Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12UrrkezA7urED_3ukWgqQYMPcw.cer
File: 12UrrkezA7urED_3ukWgqQYMPcw.cer (raw, json)
Hash identifier: WLtGPSbUiDs/rNSg9m1z5BNshIkAypp+j+IBn2jfHJU=
Subject key identifier: D7:65:2B:AE:47:B3:03:BB:AB:10:3F:F7:BA:45:A0:A9:06:0C:3D:CC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D931F2A1001E994893B0AAF16AB85A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:15 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.213.153.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:31:f2:a1:00:1e:99:48:93:b0:aa:f1:6a:b8:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d7652bae47b303bbab103ff7ba45a0a9060c3dcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:80:5a:17:08:ae:11:be:a6:5e:f0:05:78:f4:
2f:ec:84:56:55:0a:9a:b6:64:28:86:bf:65:4d:70:
44:de:ee:57:28:ca:38:44:52:3a:7b:55:46:a1:85:
92:56:d1:54:a5:03:9c:47:b3:01:23:2f:8a:6b:2c:
58:d8:f4:9a:58:d7:72:0e:b3:45:95:67:3d:3c:60:
a6:0a:a1:ad:b5:2f:a6:d2:fd:5a:a3:eb:f9:47:cd:
59:f4:ed:57:50:35:5a:40:9b:6c:bd:c1:c0:c6:8f:
a5:52:38:b1:df:3d:c0:f6:e6:01:d2:e0:6e:df:fd:
5a:35:d8:22:50:85:82:54:66:bb:54:69:8e:3a:2f:
b7:37:82:94:7b:a8:3a:f7:ed:2e:ab:2c:81:50:42:
5f:d8:a6:44:20:b8:9c:01:57:f0:7e:5a:7d:1c:3d:
64:12:17:07:de:f2:b1:14:7a:c1:9f:04:38:85:98:
35:0f:e0:73:e0:54:d2:39:05:94:10:d4:6f:bd:83:
7f:97:ce:34:96:c1:bc:89:13:9f:b1:9e:e1:44:a4:
21:c8:2d:cd:29:b3:f7:c3:38:5e:c1:ab:ed:0c:ac:
bb:40:66:21:b4:0c:57:52:1e:2e:0c:81:ea:b0:c1:
01:3c:6e:6d:74:fb:7e:f8:34:b6:95:1f:9b:bb:f0:
5f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:65:2B:AE:47:B3:03:BB:AB:10:3F:F7:BA:45:A0:A9:06:0C:3D:CC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.153.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:01:8d:3e:23:5a:be:af:eb:04:b6:6e:f2:bf:e6:56:b9:8f:
76:55:84:0b:fe:0c:ef:72:8d:58:5c:be:80:bf:8e:01:e6:58:
ae:6c:55:81:0c:d2:0a:20:c2:2e:d8:bc:6d:fc:87:55:d3:05:
0f:a9:4b:a7:01:22:5b:e5:63:15:da:6f:b6:88:b3:73:ca:9c:
34:77:71:43:f7:ee:7e:61:e2:9a:5e:d9:1b:c6:63:c6:94:0d:
eb:94:91:12:c5:10:1f:9b:7e:bb:42:ad:49:ee:75:75:4d:f8:
7f:10:35:f0:e7:e1:07:16:e7:28:e3:e9:df:3c:52:07:df:59:
24:bc:4f:f9:e8:84:f0:c9:32:71:f3:ff:43:47:03:1c:8a:80:
be:d3:5a:0e:1e:74:c9:91:90:3d:29:c5:67:62:b1:16:5c:63:
29:1d:2c:0e:7b:f8:51:ab:f1:0d:ab:56:12:a5:15:31:b7:f0:
a1:c9:6c:97:e2:72:ca:fd:a1:64:31:f6:28:d5:3b:ca:f0:13:
6f:c2:ee:a3:0c:fd:e9:3e:1a:bb:e8:54:62:ed:26:91:af:a3:
9f:d0:1c:57:a8:3d:37:ff:71:24:9f:e5:9b:96:f5:69:5b:b1:
42:d1:57:77:59:dc:c9:8b:51:89:b7:99:07:0a:c5:60:7a:64:
9e:8e:b5:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:02 2025 by rpki-client on console.sobornost.net