Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3gr32Dxe6w1DStdTxqX0dUlpizc.cer
File: 3gr32Dxe6w1DStdTxqX0dUlpizc.cer (raw, json)
Hash identifier: rIXLfJvtq/UbzGGlVln3yQBhmIOY0pvJzN58Y/j32g0=
Subject key identifier: DE:0A:F7:D8:3C:5E:EB:0D:43:4A:D7:53:C6:A5:F4:75:49:69:8B:37
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258FC126967C1EF510FB09218B9327B1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:49:25 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.26.148.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:c1:26:96:7c:1e:f5:10:fb:09:21:8b:93:27:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:49:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=de0af7d83c5eeb0d434ad753c6a5f47549698b37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e5:51:0c:76:0f:08:7d:8b:b4:4b:62:45:1f:
a4:17:22:13:31:96:3e:69:8b:50:da:8a:85:e9:ac:
62:9b:f3:52:ed:45:2d:d1:c8:8e:b5:7e:ab:8b:92:
04:4f:06:da:78:12:f1:48:07:d7:03:f4:20:c9:0e:
32:10:95:55:d2:2e:af:7f:0e:1a:db:ce:d6:f3:de:
de:40:f0:8e:0d:24:d4:15:c8:e8:2b:b6:aa:12:d6:
29:f3:4a:39:e1:83:12:44:22:86:11:3c:8b:6c:18:
36:8c:44:a5:36:b5:18:e3:63:93:67:aa:8c:b1:63:
08:36:4f:66:dd:de:23:80:2d:49:02:e4:0b:12:a9:
7f:f6:d8:70:c3:4e:d8:4b:81:6f:9f:d2:5a:d1:af:
57:8f:3a:f1:b0:23:33:9c:3d:84:ce:be:d6:09:2d:
33:66:82:e3:67:19:a5:0f:19:47:d6:cc:6b:a2:53:
5c:a2:9c:fc:d9:e4:2c:01:b0:88:f6:df:33:ae:53:
94:87:da:8d:70:18:9c:d0:71:ae:4b:1c:b3:96:20:
a9:c3:d9:12:b2:04:f6:05:38:b4:53:27:0c:a7:36:
b0:b2:5d:7b:e5:d1:a1:f4:01:41:e2:e9:aa:8a:5b:
59:16:71:d3:ac:19:6d:55:68:8f:ce:b6:ad:b4:6d:
b6:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:0A:F7:D8:3C:5E:EB:0D:43:4A:D7:53:C6:A5:F4:75:49:69:8B:37
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e7a772-8b39-430d-b192-a1b8bc5b2cd7/1/3gr32Dxe6w1DStdTxqX0dUlpizc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.148.0/24
Signature Algorithm: sha256WithRSAEncryption
83:bd:aa:6a:9f:34:96:ee:67:bc:b1:b1:65:6d:e9:81:eb:14:
3a:d5:c0:3c:2f:fc:f3:78:7c:d8:56:2e:22:6a:e9:3d:57:85:
d3:41:33:eb:88:21:1d:43:9f:85:ef:61:a8:de:c9:36:e6:1a:
87:ab:15:58:0a:70:0d:f6:1a:7f:2f:c2:1b:ea:9e:01:8b:1c:
1c:47:43:62:82:82:c4:fd:f0:21:93:fd:49:82:69:8a:cb:d1:
9c:58:4c:c2:3a:c3:11:5d:86:27:3f:8d:7a:53:1e:1b:78:97:
ac:77:a5:36:85:7e:38:95:ac:7f:b1:e6:41:78:76:21:ac:11:
f7:6e:e7:7d:c9:51:e3:3d:2d:3f:08:1d:1f:8e:d6:b5:86:b0:
05:70:ca:64:19:94:31:fd:54:83:f7:e0:d1:62:78:87:05:3a:
2a:74:2f:7c:53:16:d5:4a:a0:1c:4d:a4:c6:47:32:91:41:71:
12:91:8f:d6:ca:aa:15:72:a2:ca:77:06:5a:8b:06:f4:59:f5:
cd:eb:28:6e:69:5b:94:9f:a9:71:e4:50:92:eb:55:2f:22:cc:
05:53:2b:c3:4b:b2:a8:19:ae:20:9e:41:99:8a:c5:01:ee:55:
c5:a1:bf:a3:28:b0:35:b1:8d:37:af:60:c7:60:83:d7:7b:b8:
72:f0:f0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:53 2025 by rpki-client on console.sobornost.net