Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2okNBdXIi33m9bqkwdCF_nMB9dU.cer
File: 2okNBdXIi33m9bqkwdCF_nMB9dU.cer (raw, json)
Hash identifier: XsYLkXZnDXYX1dZty1s3jOKkfn+FShZ+qS1cqdYMHb4=
Subject key identifier: DA:89:0D:05:D5:C8:8B:7D:E6:F5:BA:A4:C1:D0:85:FE:73:01:F5:D5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942521ECA99FEDCF16F33BE43AD3F0E358
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:49:27 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.0.235.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:ec:a9:9f:ed:cf:16:f3:3b:e4:3a:d3:f0:e3:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=da890d05d5c88b7de6f5baa4c1d085fe7301f5d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:43:4c:7c:dd:a3:62:98:0e:2f:97:73:cd:bd:
98:8c:4e:d6:7c:1f:a0:f9:8b:81:d4:c2:a3:a1:8e:
ef:85:92:fe:23:6a:5c:8a:83:6b:a6:93:5a:fb:40:
8b:52:28:99:49:b3:91:0c:37:ed:06:70:d2:c1:b9:
08:ae:4e:6c:96:13:43:ac:d3:12:f2:ef:47:9b:7e:
36:cf:dc:9d:d3:8b:14:5a:e8:a0:48:26:d1:10:67:
91:59:00:d3:b8:20:46:1c:cc:fb:78:23:e2:81:b4:
a7:fb:b8:a0:fb:0b:a3:d1:c8:5a:0f:e4:bb:f6:61:
9a:c1:78:85:fc:d1:8d:db:ad:36:16:de:f5:61:f2:
5e:11:42:5d:f0:d0:49:93:7b:0c:ed:f2:f7:fb:ba:
6f:be:cb:ba:4d:aa:73:74:90:e9:67:41:3a:7d:d5:
e4:95:d0:f3:ce:52:ff:26:ff:07:96:84:b7:18:5e:
48:7c:f5:f1:22:75:0e:0e:a9:ec:ad:23:09:6c:0d:
f7:77:e3:7d:cd:e8:39:08:df:5e:70:23:c6:a2:87:
b6:c8:c3:17:04:cd:54:6b:0c:d6:54:cf:00:b7:77:
41:e1:bd:d1:a0:5b:ed:ec:8f:80:8c:80:8e:db:e5:
a1:35:30:8b:96:04:f1:77:3f:b5:d0:7c:39:b0:ae:
2d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:89:0D:05:D5:C8:8B:7D:E6:F5:BA:A4:C1:D0:85:FE:73:01:F5:D5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a67420-b1b5-4495-9176-b4836bc164a1/1/2okNBdXIi33m9bqkwdCF_nMB9dU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.235.0/24
Signature Algorithm: sha256WithRSAEncryption
84:8b:23:cb:31:59:ff:fe:85:b3:bb:8b:e5:46:13:80:6c:80:
2f:d0:95:39:77:b1:4e:74:8d:7c:c8:a2:0b:00:93:84:ca:36:
a1:15:5e:3b:6d:dc:46:fc:7f:b4:9c:c0:b2:a0:7d:a4:38:9d:
3a:8e:5a:07:31:70:90:c3:c0:56:72:26:27:66:a3:94:74:66:
1e:0a:ce:8b:46:a4:ed:6a:c0:4b:ac:6c:d1:81:6e:cb:17:56:
df:92:04:ba:8c:8c:f1:93:83:b0:0f:f9:88:28:48:dc:27:73:
42:d7:5b:c4:e1:3b:d2:b8:5d:48:11:54:e6:36:eb:50:0a:9a:
16:1c:7a:3b:2a:3b:48:a0:af:1c:90:8f:2c:43:e5:ab:4c:14:
7c:08:3d:4e:99:7a:63:df:e6:28:7d:11:26:65:d7:c4:d2:b8:
0d:09:fa:6b:92:23:1d:3a:f5:da:06:2d:f7:cc:d3:7d:05:c8:
7b:6e:ea:df:0b:4e:86:52:04:63:ab:27:f0:9e:08:ac:bb:b1:
7c:95:5d:46:2e:81:76:34:5c:78:1a:a9:ef:7d:5e:3c:e4:98:
a0:0a:de:fa:46:30:04:8f:7f:75:f8:ba:62:d7:91:42:f2:82:
4d:01:55:31:7b:28:a8:29:55:35:18:1d:83:bc:e4:aa:da:03:
9d:e3:a6:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:33 2025 by rpki-client on console.sobornost.net