Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0jIxAbKVlv9ELTdJNzuOmYM1RnA.cer
File: 0jIxAbKVlv9ELTdJNzuOmYM1RnA.cer (raw, json)
Hash identifier: Qjms5woP936W9bZpC6+LnoNw0pG6IyJWcg+sH9yB8D4=
Subject key identifier: D2:32:31:01:B2:95:96:FF:44:2D:37:49:37:3B:8E:99:83:35:46:70
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942444B1CB6E8AD0A20B7AE75A275932E3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/0jIxAbKVlv9ELTdJNzuOmYM1RnA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:47:49 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 45.152.24.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:b1:cb:6e:8a:d0:a2:0b:7a:e7:5a:27:59:32:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d2323101b29596ff442d3749373b8e9983354670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3f:e3:99:e5:17:f8:1c:03:b2:ed:f1:c6:11:
ed:82:1f:df:b6:58:6e:56:53:33:a2:ab:f9:53:64:
a3:e3:b5:fd:eb:57:e2:9d:44:44:d2:ef:d2:ee:0a:
46:ad:31:52:67:01:87:6c:44:3d:33:18:c6:3a:53:
94:b0:83:01:b3:50:63:ae:57:29:d7:6d:3c:88:35:
16:74:5f:13:41:ca:9c:a0:73:cc:e2:01:8a:a7:2d:
b4:7d:22:32:d3:87:c0:58:30:7e:76:3a:42:18:a0:
26:44:d4:91:5c:3e:ca:f4:e0:13:c8:75:ef:15:be:
83:5b:5d:71:f7:91:88:ee:eb:a4:08:45:2a:ad:98:
9a:73:7a:e6:aa:06:38:4e:3c:7b:f0:38:61:3b:bf:
31:b4:26:a4:5a:0f:73:75:6d:3e:ed:c1:7c:9b:ff:
79:fe:82:08:cb:e4:fc:9e:a5:bb:9a:cc:cb:e9:4e:
6c:96:05:70:bc:8c:25:ec:01:78:ae:61:42:9c:3b:
ba:07:9f:b5:1a:69:45:42:47:3b:38:24:41:54:92:
eb:8c:03:f7:2d:c1:41:8c:60:b7:6e:c6:db:24:e9:
d9:fc:74:ce:cc:da:ce:9b:2d:35:1d:5f:bd:cb:3d:
f6:ae:e9:af:c6:76:27:d5:ed:ca:5f:ba:4e:d2:cd:
c0:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:32:31:01:B2:95:96:FF:44:2D:37:49:37:3B:8E:99:83:35:46:70
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5b4185-b080-498e-8cc7-6a6af5b74d38/1/0jIxAbKVlv9ELTdJNzuOmYM1RnA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.24.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:81:21:40:81:00:3b:66:70:8f:18:b5:cf:3d:e7:c9:8b:9b:
67:54:41:fc:c8:96:50:83:31:30:c5:c8:24:2d:44:e8:c8:37:
d6:b6:4e:9b:00:07:c0:18:a8:5d:65:38:7a:85:24:85:b6:3c:
4a:91:c5:b9:20:1c:11:e0:62:0d:af:d2:a3:9f:61:70:50:83:
71:08:63:fe:b7:b8:ff:16:c4:05:e0:8e:a8:31:b9:2c:55:70:
1e:85:5d:d3:4e:cd:7f:ac:7f:ce:90:e5:a3:a9:48:d3:67:59:
19:bb:95:88:6e:3a:f3:8f:52:eb:83:6d:62:e4:58:0b:60:7d:
9a:17:1a:a8:95:12:af:42:28:5d:5e:81:53:48:3a:2b:99:e3:
28:f2:0e:75:0e:85:b8:60:27:86:9e:7b:f1:23:91:03:e2:17:
54:d5:97:c0:7e:c0:54:09:d8:24:a1:8d:be:84:c6:1d:69:c2:
00:69:ff:3e:69:14:1c:b3:15:74:69:d0:30:58:0f:b0:25:67:
f5:60:00:00:58:b6:47:88:a9:b5:aa:a1:d5:a2:94:da:bf:62:
3f:ef:b6:6c:b3:b6:61:58:8d:e5:ec:83:42:51:d0:41:ff:d1:
26:47:5f:b0:98:14:0d:23:b1:cb:ea:81:dd:0a:fa:f9:d7:b1:
66:06:c5:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:58 2025 by rpki-client on console.sobornost.net