Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5-XEyZ1hMQSZgq-a2bhmArKSm7g.cer
File: 5-XEyZ1hMQSZgq-a2bhmArKSm7g.cer (raw, json)
Hash identifier: /JWE1etWkUsIpxvKOvTV/GUYxRo5SPCbXrmIm9wC5WI=
Subject key identifier: E7:E5:C4:C9:9D:61:31:04:99:82:AF:9A:D9:B8:66:02:B2:92:9B:B8
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D5D5E48934FCAE5C9E04EF26091994
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:47:52 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.56.215.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:d5:e4:89:34:fc:ae:5c:9e:04:ef:26:09:19:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e7e5c4c99d6131049982af9ad9b86602b2929bb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:56:60:0b:e7:b4:30:a7:4a:32:f7:a8:bb:2f:
fa:08:88:34:d2:2c:da:58:70:41:1b:23:97:a0:7a:
d7:32:21:7e:d0:16:df:d3:4e:87:ea:4c:06:5f:f3:
dd:e7:c7:92:ea:66:ad:f9:4b:25:7b:a0:f9:52:1f:
56:c3:af:23:df:b3:75:95:36:f8:df:1d:14:06:a7:
bd:c1:20:3b:dc:37:b9:83:3a:17:33:04:7a:df:fd:
02:a5:44:f1:dd:3e:78:da:19:2b:7c:1d:b7:8a:ae:
43:f0:be:b4:2d:13:77:9c:39:0b:db:64:ee:bf:bf:
48:6a:1e:d8:22:9f:58:4f:1e:e4:71:b1:67:79:d4:
ed:f8:93:ab:c2:5c:66:68:b9:2f:88:8d:c9:14:1d:
a2:2b:c2:58:0f:ae:a4:0e:53:5d:2f:30:97:dd:99:
c6:1e:48:1b:34:b4:0d:f8:3a:eb:a6:bd:26:5a:df:
5a:bd:c0:f8:4b:23:34:30:ed:eb:f0:d6:e9:02:bd:
64:72:da:53:d8:c1:56:8f:91:72:48:34:37:30:0d:
cd:fb:e2:82:90:23:84:d0:47:a8:4e:79:ec:80:8c:
71:02:d4:2b:b1:dc:42:59:c9:f0:8a:cc:25:db:c0:
bc:96:d9:de:94:d4:eb:54:ed:e2:96:3d:3f:b8:23:
b5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:E5:C4:C9:9D:61:31:04:99:82:AF:9A:D9:B8:66:02:B2:92:9B:B8
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/e709de-6b2d-4be4-8503-a1e4877cee48/1/5-XEyZ1hMQSZgq-a2bhmArKSm7g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.56.215.0/24
Signature Algorithm: sha256WithRSAEncryption
15:7d:9e:ae:f2:f0:5b:df:1a:bd:b2:f2:32:58:8b:ef:22:8e:
2f:a4:d7:d6:e9:2e:fc:24:9e:a9:7f:1b:c1:d9:6b:9f:f6:de:
e2:f0:ac:ce:fa:fa:f5:f3:36:e7:d7:cd:82:a8:1a:fc:f3:79:
29:46:3a:f1:af:44:da:a9:c8:71:4f:e9:50:58:3f:78:89:0a:
92:de:89:f8:b6:57:4d:e1:02:18:33:5b:b3:a6:92:63:e2:4d:
99:98:aa:1a:f9:fc:2f:5c:a7:df:50:ed:69:2c:44:d7:c8:a1:
32:d3:fc:13:ae:a8:f3:fe:d5:29:80:1b:45:78:50:6d:a3:dd:
c6:c8:e4:fe:28:3f:69:23:cb:99:a4:1a:ba:ac:bf:c2:e2:97:
59:06:e9:a3:70:e7:60:04:ac:c4:83:75:fb:f9:97:b7:2b:44:
3a:94:73:63:16:96:6d:54:9b:ce:80:99:f5:cc:b6:be:6c:2f:
64:41:73:ad:67:ce:75:6d:f7:82:9a:18:d2:ec:81:f4:92:7c:
ac:8e:d6:25:59:e2:82:d1:84:d0:4a:dd:2b:6e:10:cf:60:89:
2d:d3:8e:68:02:d8:2d:81:36:b5:b1:d2:79:a5:d3:cd:95:b7:
ad:a5:fc:ee:8e:13:0e:93:84:9d:2d:d4:2e:c3:08:b2:46:01:
cd:3c:55:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:08 2025 by rpki-client on console.sobornost.net