Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6TjNfs8jrBxJYlRuG89eCDrSKaU.cer
File: 6TjNfs8jrBxJYlRuG89eCDrSKaU.cer (raw, json)
Hash identifier: NjjEXF3FZgVDh6J5+Z89eR5HiiB91S3adkBL05jQFIc=
Subject key identifier: E9:38:CD:7E:CF:23:AC:1C:49:62:54:6E:1B:CF:5E:08:3A:D2:29:A5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C85FFC79D32E77C07C47695E2E8BF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:48:10 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.22.64.0/20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:85:ff:c7:9d:32:e7:7c:07:c4:76:95:e2:e8:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e938cd7ecf23ac1c4962546e1bcf5e083ad229a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:05:25:4a:ae:92:3d:15:1a:9a:9f:42:1d:8c:
c3:61:40:db:1f:2c:e6:c5:5e:4b:c9:0b:55:1d:d4:
17:e4:fe:5f:2b:68:96:5b:5b:5c:64:b7:0b:62:f8:
7c:c1:47:0e:c2:dc:be:39:f9:07:a6:2f:38:cb:49:
da:e9:17:64:3c:65:e3:00:76:64:e9:cf:93:26:25:
e0:56:f1:22:ea:e5:62:d5:58:9c:0a:6a:96:3e:5b:
8c:20:27:34:f1:9a:70:46:75:c2:9e:8b:e2:2c:fa:
83:78:14:34:53:b2:d5:9d:98:83:8e:b5:cb:03:e6:
20:ee:6b:ed:f0:a3:bd:69:f5:6e:47:9f:a2:86:59:
87:4b:7a:80:b1:73:2f:c3:2f:df:0a:e9:53:bb:18:
a9:09:2a:6f:ee:85:ad:72:59:24:68:9b:be:9b:48:
0e:75:02:f3:d6:cf:a0:a5:9f:2b:13:1d:a5:2f:72:
86:f1:23:78:3e:a6:3c:3c:38:76:1b:fe:41:a0:c7:
9e:ba:7b:d4:71:50:34:9a:c4:d2:16:70:05:c9:62:
4d:19:3a:92:0d:5a:1b:c8:9a:ba:b6:96:4d:40:e6:
dd:e9:78:40:20:6d:ce:9c:de:85:e4:d3:de:7e:7c:
59:8f:96:a3:de:5e:ed:39:db:71:ae:0e:93:71:d1:
6f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:38:CD:7E:CF:23:AC:1C:49:62:54:6E:1B:CF:5E:08:3A:D2:29:A5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/761bf5-037e-4807-88c0-feee86c6b600/1/6TjNfs8jrBxJYlRuG89eCDrSKaU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.64.0/20
Signature Algorithm: sha256WithRSAEncryption
94:0e:9d:d5:ab:7c:d5:48:96:d6:2d:7a:0d:8d:36:6c:90:09:
11:89:93:07:e5:9b:7a:c1:de:20:13:43:45:42:8b:9e:65:a8:
ad:14:ef:de:a4:d6:6b:f8:2e:ca:c6:33:b9:86:fd:c3:4c:43:
28:64:80:f2:93:9a:8e:ed:fb:f0:4f:1e:46:60:41:7b:ca:33:
d4:7b:cd:86:80:24:a6:02:f1:17:dd:e0:2f:7d:de:80:43:a0:
b8:2f:4c:69:ad:d7:d2:b8:47:60:6e:aa:fa:18:7a:4c:d7:83:
43:72:0d:ed:98:70:8d:0c:dc:bf:45:7a:c1:f8:7b:b8:6a:d8:
99:c3:0c:6d:fe:06:05:f3:e5:5a:00:ce:d8:c5:2d:2a:f0:c2:
79:62:9b:c6:b9:86:68:8e:cc:f7:34:ec:13:c5:00:88:6a:0a:
52:db:51:d9:c9:6a:d1:02:31:34:cc:46:6a:64:3a:4e:14:89:
bf:d3:97:5b:ec:06:a1:09:f9:3e:c7:42:30:1d:89:41:b0:26:
4f:31:09:e4:69:fd:dc:24:2c:50:a5:08:06:73:9e:bc:26:8d:
d7:db:46:88:63:07:37:7e:01:34:7a:53:21:46:20:37:63:23:
6a:05:6c:ab:6e:8c:fb:17:1e:a6:96:64:ca:f2:4f:bb:b3:5c:
32:c9:e3:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:44 2025 by rpki-client on console.sobornost.net