Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1wr5QkZf8mW4lvDRt2JJDyfcMiw.cer
File: 1wr5QkZf8mW4lvDRt2JJDyfcMiw.cer (raw, json)
Hash identifier: cr7gtYJWyzG4wpC7Mr+bxoDKgHEyNlS10kmWm2aO2XQ=
Subject key identifier: D7:0A:F9:42:46:5F:F2:65:B8:96:F0:D1:B7:62:49:0F:27:DC:32:2C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228D5594FC1AB742EF83E6D62DF88F31
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:47:55 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.208.252.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:55:94:fc:1a:b7:42:ef:83:e6:d6:2d:f8:8f:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d70af942465ff265b896f0d1b762490f27dc322c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4f:a3:80:3d:69:89:55:65:2c:4d:2d:5e:f7:
b2:13:31:33:18:55:0c:84:b5:33:3c:eb:47:d4:33:
2f:b6:9b:73:cb:bc:99:dc:91:0b:70:62:6a:f1:36:
e1:d6:1c:01:b1:07:db:82:3e:06:56:00:82:8e:47:
30:af:8e:a9:33:3d:cb:e0:13:7e:01:ff:e8:d6:6e:
45:c9:6e:12:35:de:8f:ce:07:ab:61:0e:be:8e:3a:
29:0e:f0:26:dc:1c:74:94:7d:e5:5c:42:e0:ca:03:
43:00:47:3d:a8:c3:59:a9:12:18:f7:b3:b3:a9:d0:
0b:72:db:91:1e:d8:11:7f:f5:99:9d:6a:cb:88:6c:
6b:fd:7b:d4:e3:b0:11:cf:13:4f:e7:f3:28:54:02:
05:a6:f9:f5:d6:0d:7e:ef:e5:a8:da:ee:ee:85:65:
df:d5:a3:21:ce:00:af:b3:6f:2f:8b:b8:b2:6f:ab:
9c:a4:16:15:c5:d3:e0:d0:7b:39:d4:16:28:6c:13:
be:08:d9:51:b8:1a:af:53:bb:d9:37:53:75:fb:82:
9a:3a:a4:cc:10:e1:a4:8e:ae:76:e6:18:d0:78:6d:
6c:ec:a5:15:10:ca:6a:f5:91:37:12:c8:2b:82:d1:
ec:d6:6e:f1:a4:f1:22:84:47:6b:a1:49:d4:8d:40:
fb:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:0A:F9:42:46:5F:F2:65:B8:96:F0:D1:B7:62:49:0F:27:DC:32:2C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.252.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:4a:70:e8:f0:8e:cd:20:7a:c4:be:ff:18:a9:d6:bb:ea:96:
26:8f:29:78:bc:68:4d:7b:02:6e:79:2e:c9:b4:da:34:38:a9:
dc:5a:2e:95:e2:43:4f:80:80:bc:5c:85:be:25:89:f8:b4:56:
3f:95:93:12:c2:dd:99:bc:f6:1f:fa:cd:1e:1f:24:64:36:8f:
c8:a9:25:d8:23:ec:b2:1a:ef:e5:cd:8f:de:88:06:bb:1c:61:
67:c1:68:af:ee:34:74:de:72:83:1f:bd:29:e2:db:64:a0:0f:
05:02:f2:e8:a9:26:2a:17:88:a8:8f:8d:d3:d8:91:b8:32:d6:
87:1a:af:89:06:8d:36:ef:90:19:33:e8:69:91:c9:8d:20:58:
09:2d:fb:28:66:1a:fd:aa:33:e2:73:34:41:9b:a0:0f:7c:83:
3b:c7:8b:68:18:59:dc:04:83:a0:61:d7:df:f1:c9:95:14:9a:
1c:ca:6d:a8:7d:c7:00:2d:75:62:42:21:26:70:c1:ed:91:e5:
4e:ea:37:5c:f4:7b:8a:59:d8:2d:ae:bb:ed:88:89:95:a6:be:
46:ca:62:2a:82:9b:f1:4a:3c:53:47:6b:fc:32:30:77:c1:99:
58:6e:00:26:2b:eb:1a:e1:52:e3:d0:b5:61:27:20:8f:b9:09:
5a:d7:f9:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:18 2025 by rpki-client on console.sobornost.net