Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0u9GpBNBlOckI9VyobZtSp0uTBM.cer
File: 0u9GpBNBlOckI9VyobZtSp0uTBM.cer (raw, json)
Hash identifier: Dzs+ihSNpX6PmZZZqGw8QLbQtbr4wAKuIS/8bL5MaJE=
Subject key identifier: D2:EF:46:A4:13:41:94:E7:24:23:D5:72:A1:B6:6D:4A:9D:2E:4C:13
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FDE81AAAD5265FB70827F36D2B9F49
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:49:44 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.235.28.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:e8:1a:aa:d5:26:5f:b7:08:27:f3:6d:2b:9f:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d2ef46a4134194e72423d572a1b66d4a9d2e4c13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1f:c2:f1:25:55:91:54:5c:3e:5d:29:01:e7:
77:c8:4e:76:d3:52:18:7e:90:d9:3e:fe:df:d8:98:
50:77:cb:41:b2:05:7d:bf:08:a2:5a:55:fb:66:96:
4b:3b:70:0a:4b:74:eb:6f:03:06:a5:0c:75:34:30:
64:4e:03:8e:6c:a4:23:b5:3a:80:dc:88:f6:15:26:
a4:41:ab:99:5a:ab:13:4e:17:b9:99:67:6e:0e:7d:
7f:5b:53:22:29:32:54:b8:80:3a:27:31:59:89:af:
30:ba:d7:c3:bf:7a:b6:05:30:a5:0a:d8:6f:8f:e5:
98:76:14:31:b3:6b:43:b6:4d:e8:37:12:0d:6e:0c:
63:54:6e:7e:5e:02:d1:da:2c:8c:79:6d:25:83:ed:
6e:a0:00:fb:f8:ff:e1:1c:4e:ca:04:3e:63:ed:0e:
d9:cf:b3:94:dc:1a:3c:60:47:57:50:ed:0a:38:18:
69:bc:09:cc:65:ed:db:30:8c:0d:bb:88:7f:36:44:
f5:68:b9:cf:39:73:02:be:5d:e6:86:5b:38:21:69:
d9:a1:39:03:97:c4:cf:4f:bf:c7:2a:e0:21:f6:d5:
74:67:a7:f6:fc:ce:ff:9f:b0:63:c2:ac:76:5f:2a:
17:3c:29:17:15:45:e6:09:9d:5c:92:96:dc:fa:89:
de:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:EF:46:A4:13:41:94:E7:24:23:D5:72:A1:B6:6D:4A:9D:2E:4C:13
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6453c4-6687-4ef9-9fdc-a88bb7805b09/1/0u9GpBNBlOckI9VyobZtSp0uTBM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.28.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:3d:c9:ad:1c:59:39:dd:18:e9:91:36:b1:5a:dc:cb:aa:54:
2e:3d:8a:f7:24:0d:33:c0:1a:e7:c5:30:ae:4a:c8:a6:bd:7f:
72:d9:06:29:b2:1c:8a:18:67:4f:8f:5f:36:fa:75:59:62:1a:
3a:a9:f7:df:53:0a:b2:35:11:35:17:15:92:e9:76:70:da:4c:
0d:80:b9:70:83:65:21:d9:e3:a0:03:a1:61:a6:7e:13:73:17:
6d:b1:a2:bb:8a:d4:71:d7:e9:92:0b:a7:37:1b:8c:38:b4:03:
fe:55:d7:98:ef:83:e1:77:49:5a:e6:e8:c2:a9:ba:e5:dc:5d:
8e:27:69:ac:77:11:08:ae:a2:02:5c:19:34:8e:3c:5d:f3:22:
ed:72:29:f0:f5:b6:10:9b:38:d9:df:d7:7d:65:ee:d5:13:ba:
e7:8d:33:0c:8f:36:99:79:7a:34:6f:8a:5a:d4:7b:fe:63:e6:
9d:d2:2c:47:da:4a:7d:42:bc:aa:eb:3b:0f:d2:ff:38:a0:98:
82:bc:c2:c8:8c:ca:e6:e5:f7:44:45:cb:1a:05:52:fe:a1:71:
6f:c2:17:5b:88:73:0a:93:23:57:c5:2d:d9:9b:c3:14:b3:33:
e2:3f:dd:79:30:e5:48:a5:d6:06:0b:14:77:e0:8f:66:4f:b0:
33:95:1c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:59 2025 by rpki-client on console.sobornost.net