Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5tM83lfaCcfZM3ce6hQllAdvmiM.cer
File: 5tM83lfaCcfZM3ce6hQllAdvmiM.cer (raw, json)
Hash identifier: mO/OWQu1HwBV3e8yjxta1myh4ATSpM9Oy0SNZyb6nB0=
Subject key identifier: E6:D3:3C:DE:57:DA:09:C7:D9:33:77:1E:EA:14:25:94:07:6F:9A:23
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942143C64F06018210BCFE0BD145F7DFB5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:47:57 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.245.220.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:c6:4f:06:01:82:10:bc:fe:0b:d1:45:f7:df:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e6d33cde57da09c7d933771eea142594076f9a23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a0:95:46:5a:76:1c:d3:5a:7c:29:35:5c:20:
f4:54:9d:9a:77:ad:14:db:e4:ff:2e:76:a4:dd:3c:
f7:d9:a1:ed:3f:1a:02:24:77:7a:db:bf:0a:81:85:
ac:d7:48:e6:ee:2b:0f:8e:d6:0f:b1:26:d3:42:3a:
88:80:af:60:f5:00:a9:8d:a0:00:f6:e7:80:1a:d2:
d6:8d:fa:bb:69:18:df:db:25:eb:e0:6d:6f:2b:72:
b7:fd:37:34:4c:67:2e:2c:a5:e0:84:7a:f8:a9:aa:
32:dd:87:3b:5e:6f:98:c1:b2:12:e8:75:98:74:48:
58:a5:fb:8f:29:74:7b:a2:b1:2d:fb:9b:13:5f:ea:
5e:82:30:36:68:1a:66:d5:93:2c:b4:54:62:ba:2e:
81:c2:36:94:44:2f:d1:7d:4d:a9:1b:06:8a:1b:21:
8b:e2:55:9f:c4:2e:d5:5b:0f:2a:11:f0:f5:6c:a8:
07:b5:4c:e0:4c:ff:53:5a:93:84:5f:df:05:4a:96:
93:8d:da:65:2f:f7:cb:af:96:60:64:6f:43:34:4c:
85:01:1c:f0:c0:b6:1f:24:f2:5a:d3:ea:c6:15:71:
71:51:84:b5:2d:1e:ee:96:21:ed:a3:12:0f:36:f5:
30:7c:da:7c:8f:87:4b:04:f6:b4:89:32:75:ee:48:
45:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:D3:3C:DE:57:DA:09:C7:D9:33:77:1E:EA:14:25:94:07:6F:9A:23
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4f9d4c-1946-4af9-8c22-419753d3f88d/1/5tM83lfaCcfZM3ce6hQllAdvmiM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.220.0/22
Signature Algorithm: sha256WithRSAEncryption
65:7e:ad:94:d4:93:72:00:01:5d:21:d0:bb:a4:d7:aa:27:7a:
f9:3e:99:65:c6:3d:98:1f:03:dd:42:d3:71:7b:2e:23:02:f8:
ea:bd:35:d2:a2:f9:a7:d5:ce:52:4a:46:1d:c2:f3:d5:fd:a6:
c4:6a:c9:d2:21:c5:d1:87:0c:ae:7b:6e:b6:80:90:11:9c:44:
c9:bd:63:50:61:67:d6:e4:6a:a2:44:3d:91:59:9b:83:7c:e1:
a9:85:e4:4c:a5:f2:c7:48:61:80:0e:68:a1:6e:ce:d8:3c:66:
1e:ba:8b:3b:f0:bb:93:92:23:30:f5:d9:dd:a0:69:8a:93:12:
fc:7a:39:f1:33:dd:b4:83:35:f1:0f:a1:14:2b:83:2e:bb:3d:
e5:3b:8f:35:47:e6:fc:d9:fc:7a:fb:eb:b0:7f:ed:51:cf:0d:
c1:c2:ff:9c:24:11:6f:0a:c4:6a:5c:ad:81:50:62:da:aa:93:
c2:d0:c6:9b:0f:8a:a2:1e:6e:a6:46:13:48:62:c6:a3:52:70:
a1:48:cc:c5:9e:fe:fc:0c:55:85:69:82:85:00:3b:a8:21:3e:
29:79:d1:f5:5f:c9:bd:43:dd:09:1f:1e:0b:57:03:c1:12:26:
c6:62:ae:df:56:39:87:5b:36:17:5b:d2:d0:a1:44:b3:8b:1c:
1f:bb:6d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:33 2025 by rpki-client on console.sobornost.net