Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8j79S9kntM6jMSCiG09zFNy-oXk.cer
File: 8j79S9kntM6jMSCiG09zFNy-oXk.cer (raw, json)
Hash identifier: YqP36m0z9pg7Liw7s/qh8BZHZ5YZky70eRCVClxL+xg=
Subject key identifier: F2:3E:FD:4B:D9:27:B4:CE:A3:31:20:A2:1B:4F:73:14:DC:BE:A1:79
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FB4BDA3B511F4FA327F25D46DDD8C3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:48:01 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.28.190.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:4b:da:3b:51:1f:4f:a3:27:f2:5d:46:dd:d8:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f23efd4bd927b4cea33120a21b4f7314dcbea179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6f:8c:cc:18:99:03:d4:a6:87:76:3f:63:6c:
fa:9f:2d:30:b8:6b:0f:b9:ae:59:4f:63:46:a6:40:
92:de:17:b6:d7:f1:22:8f:59:33:e9:45:51:41:69:
5f:d4:9e:ff:80:f4:53:d8:cc:71:3f:8f:c8:df:92:
38:0d:0d:4a:d1:1e:44:80:07:40:df:62:5d:75:98:
1c:42:06:54:64:44:67:22:91:a1:8a:15:f0:68:f0:
d4:bb:0f:73:ba:7e:73:f2:98:d9:9f:1b:56:13:b4:
07:a7:95:a7:2e:2a:a9:44:13:cd:29:52:3d:89:24:
ce:8f:ec:61:88:7a:2a:de:82:93:c8:1d:fe:93:0b:
ce:9e:15:da:af:bd:f2:6d:87:f9:35:4f:59:21:32:
b3:40:6a:fc:6f:f5:bf:f7:1c:69:5c:fa:2b:37:58:
70:78:c8:4e:f6:c1:7a:e7:57:f5:74:8a:c2:9a:e9:
9f:a9:aa:be:09:27:0b:fc:39:61:82:77:c1:83:1c:
83:05:f8:59:cc:73:83:6a:c1:75:62:03:66:50:61:
bb:cc:f5:85:e1:80:0b:0b:40:62:c0:5e:f8:2b:ef:
46:66:68:4d:de:2a:b5:ee:a4:43:67:76:1a:88:bd:
d2:9f:dd:f0:2e:25:a5:b6:88:53:1d:b2:d3:c4:93:
79:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:3E:FD:4B:D9:27:B4:CE:A3:31:20:A2:1B:4F:73:14:DC:BE:A1:79
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/770494-9f13-4a16-b2e2-d2c8a65aacfe/1/8j79S9kntM6jMSCiG09zFNy-oXk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.28.190.0/24
Signature Algorithm: sha256WithRSAEncryption
13:01:52:df:46:06:f4:3b:73:98:91:76:27:0a:86:7e:c7:14:
cb:83:be:30:1b:a2:30:58:ef:e2:2b:9c:eb:a1:9a:05:03:41:
92:1c:04:85:77:e1:92:da:0c:21:02:bd:c7:6e:d5:16:2c:a9:
e1:cb:2a:17:88:ed:6a:40:a1:29:e2:c6:02:46:de:01:95:6f:
68:33:8f:2b:ed:a4:70:29:76:2f:78:5a:87:3f:4c:fe:12:ee:
98:f0:b6:e9:5e:aa:91:55:dc:02:3b:d4:c3:bd:49:99:1b:c1:
59:05:ee:96:b5:6f:41:21:36:f7:ad:f9:10:36:66:34:68:53:
eb:61:29:d4:5c:3f:4f:d4:70:1f:f7:66:2c:da:3d:20:3b:1b:
db:9d:ae:cf:ee:c0:7a:cc:d2:58:b8:70:21:6f:5c:48:f8:7c:
61:d4:3d:3a:0f:88:fc:63:2b:ef:f0:3e:2b:ff:6a:8e:4a:bb:
00:a2:a3:15:6f:de:9a:81:23:8f:6c:cf:92:8e:34:2a:bc:ae:
cd:44:82:3a:09:4b:03:7e:b5:a0:8d:dd:43:ca:69:47:7e:5b:
ee:1d:f0:7f:5d:eb:6e:cb:1b:5c:11:67:7d:9c:37:cd:c1:ae:
2f:f9:59:0c:36:a9:e7:7a:5d:c3:ef:2d:a3:0d:0f:bc:13:6a:
f5:fb:9d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:24 2025 by rpki-client on console.sobornost.net