Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8NXf3eTWeccRzOBu30A2yk5cwQM.cer
File: 8NXf3eTWeccRzOBu30A2yk5cwQM.cer (raw, json)
Hash identifier: XtoLYx3nvXeSHkqt4/uqqBFbyXuEAZFUBM45vRl8UPk=
Subject key identifier: F0:D5:DF:DD:E4:D6:79:C7:11:CC:E0:6E:DF:40:36:CA:4E:5C:C1:03
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228E194E8EE88C7E71270C629C91A14D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:45 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 41096
IP: 176.98.64.0/19
IP: 195.189.104.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:19:4e:8e:e8:8c:7e:71:27:0c:62:9c:91:a1:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f0d5dfdde4d679c711cce06edf4036ca4e5cc103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:85:72:db:f9:b5:f9:65:92:a9:c9:7c:8d:71:
2a:f0:16:38:9e:e2:d9:20:c6:eb:4f:be:3e:7c:1c:
6e:35:ff:cc:b7:e0:45:7f:76:3f:65:7e:13:b2:3a:
1e:33:3f:f7:85:64:16:64:f5:b4:90:a0:8c:a2:65:
1f:50:a1:7a:eb:5d:03:d9:ef:63:50:76:71:42:aa:
d3:11:63:dc:aa:b0:a8:ca:89:72:96:a8:5c:ad:74:
63:74:00:00:5c:82:9a:27:7e:a0:9a:bb:68:79:f0:
9a:0c:82:77:6b:00:4e:c4:80:72:bd:d7:7f:41:f2:
be:62:7f:79:b4:ed:5a:66:62:ae:df:75:76:25:d9:
9e:bb:07:67:28:f3:9b:ed:07:b7:11:df:25:54:ea:
94:50:4f:7f:ba:5d:00:cc:f1:01:fd:ba:b4:2b:09:
4c:2d:aa:12:42:3c:48:5e:b9:0c:98:f2:57:87:bb:
0f:62:75:b3:e1:12:7a:7c:a8:38:7e:ad:49:41:ba:
06:6c:17:ab:54:2c:2b:74:02:62:b7:76:8c:02:85:
bb:54:b2:f3:ee:2d:f3:96:a8:94:4b:f5:14:ae:66:
af:7b:f3:b8:36:3b:52:b0:6f:dc:05:27:c0:79:67:
16:cb:42:f7:e0:49:f5:f1:44:03:b2:6e:99:b3:ed:
15:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:D5:DF:DD:E4:D6:79:C7:11:CC:E0:6E:DF:40:36:CA:4E:5C:C1:03
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.98.64.0/19
195.189.104.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
41096
Signature Algorithm: sha256WithRSAEncryption
ae:09:99:99:3c:5d:77:d9:85:ee:15:cc:91:d8:ad:c9:82:65:
7b:c8:bd:9e:e9:5d:14:7e:70:3b:f5:f3:9d:42:1a:0a:af:28:
a6:70:d0:5e:53:38:e2:ee:98:e2:63:08:57:3e:eb:ed:95:dc:
59:53:a4:e1:9d:60:e1:ce:ab:ee:35:fe:62:53:3f:27:4a:e2:
55:fb:b3:ea:fe:56:77:83:a4:d5:59:5e:27:68:e0:7e:26:a4:
47:34:c7:92:72:79:19:63:a3:cf:a4:f5:cb:61:69:26:19:88:
5f:84:59:42:ba:f7:10:b6:48:b4:a9:f6:0d:e7:47:fd:25:c4:
e7:d4:41:47:d1:c4:9f:d8:0e:78:88:25:93:69:9d:b6:66:e4:
60:51:44:cf:e5:c6:65:89:2e:0c:58:0e:d0:08:fb:fd:23:e8:
d3:cf:e6:44:5d:06:8a:fa:74:6d:4b:6f:03:1d:c8:d8:07:87:
2a:16:e5:b3:93:17:18:43:42:32:32:6f:62:03:63:62:dd:9a:
7d:cd:64:0e:3a:df:6b:07:d2:ee:b7:49:f7:b6:a0:70:5e:71:
68:0c:b4:e8:79:19:cf:74:c1:4e:7e:d9:e1:48:b5:2b:56:9e:
99:c3:b6:d5:1f:03:9a:60:a6:00:1d:75:48:00:6b:40:53:ee:
55:2f:21:6c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:15 2025 by rpki-client on console.sobornost.net