Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.cer
File: 8NAwmLg1b__FpZfpxFuE7fh8-ZQ.cer (raw, json)
Hash identifier: wVwQMnXYj33iR0qOnd31Wjc5Pltxiwqu0vaZZ1KJjQg=
Subject key identifier: F0:D0:30:98:B8:35:6F:FF:C5:A5:97:E9:C4:5B:84:ED:F8:7C:F9:94
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266BD4B6294B4B37F64C867445A4713F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:49:48 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.221.116.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:d4:b6:29:4b:4b:37:f6:4c:86:74:45:a4:71:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:49:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f0d03098b8356fffc5a597e9c45b84edf87cf994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:09:cb:bb:7c:3e:70:3d:45:23:b2:5c:3e:c5:
89:d4:4b:56:1b:84:7e:ef:b8:15:3c:40:cd:be:c9:
70:be:f1:1a:6d:02:09:62:45:c6:85:9b:61:24:d5:
c5:3d:4a:a3:c8:0d:83:ab:5e:52:74:25:c7:58:d8:
3b:86:a8:40:d3:ce:fa:e8:43:56:52:5c:84:73:3c:
2a:b2:55:9b:19:a3:45:05:dd:b5:83:b5:89:83:71:
ae:fd:10:b4:df:2d:33:51:94:a2:8b:eb:8a:91:53:
5f:44:0d:64:d2:3d:01:bc:c3:66:65:ae:33:9c:ad:
0f:a3:bc:ba:a3:a5:ce:b7:dc:36:28:24:98:5e:0a:
8f:27:cb:ea:97:2d:f3:b1:e0:de:03:16:36:ca:c0:
a1:24:1c:a4:51:26:e5:85:1a:5e:27:5a:f6:a6:47:
a8:29:93:91:3d:e9:64:76:c1:2d:81:a5:0b:93:58:
4c:30:20:91:d6:29:0e:d0:1b:35:2c:b1:d8:c0:49:
d6:72:96:15:5e:a9:fc:40:f2:cf:5a:9e:29:c9:5e:
2f:d1:51:65:eb:68:ab:03:35:d0:7c:1f:56:a4:4e:
90:a8:00:dd:3f:8f:b5:48:19:87:e8:6c:89:56:2d:
d7:ce:f2:67:b2:06:53:81:fc:3b:70:7a:08:d4:c6:
b9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:D0:30:98:B8:35:6F:FF:C5:A5:97:E9:C4:5B:84:ED:F8:7C:F9:94
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/df56ee-dd71-4ca7-98ed-327f831945fd/1/8NAwmLg1b__FpZfpxFuE7fh8-ZQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.221.116.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:c5:c4:47:98:d5:d2:50:4d:45:aa:bf:a4:7c:0f:c0:af:13:
0a:30:ba:79:a0:92:3d:f2:b3:4b:93:7f:9e:56:9e:95:f0:a2:
11:8a:12:9c:46:c3:df:79:47:ea:c0:a9:7f:4f:93:61:b7:f8:
da:32:25:d4:56:b1:f8:50:89:73:e8:67:75:3b:d7:8a:fd:e4:
4d:79:f5:91:80:58:d0:48:ea:b8:69:8c:bf:ea:f1:43:d9:d0:
f3:f5:3b:0f:04:bb:93:4a:b0:00:cd:c9:a4:27:d1:09:2c:2c:
fb:34:d4:77:14:9f:8a:ec:20:8f:16:53:e3:dd:a3:6e:47:1d:
cd:72:6b:f5:40:12:a4:8b:d7:97:a8:0e:54:db:51:02:18:1e:
7f:5d:52:ad:0b:25:42:68:4d:76:82:6d:62:65:be:29:36:b3:
74:64:26:83:97:0b:42:9a:21:7b:19:bb:5d:7d:93:f5:b4:4a:
bd:a3:d6:63:11:5d:fd:e2:5e:f6:a8:63:0b:36:be:bd:33:ee:
cb:41:c1:84:70:c1:d5:bf:ed:53:f9:48:ac:a6:a1:2a:3b:3c:
90:f8:e4:6e:2d:46:5f:13:32:d3:4d:4b:a1:71:a3:62:60:5d:
86:94:c7:73:31:eb:7c:45:5f:ab:0c:9d:55:aa:61:aa:65:c4:
df:40:49:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:15 2025 by rpki-client on console.sobornost.net