:f5:46:b0:86:98:db:c3:fb:78:f1:a3:
94:62:50:28:22:4a:06:41:37:86:99:ac:43:1a:c3:
f1:cf:42:5e:35:4f:ae:5d:8c:48:33:46:29:cb:12:
ec:7c:c8:78:a7:ac:26:14:a0:66:97:69:dc:0b:ca:
53:55:fe:e3:2f:1b:7e:a5:7f:1f:33:b8:0a:0f:bc:
3a:33:6a:c6:a8:2c:98:ae:a3:f4:dd:3d:b1:f4:de:
f1:d6:16:1d:aa:0e:73:03:4d:65:22:9d:75:78:26:
9d:5d:a4:dc:56:4c:c8:e2:3c:c3:f4:f3:ee:3d:5b:
52:d5:24:12:d3:0a:c1:2f:49:18:7f:6b:8f:5e:61:
a8:35:a6:7b:ba:a9:f1:46:97:0d:f5:9d:dd:46:a0:
f6:2e:dd:f5:d1:35:51:21:51:b3:36:f4:50:e3:a0:
ad:1f:d2:41:c2:fa:dc:84:9e:67:1e:66:4b:b1:42:
d2:79:4e:0b:a0:71:4d:9a:77:65:24:90:8a:d5:ca:
f7:0c:bf:48:9a:eb:f6:0d:8d:46:95:14:cb:f5:f0:
86:f2:3c:b7:a0:e2:3a:79:66:9f:87:21:2f:b0:7c:
e3:cc:5f:11:3e:50:ef:a5:ab:a2:99:a7:de:c2:95:
02:aa:1c:19:8f:d6:ff:2a:b3:b7:63:8f:1a:9c:e5:
c7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:B0:66:C6:E1:80:0A:3F:5B:D2:E4:06:E9:A6:20:D2:A0:F6:F6:53
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/91d629-7d1f-45bd-a1e1-931cf798e412/1/6rBmxuGACj9b0uQG6aYg0qD29lM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.86.0.0/16
192.152.98.0/24
193.8.136.0/23
193.73.125.0/24
193.135.240.0/21
193.222.241.0-193.222.250.255
IPv6:
2a0b:1200::/29
Signature Algorithm: sha256WithRSAEncryption
3a:7f:d2:da:aa:28:9c:17:d7:2b:93:ad:cf:8d:9b:21:34:66:
b9:53:a5:f2:84:3f:f7:07:b3:22:0f:ab:73:43:9b:08:77:4d:
bc:35:9b:0f:24:4e:a4:40:4e:af:68:10:7b:2f:20:28:47:68:
b2:03:0b:8d:cd:3f:66:15:0a:1f:26:9a:a6:77:3b:2f:6d:e3:
67:f7:5f:a5:28:de:5b:89:07:2a:a1:a4:1a:8f:cc:e8:e1:6e:
4f:61:98:b6:da:74:a3:79:38:90:4c:c1:4c:5e:3e:ea:ed:28:
f5:ec:04:11:46:25:b5:e0:c8:51:f2:06:03:d1:a7:9a:ac:9d:
5a:8d:ab:2a:ea:0c:19:da:3d:95:de:f8:11:88:00:16:e8:2a:
c7:f8:e8:8f:eb:1d:ed:f3:bf:8a:3e:12:d2:41:95:01:9e:9d:
a7:a2:c4:c2:75:14:5e:fa:46:9a:c0:d1:a8:0a:41:01:4d:c4:
66:45:55:80:24:1b:75:2c:35:76:b9:16:2e:4f:0e:e3:9e:72:
8b:46:cc:a6:1d:91:95:56:d0:0a:a8:df:f5:37:8d:56:70:fa:
89:0e:ec:81:98:12:81:0b:c7:31:f5:54:c3:18:ec:e7:53:4b:
89:22:53:8a:fd:aa:e8:a8:b5:90:73:31:ca:19:8f:89:23:da:
63:77:de:be
-----BEGIN CERTIFICATE-----
MIIFrDCCBJSgAwIBAgISAZQl/GuHaOeILIHuRXVVpzJgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDc0ODA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYWIwNjZjNmUxODAwYTNmNWJkMmU0MDZlOWE2MjBkMmEwZjZmNjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNJH9Uawhpjbw/t48aOUYlAoIkoG
QTeGmaxDGsPxz0JeNU+uXYxIM0YpyxLsfMh4p6wmFKBml2ncC8pTVf7jLxt+pX8f
M7gKD7w6M2rGqCyYrqP03T2x9N7x1hYdqg5zA01lIp11eCadXaTcVkzI4jzD9PPu
PVtS1SQS0wrBL0kYf2uPXmGoNaZ7uqnxRpcN9Z3dRqD2Lt310TVRIVGzNvRQ46Ct
H9JBwvrchJ5nHmZLsULSeU4LoHFNmndlJJCK1cr3DL9Imuv2DY1GlRTL9fCG8jy3
oOI6eWafhyEvsHzjzF8RPlDvpauimafewpUCqhwZj9b/KrO3Y48anOXHFQIDAQAB
o4ICuDCCArQwHQYDVR0OBBYEFOqwZsbhgAo/W9LkBummINKg9vZTMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VmLzkxZDYy
OS03ZDFmLTQ1YmQtYTFlMS05MzFjZjc5OGU0MTIvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWYvOTFkNjI5
LTdkMWYtNDViZC1hMWUxLTkzMWNmNzk4ZTQxMi8xLzZyQm14dUdBQ2o5YjB1UUc2
YVlnMHFEMjlsTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFMGCCsGAQUF
BwEHAQH/BEQwQjAxBAIAATArAwMAk1YDBADAmGIDBAHBCIgDBADBSX0DBAPBh/Aw
DAMEAMHe8QMEAMHe+jANBAIAAjAHAwUDKgsSADANBgkqhkiG9w0BAQsFAAOCAQEA
On/S2qoonBfXK5Otz42bITRmuVOl8oQ/9wezIg+rc0ObCHdNvDWbDyROpEBOr2gQ
ey8gKEdosgMLjc0/ZhUKHyaapnc7L23jZ/dfpSjeW4kHKqGkGo/M6OFuT2GYttp0
o3k4kEzBTF4+6u0o9ewEEUYlteDIUfIGA9GnmqydWo2rKuoMGdo9ld74EYgAFugq
x/joj+sd7fO/ij4S0kGVAZ6dp6LEwnUUXvpGmsDRqApBAU3EZkVVgCQbdSw1drkW
Lk8O455yi0bMph2RlVbQCqjf9TeNVnD6iQ7sgZgSgQvHMfVUwxjs51NLiSJTiv2q
6Ki1kHMxyhmPiSPaY3fevg==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:48 2025 by rpki-client on console.sobornost.net