Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6hnxNhI41O6MRqpBsJwyLGLIh_0.cer
File: 6hnxNhI41O6MRqpBsJwyLGLIh_0.cer (raw, json)
Hash identifier: hK+aBC7BE7FBG84/SadP6ne+m5mLmHIYb1zAAaITUEc=
Subject key identifier: EA:19:F1:36:12:38:D4:EE:8C:46:AA:41:B0:9C:32:2C:62:C8:87:FD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C3A76E7FC521BB46B6EB3391F0892
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9e/27b4aa-357c-4e25-bd2b-6c5d069e5657/1/6hnxNhI41O6MRqpBsJwyLGLIh_0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9e/27b4aa-357c-4e25-bd2b-6c5d069e5657/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:47:51 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.23.112.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:3a:76:e7:fc:52:1b:b4:6b:6e:b3:39:1f:08:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ea19f1361238d4ee8c46aa41b09c322c62c887fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7f:7a:14:e7:de:f5:ca:87:87:cb:e1:e1:15:
fe:aa:8d:8b:a9:ef:3e:14:ec:5e:dd:5e:f5:cf:70:
e3:e0:73:1c:12:d6:64:53:55:c0:d7:ab:0b:80:b3:
14:96:74:87:d0:cb:77:61:79:be:62:71:1b:26:4d:
02:50:39:f2:e8:7b:bc:b0:d3:91:87:4a:f3:5d:28:
72:78:72:75:86:cd:b3:4e:7c:ae:d5:ab:fd:a1:e1:
83:39:16:c0:1d:d2:79:15:b5:48:8e:67:06:f8:e4:
06:d0:b7:1b:a0:47:c9:34:49:80:2b:1c:aa:f9:84:
91:c7:ea:4f:6b:e5:04:ec:9a:8d:1e:15:87:82:74:
1c:58:df:bc:7a:f9:26:49:d1:f7:07:18:a7:44:01:
3c:7b:ac:f4:8a:df:19:50:91:59:af:51:19:cb:dc:
38:0b:cf:54:26:70:a3:d8:70:7b:43:c3:23:44:57:
f0:34:e9:29:b7:e6:2d:e1:2d:1f:0e:b7:98:40:71:
39:44:d2:87:d9:b2:ed:e3:39:85:7c:6a:3c:fc:e1:
d1:ed:ae:01:71:cc:b9:c6:40:6c:44:a8:95:f4:f8:
80:4e:5e:bd:c0:2b:90:0b:27:23:9f:c9:56:7a:48:
cc:66:2d:13:d0:c2:3a:3c:b0:f0:90:18:94:89:2a:
16:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:19:F1:36:12:38:D4:EE:8C:46:AA:41:B0:9C:32:2C:62:C8:87:FD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/27b4aa-357c-4e25-bd2b-6c5d069e5657/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/27b4aa-357c-4e25-bd2b-6c5d069e5657/1/6hnxNhI41O6MRqpBsJwyLGLIh_0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.23.112.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:9b:12:16:ea:b7:7a:d2:70:bd:5b:27:5f:8b:8f:da:97:ba:
90:d8:91:81:4f:82:7b:5a:cf:c4:93:ad:6b:0d:bf:b0:94:8a:
da:56:ad:cd:59:39:23:e5:fc:24:d7:3a:76:20:13:e8:a2:0b:
18:bb:b3:3a:34:66:e2:df:bc:22:9d:b6:81:f2:de:16:f2:29:
e5:ac:c5:e5:85:2f:4b:78:df:8f:0c:25:0d:39:b8:c1:4d:8b:
79:90:96:d7:e7:08:22:8b:6e:cb:23:4d:bc:17:48:62:46:c9:
0a:72:c9:ac:dd:ce:45:39:53:d5:f9:b5:21:40:8e:0b:00:f6:
14:4e:4b:30:60:53:49:83:34:86:38:14:f8:0a:3e:5f:15:d9:
4e:f2:d6:15:18:39:cd:95:01:e1:9e:58:ad:42:bd:b8:fd:fa:
7b:18:87:71:2b:13:0b:02:e5:7c:9b:56:19:2c:0e:d4:ca:0c:
76:32:0d:ac:7b:cf:7d:a9:96:a6:f0:de:08:f4:3f:fe:b4:07:
79:ff:81:05:d9:f8:05:9c:cf:94:97:cf:a6:07:29:7f:4c:c1:
1c:11:11:3b:11:e3:3b:2f:ee:37:05:7d:7c:ea:f4:18:5e:c0:
df:e3:3a:b6:32:b2:9c:5a:b7:28:2b:7c:61:72:93:3f:49:2c:
7c:f5:fa:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:48 2025 by rpki-client on console.sobornost.net