Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3HbS9D7BffyAXNsF8AChV5ie1Eg.cer
File: 3HbS9D7BffyAXNsF8AChV5ie1Eg.cer (raw, json)
Hash identifier: d0QNJxr1oqw6wd/GdwZn3c3n7xf/zEam5Lvpsk51u3s=
Subject key identifier: DC:76:D2:F4:3E:C1:7D:FC:80:5C:DB:05:F0:00:A1:57:98:9E:D4:48
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D85F68330129CE2E1CD30112D72754
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:48:21 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.30.182.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d8:5f:68:33:01:29:ce:2e:1c:d3:01:12:d7:27:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dc76d2f43ec17dfc805cdb05f000a157989ed448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:74:c0:70:24:58:9f:c3:93:58:e8:a3:94:90:
38:01:27:e4:de:8a:75:e6:4e:7e:34:bc:09:0d:c7:
96:ae:8d:f0:83:fb:81:31:04:eb:52:3b:7e:52:31:
1e:fb:5f:58:c4:4b:6c:5f:a2:e5:89:9b:56:43:db:
59:97:92:6e:6e:39:1b:ec:09:a5:4f:71:5a:95:e1:
39:b0:4d:9f:15:ab:1a:6b:0d:54:03:b9:bd:78:26:
b9:5b:0b:e7:25:55:37:9f:00:5b:08:25:0a:3a:8c:
aa:9e:8e:77:fa:a4:b9:01:99:91:b7:4e:76:54:e8:
32:fa:b3:f1:1e:36:ac:3c:6b:d4:57:06:d1:d2:3a:
c8:c8:e7:86:f7:ca:b2:a1:66:e6:11:36:22:f0:40:
e8:d2:04:d8:fa:af:e3:54:7c:51:41:c7:53:a1:41:
ca:cf:69:0a:0a:63:2c:4f:33:4f:19:3b:42:5a:3b:
be:62:16:2d:8d:cd:e7:a2:80:80:bb:64:e3:6e:c8:
a8:9c:b3:e4:8e:8b:ca:4e:f0:a2:88:58:25:47:97:
42:7a:da:f0:93:82:d5:f3:fd:03:f8:2e:5b:c0:b4:
85:13:78:35:63:c2:11:2f:6e:6a:6c:65:3e:7b:45:
cf:c1:cf:91:d6:a8:ad:07:d6:d9:2f:69:9c:8f:27:
94:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:76:D2:F4:3E:C1:7D:FC:80:5C:DB:05:F0:00:A1:57:98:9E:D4:48
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c61e40-ac09-4756-94ef-93c6457caf33/1/3HbS9D7BffyAXNsF8AChV5ie1Eg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.30.182.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:3f:d4:e1:7b:99:7c:3d:c7:57:51:d1:79:e8:53:8e:0c:e1:
30:ee:d7:8d:34:0f:0f:3d:16:70:6b:25:4f:0d:24:64:30:ac:
1c:e8:f0:03:0c:3e:48:16:c7:04:be:62:77:0d:ee:e3:89:3a:
69:32:59:2c:a3:f0:0a:76:21:0d:01:fe:57:94:d6:c8:03:c4:
e5:0a:1c:cf:a3:5f:05:c8:1c:3d:2b:ac:d8:ac:53:59:44:6b:
80:9c:75:5a:c1:4b:c5:14:c5:9d:66:d9:24:e8:31:8c:80:8f:
1c:29:9e:f3:f3:85:a9:dc:bc:7f:78:ac:04:1f:cd:8f:a1:e5:
ef:72:05:7c:6f:9e:59:3e:37:f0:e2:c1:3f:90:da:49:17:88:
85:50:29:16:c6:ea:5b:04:93:13:0a:9e:a4:f0:ea:2f:1c:12:
d0:e2:59:38:16:a9:fd:f9:4c:ba:61:51:08:7f:40:31:0e:00:
0f:8e:a8:71:85:0c:96:d8:58:48:b1:9d:60:d3:47:75:85:cb:
72:08:84:b7:a4:95:ce:61:29:a3:65:f8:ed:a0:3c:32:c4:ab:
33:51:55:f6:bb:eb:20:f4:bb:93:7f:5d:17:04:81:5a:72:05:
05:83:73:41:da:e5:87:ac:60:43:46:63:52:1d:2a:70:75:d0:
90:66:2b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:49 2025 by rpki-client on console.sobornost.net