Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AmEbTqouCzf3LMCKySlhmB6rsh8.cer
File: AmEbTqouCzf3LMCKySlhmB6rsh8.cer (raw, json)
Hash identifier: h9i7ERlYRifjaC7BX6U+Y29j7J1b8TW8DtGjRRlzy5Q=
Subject key identifier: 02:61:1B:4E:AA:2E:0B:37:F7:2C:C0:8A:C9:29:61:98:1E:AB:B2:1F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194252190CD3265EB7B3CCC77D55073E736
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/AmEbTqouCzf3LMCKySlhmB6rsh8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:49:04 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.43.109.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:90:cd:32:65:eb:7b:3c:cc:77:d5:50:73:e7:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=02611b4eaa2e0b37f72cc08ac92961981eabb21f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2a:83:b2:9b:d5:91:db:a4:30:03:85:b0:99:
5a:4e:39:a7:ca:b9:95:27:8b:72:a3:d5:90:38:3e:
b7:97:76:7b:5f:df:60:0a:64:e7:45:da:d2:2c:9c:
3f:36:74:1c:e3:b7:3d:d5:bd:ff:21:d1:bc:ec:4f:
90:10:71:d3:91:33:74:b9:65:31:1d:88:ee:b9:45:
82:77:42:67:d5:c6:d0:b5:f6:3b:34:db:79:19:1b:
e5:c7:f8:53:0f:d9:44:a5:de:de:a6:65:9c:55:a0:
8f:3f:63:56:73:25:36:4e:82:64:63:1d:fd:2a:d8:
59:3f:28:11:82:27:aa:b7:a5:7d:5c:f7:de:fb:e7:
ea:d9:52:6f:95:8d:77:49:8e:3d:ca:f6:af:eb:02:
e5:24:32:25:00:88:d5:61:b3:c5:32:21:eb:99:a9:
6d:f4:d0:98:80:0a:f4:7a:41:c3:0e:30:b1:37:ff:
9b:2a:7a:84:ef:42:cc:84:bb:5c:2d:eb:5f:78:0c:
83:2e:a0:a4:d0:14:87:ae:cd:16:03:39:ae:0b:b8:
65:7c:6b:78:87:4a:11:b5:17:c1:2a:4c:8c:aa:75:
55:45:20:9c:f2:0a:9d:69:57:3c:9b:d0:79:bf:60:
1f:c1:7e:73:ae:3d:11:08:73:ec:fe:16:56:fb:2a:
1a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:61:1B:4E:AA:2E:0B:37:F7:2C:C0:8A:C9:29:61:98:1E:AB:B2:1F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/646438-6da2-4c05-9fcd-12c4bd8058aa/1/AmEbTqouCzf3LMCKySlhmB6rsh8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.109.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:68:ac:db:ec:e0:48:bf:19:9a:2a:2d:22:79:5c:aa:6e:5b:
31:67:e5:34:55:de:b4:9d:af:7f:90:a8:f3:50:a5:6f:ae:28:
87:5c:d0:e6:d0:fd:3e:ae:ec:5c:89:09:48:49:0a:ef:38:44:
92:33:36:ab:94:e4:8e:0f:8d:92:46:5a:d7:c1:1a:57:35:b5:
fa:c4:c0:4e:b3:65:35:13:4e:e9:8a:60:90:ba:c1:3d:e7:49:
e9:26:26:17:c3:e4:28:9a:0e:73:66:a0:24:4c:b4:72:34:b2:
6f:9a:12:f6:13:45:05:ca:2f:eb:7f:8f:5e:bc:fd:ec:0f:ea:
b0:5a:50:12:92:80:52:5d:e0:ed:49:f2:0d:1e:3d:71:f9:b2:
a4:89:c9:37:8f:b7:4f:22:64:b7:17:73:64:5d:5b:16:56:f7:
bf:14:2b:02:79:fe:ed:ca:bc:a9:e0:77:38:b9:e7:ec:2d:25:
b4:21:08:34:a2:5e:af:b1:66:d2:b4:1a:d8:43:d3:41:68:6a:
ec:ed:83:fd:25:27:0f:55:83:a7:f3:7d:da:24:07:bd:3b:c3:
93:2b:87:9a:a9:3d:dd:d0:7a:96:3a:be:c3:a6:d4:8d:d2:21:
fc:db:3d:ad:34:be:12:bc:41:73:9b:1e:c0:7b:62:9b:bc:67:
c5:cd:8d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:59 2025 by rpki-client on console.sobornost.net