Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3E-QqT3JQnhVZEkDy3DB90uTF4Y.cer
File: 3E-QqT3JQnhVZEkDy3DB90uTF4Y.cer (raw, json)
Hash identifier: 6NHTEL8Arj6MlsJSsLpeKR0vUVkevqzjuD/nmes/cR4=
Subject key identifier: DC:4F:90:A9:3D:C9:42:78:55:64:49:03:CB:70:C1:F7:4B:93:17:86
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D63D7EFCA66ABB584B6FD44FA918F8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:48:18 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.24.120.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:3d:7e:fc:a6:6a:bb:58:4b:6f:d4:4f:a9:18:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dc4f90a93dc9427855644903cb70c1f74b931786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:da:28:a0:35:4d:b3:1d:78:01:fc:81:0e:d8:
a4:69:82:04:a1:a9:0d:db:2c:12:22:be:09:10:1c:
0a:35:eb:0c:5d:93:d8:b0:ab:05:a3:98:63:ef:60:
23:0f:42:a3:ef:3e:83:96:79:09:71:56:78:20:c7:
bf:0f:f8:85:84:48:bc:14:67:78:38:10:95:9f:7c:
e7:d7:79:3d:73:d7:70:88:57:f9:7c:bc:dd:b8:51:
eb:8b:74:2c:23:30:59:66:49:10:1f:f6:83:19:28:
16:9f:38:cc:ae:dd:0a:88:2b:e0:b2:75:5c:65:eb:
28:27:5c:1a:9d:ed:9c:c9:ea:24:5e:1d:b7:f8:ca:
94:33:1f:6e:34:ca:5d:e9:3f:fd:91:4d:47:c5:03:
43:66:85:aa:63:26:70:22:18:a8:72:59:69:15:36:
c5:67:c1:1a:59:e6:53:e8:27:5b:69:ec:86:67:2f:
a3:c2:0e:aa:1f:13:de:6e:01:26:f3:9e:16:cc:c9:
26:99:72:93:55:3b:4e:5d:db:b9:9f:04:59:20:cc:
54:ae:ff:6f:ef:e4:84:64:dc:db:36:2e:8a:d5:b6:
b3:60:cb:86:b9:e4:7f:e4:13:fa:9e:6b:b4:e2:a6:
b0:2f:49:5c:84:2b:8a:be:6b:05:ca:31:5c:84:90:
cd:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:4F:90:A9:3D:C9:42:78:55:64:49:03:CB:70:C1:F7:4B:93:17:86
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/238002-7dcc-44ac-8645-63177fb19abe/1/3E-QqT3JQnhVZEkDy3DB90uTF4Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.24.120.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:a2:84:95:c9:92:87:cb:f8:1d:e2:15:ff:63:fb:b5:e9:f6:
1d:0c:1f:58:6f:74:7d:a6:13:24:19:9e:6f:15:ea:36:b9:c4:
91:c8:4f:61:1d:a6:83:bc:a0:d7:be:a7:90:39:07:65:73:85:
de:87:84:05:3a:dd:93:4f:0a:04:51:7a:e5:14:b9:23:5b:b1:
49:05:a2:ff:db:9b:c2:13:14:b0:d6:3b:94:64:4e:0a:3d:02:
7f:35:82:45:2a:a0:37:f9:0f:e2:98:71:9d:6c:9d:fb:99:ae:
ee:71:27:11:9c:81:3d:24:d2:e3:22:15:da:16:23:03:7c:c5:
df:d1:73:33:12:b3:0f:c7:e6:3b:b2:2b:9f:ac:08:66:62:16:
6b:c4:81:f6:31:e0:f9:cb:7b:e6:17:9b:88:45:8b:0d:38:b3:
2a:94:d1:b9:28:03:b8:bf:ef:bb:e6:04:cc:5f:aa:5c:a4:0c:
77:fc:0c:93:29:77:dc:21:2d:c6:e3:9f:a5:b3:71:98:52:7d:
1a:5e:ca:a5:9b:67:42:fa:f0:43:d2:10:18:64:bc:bf:f6:77:
f9:e6:52:ef:f7:98:68:e5:84:1a:6a:87:24:18:45:7f:9b:00:
d8:93:90:35:62:bc:b6:9a:52:5b:16:a9:b2:4c:22:6f:a4:43:
f2:20:27:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:49 2025 by rpki-client on console.sobornost.net