Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04G3AXBRkLnOnRsYRTU4TnHKMWU.cer
File: 04G3AXBRkLnOnRsYRTU4TnHKMWU.cer (raw, json)
Hash identifier: dyYfO6wujhXewSJEaG/1CuaNz4CWh3Dt8c+56Ot8ohI=
Subject key identifier: D3:81:B7:01:70:51:90:B9:CE:9D:1B:18:45:35:38:4E:71:CA:31:65
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FC0A30ABF0379AF6671A2F3B6E777E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0a/603c58-1002-4069-8917-7054eb2c4c00/1/04G3AXBRkLnOnRsYRTU4TnHKMWU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0a/603c58-1002-4069-8917-7054eb2c4c00/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:48:50 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.23.8.0/21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:0a:30:ab:f0:37:9a:f6:67:1a:2f:3b:6e:77:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d381b701705190b9ce9d1b184535384e71ca3165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:28:f0:b2:c8:53:73:3a:16:61:4a:14:5d:5b:
46:46:f2:93:d6:1c:bc:82:a4:29:0e:86:15:95:91:
e7:e9:32:1f:7d:c9:9c:5e:28:92:e2:c8:60:be:7c:
b8:47:76:29:80:45:52:76:1d:9a:64:bf:e8:b1:bb:
de:8b:c3:ac:08:e3:b9:85:4c:b6:62:99:10:9a:4e:
53:db:bf:da:51:6b:db:7c:60:38:38:15:eb:48:1c:
4a:96:a3:87:cb:ed:ce:c7:d0:82:ab:76:b3:47:89:
14:eb:43:87:b0:b2:60:99:21:53:6b:5e:5c:82:c0:
94:46:a0:9a:77:da:d0:c9:1e:08:31:14:e9:6a:b5:
09:ab:88:ff:6d:eb:cc:38:c6:1b:67:44:42:97:f0:
e7:6d:ac:cc:d1:23:52:a3:64:f0:db:27:37:16:d7:
b3:c1:c4:b4:f0:e2:37:83:07:16:3b:0e:c7:b9:54:
d0:d5:10:58:e2:7c:3f:3f:f6:38:5b:a1:0e:9f:30:
a7:f0:b7:f7:9e:07:ce:b1:05:63:f8:04:37:f9:f3:
a7:39:1e:4c:d3:e5:b1:93:06:56:f0:11:88:95:af:
34:a7:9a:5e:9c:ba:9c:4d:a3:23:d8:ad:77:7a:c8:
dd:81:23:60:2d:b4:f7:79:1e:62:81:a9:da:c1:15:
06:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:81:B7:01:70:51:90:B9:CE:9D:1B:18:45:35:38:4E:71:CA:31:65
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/603c58-1002-4069-8917-7054eb2c4c00/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/603c58-1002-4069-8917-7054eb2c4c00/1/04G3AXBRkLnOnRsYRTU4TnHKMWU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.23.8.0/21
Signature Algorithm: sha256WithRSAEncryption
86:82:7d:c3:61:e4:e2:60:6a:9b:0f:ec:44:83:0a:0d:f1:23:
dc:b5:55:53:b6:fd:cd:3b:94:a3:c9:71:de:17:80:1a:e1:28:
cf:2d:42:f7:d4:57:c3:cf:9f:49:7e:3f:9d:29:fa:e9:a0:43:
12:c4:ab:ae:9b:58:ec:6a:c4:5b:19:2f:6e:2a:ad:d2:1e:5a:
31:bf:80:3e:91:01:15:25:f6:16:79:57:e5:13:69:83:c4:04:
b9:e2:56:5c:ac:c3:92:18:81:8a:7a:52:8e:2b:44:c8:ae:90:
71:8c:9c:e4:24:6a:4e:7d:56:1c:58:ef:60:10:29:9c:a3:f8:
fb:77:eb:6c:99:ef:99:04:7a:c2:0b:d4:34:1c:f6:da:74:6c:
e3:53:a7:42:1b:11:47:fe:89:5c:26:e4:d2:9e:5a:32:75:d9:
08:9f:d9:b2:ea:87:61:7d:d2:b5:4f:08:d1:7e:0d:a9:85:c1:
65:91:b3:86:62:59:89:b0:8e:43:f8:8d:ad:5e:22:81:e9:ce:
28:cf:a3:f3:cd:2c:f5:e5:14:47:08:c9:10:b6:b6:2b:13:8b:
ed:df:17:51:85:53:3a:e8:95:e0:20:d1:05:0e:d3:04:0f:02:
eb:dc:0b:b5:b3:9f:25:e4:6b:37:d2:c8:37:a8:a5:6a:b6:2a:
cd:e6:62:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:45 2025 by rpki-client on console.sobornost.net