Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7-H8ahWWWTTFM5PW7RiYTGulb1Y.cer
File: 7-H8ahWWWTTFM5PW7RiYTGulb1Y.cer (raw, json)
Hash identifier: SOnGvA7GrKbpbfV2LA8A+7FL3y+7szdhCXhvvOn0L5Y=
Subject key identifier: EF:E1:FC:6A:15:96:59:34:C5:33:93:D6:ED:18:98:4C:6B:A5:6F:56
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194244577F326EA5E4F651ED8D0283FF535
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/7-H8ahWWWTTFM5PW7RiYTGulb1Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:48:40 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.6.243.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:77:f3:26:ea:5e:4f:65:1e:d8:d0:28:3f:f5:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=efe1fc6a15965934c53393d6ed18984c6ba56f56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:c3:7c:4a:75:dc:d7:40:6c:bc:b8:17:7a:a0:
12:15:1f:52:6b:fb:16:18:5d:a0:9d:ce:49:fb:d2:
14:54:98:10:85:fb:ee:ea:be:ba:aa:3a:e5:ab:69:
45:fe:ef:20:c8:e1:b2:8f:04:43:63:d6:60:d5:c5:
79:31:d9:f6:91:98:35:ee:3d:e8:94:a4:a5:70:3a:
51:d6:bd:86:12:3d:0c:53:b1:8b:e6:59:11:cf:f0:
fa:ec:86:e7:cd:5b:18:73:01:f6:d0:49:b9:f8:65:
44:4d:a1:66:83:22:a2:45:7f:3c:aa:7b:39:0e:ae:
b2:2b:c8:d9:c7:c2:24:26:9d:72:a4:25:a0:f8:bf:
3e:aa:75:0b:a6:93:a8:85:2d:27:ce:ab:a2:59:21:
6f:5b:e5:5a:59:01:5d:16:7e:56:07:d9:8d:2c:2d:
a0:67:e8:df:c5:10:f4:86:ac:f2:6e:67:ff:b0:64:
df:c2:95:fe:3f:45:c6:f9:15:34:fb:c5:b2:bd:69:
de:a3:44:f8:3e:77:ee:d2:2f:98:82:89:9d:ad:7f:
e9:b4:22:d7:b3:ed:37:5a:eb:42:18:0f:76:78:4d:
98:11:c2:e0:54:51:83:67:eb:a3:f6:11:3b:ac:25:
cf:ef:af:45:4e:95:97:ca:d2:ee:ab:97:97:46:bb:
49:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E1:FC:6A:15:96:59:34:C5:33:93:D6:ED:18:98:4C:6B:A5:6F:56
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/63b5ec-c2c9-4f68-8d47-4d19937e2f20/1/7-H8ahWWWTTFM5PW7RiYTGulb1Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.6.243.0/24
Signature Algorithm: sha256WithRSAEncryption
77:3d:98:cb:db:b6:19:d5:71:2f:34:4d:29:1a:fb:70:a6:b1:
25:6c:aa:75:d0:80:a5:9e:82:26:3b:ef:33:9b:0a:ec:31:ef:
b4:a6:40:f3:6c:3c:de:08:cb:d5:b2:8e:4f:0d:8f:2b:88:da:
dd:bb:fe:f3:e1:00:98:13:4b:6e:95:0d:33:21:6f:6d:4d:be:
b3:8e:ab:7c:cf:77:d9:61:dd:7c:17:d5:6a:7a:7d:dd:c9:8f:
60:a6:eb:3a:26:67:e5:31:89:aa:b0:cc:c7:1e:b2:e5:34:76:
25:04:06:5b:98:d2:3e:0a:4b:bd:ec:89:96:13:ba:be:72:f9:
f5:9a:ac:e7:6b:87:f6:b6:e0:94:75:2e:28:2a:b0:c2:38:ec:
df:9a:4f:47:bb:25:38:b5:e3:fa:62:90:8b:9e:e2:df:58:34:
5a:51:be:5f:2d:9b:3f:56:be:42:19:a5:f6:29:41:0f:23:e3:
3e:66:02:d0:dd:28:27:fd:9f:92:2d:f1:ee:44:4e:88:39:08:
eb:df:06:48:a9:38:a9:d5:5b:f5:55:1b:76:e1:d7:34:1b:65:
52:9e:b4:0d:5b:c7:00:1a:fc:5c:1e:1a:6a:3c:c2:21:91:1c:
b4:98:b6:ea:13:e8:2e:75:e0:b1:81:c0:36:8a:f9:a0:a5:31:
f0:a3:61:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:48 2025 by rpki-client on console.sobornost.net