Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0cpnYQKGq3OPhs6TX99e1iDwLZY.cer
File: 0cpnYQKGq3OPhs6TX99e1iDwLZY.cer (raw, json)
Hash identifier: eqKCqIXGn6Jj5yACrWuAn7Tp1jjCOtKJ5Xv7AVQYpPk=
Subject key identifier: D1:CA:67:61:02:86:AB:73:8F:86:CE:93:5F:DF:5E:D6:20:F0:2D:96
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194252226272048587E26F8B20CF266F50C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:49:42 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.104.33.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:26:27:20:48:58:7e:26:f8:b2:0c:f2:66:f5:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d1ca67610286ab738f86ce935fdf5ed620f02d96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:78:49:d5:1d:97:9a:b0:6a:f9:e7:71:ed:32:
4d:ac:f9:c5:35:b8:32:30:c9:15:9f:04:e4:29:17:
b7:72:ec:70:04:bc:6d:35:06:d1:56:bf:8b:d5:91:
85:19:2e:de:98:e7:20:91:11:9d:2e:3c:9b:6e:11:
9c:50:6a:75:42:d3:9b:37:f0:ec:0d:50:8c:66:1b:
48:45:01:df:a8:9f:a4:92:58:41:99:cb:e4:67:51:
f2:8f:69:b3:be:a8:99:24:3a:d0:d9:f7:48:d2:23:
b8:e1:28:fe:c2:4a:9d:01:ba:eb:70:70:34:bd:3e:
24:95:bf:c9:60:8a:2a:ff:29:2a:f1:2a:ae:11:c8:
36:09:39:ca:5c:17:66:f9:4e:2b:29:a4:15:2b:a4:
56:3f:a9:29:05:3e:c5:94:2b:13:a2:a8:b6:49:8d:
40:57:21:87:63:63:90:39:ae:08:48:24:8a:64:00:
08:56:17:ca:ed:1f:d2:ae:8e:12:a3:e6:b1:2d:02:
d9:c4:1c:5e:d7:06:b4:c7:18:8b:75:1e:ff:d8:34:
4e:67:18:d4:2f:19:81:82:11:80:c5:c0:f1:70:da:
6a:e1:db:de:d8:1e:c3:6c:57:a0:9e:4b:19:c8:9a:
ec:38:f1:27:de:42:71:1d:54:aa:21:a5:96:ad:ec:
0b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:CA:67:61:02:86:AB:73:8F:86:CE:93:5F:DF:5E:D6:20:F0:2D:96
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7a1a62-e481-4a14-ad6e-35bff96da4c5/1/0cpnYQKGq3OPhs6TX99e1iDwLZY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.33.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:a5:bf:81:12:b1:2b:e7:58:46:51:6d:b9:8f:e4:30:17:08:
96:75:68:5e:d4:f2:d4:22:ff:e1:7d:5b:eb:61:47:ac:d4:40:
c7:78:4f:16:79:3e:cb:e9:07:43:88:0b:de:d0:36:fc:7d:0c:
26:35:66:7b:4d:45:18:92:d1:dd:d5:5c:55:67:3a:b7:7e:13:
65:23:25:14:91:d9:9b:1c:aa:ac:1a:79:03:14:99:2b:ca:72:
4a:0e:ef:b4:8a:f3:11:03:d0:b4:fa:0f:1a:ec:c6:93:e6:59:
3b:9a:89:45:7a:8a:4b:00:d3:69:71:0c:72:b4:bb:0c:c1:66:
fd:d0:09:ba:87:b8:f8:96:40:80:56:cb:5d:b9:fb:6e:1c:87:
55:5d:92:84:c7:ea:f6:1f:54:e6:02:7f:0c:ef:95:f2:3b:c8:
72:d8:68:d0:b5:46:e4:13:8a:4e:74:fb:8d:8e:a7:fd:72:39:
ac:ab:9a:84:02:1c:97:7e:b5:8c:52:41:94:9b:16:2d:95:26:
b3:d5:69:f3:20:56:45:1f:e4:78:27:cc:a5:cc:cb:e3:86:09:
42:53:8b:b7:ec:a4:58:42:50:b2:8f:21:5e:f4:78:fe:83:d3:
83:3b:74:10:8b:db:e5:82:82:81:b7:bc:6d:cd:d5:02:10:4a:
21:6d:00:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:50 2025 by rpki-client on console.sobornost.net