Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CKkhe9gwYnyz5lfAuQY8giNN28s.cer
File: CKkhe9gwYnyz5lfAuQY8giNN28s.cer (raw, json)
Hash identifier: khAzk1+i5qE6U702YJXAsUj8NiUxCqQf27j4tFBuuBA=
Subject key identifier: 08:A9:21:7B:D8:30:62:7C:B3:E6:57:C0:B9:06:3C:82:23:4D:DB:CB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA774B6FEC93803FB028C1E60A6CAF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/90/7dde44-d7b5-48da-bc68-2c5bac35c344/1/CKkhe9gwYnyz5lfAuQY8giNN28s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/90/7dde44-d7b5-48da-bc68-2c5bac35c344/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:48:15 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 77.74.112.0/21
IP: 109.69.248.0/21
IP: 185.111.144.0/22
IP: 2a02:54c0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:77:4b:6f:ec:93:80:3f:b0:28:c1:e6:0a:6c:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=08a9217bd830627cb3e657c0b9063c82234ddbcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9f:01:94:63:7b:b0:87:d8:e6:69:cb:2e:c6:
8c:36:32:45:5d:ff:43:e8:d0:ff:97:1d:5c:7f:d8:
3a:a6:e5:fc:27:e5:9c:b7:27:4f:3e:fd:e2:81:b6:
88:b7:a0:c6:42:5b:e3:55:18:0f:07:cc:97:9f:dd:
93:4f:75:a8:9a:dc:53:7b:b7:aa:f2:7b:1a:ae:5c:
6a:54:f1:e6:94:6e:c7:90:e3:fc:f6:bf:ef:6f:1e:
88:8e:5c:0f:eb:36:39:a8:4f:8b:be:d5:ef:00:c1:
28:2e:58:cf:52:1a:51:07:6c:79:ad:0b:fd:72:4a:
95:c7:1d:e8:ba:7a:eb:5d:3b:a3:ae:8e:0f:9f:4e:
b2:64:a0:ce:b3:62:9d:68:f6:99:c3:51:b6:45:95:
84:33:83:6f:b5:1d:39:4f:30:1b:1c:dd:06:c6:ce:
12:50:b3:f8:06:1c:17:ad:77:db:aa:55:2d:a9:7c:
a3:52:f8:37:76:84:8b:c5:58:7d:92:ec:ee:37:98:
2c:83:fb:a6:9a:06:28:2d:90:a1:d4:96:42:8d:2a:
51:ef:d5:37:95:f9:af:75:05:d3:ce:aa:2e:96:a4:
12:9e:1e:77:5a:07:c7:35:7f:e0:71:db:6a:45:3c:
cd:0e:ba:fb:7b:12:f2:e4:ac:ff:d5:28:69:37:e4:
02:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:A9:21:7B:D8:30:62:7C:B3:E6:57:C0:B9:06:3C:82:23:4D:DB:CB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/7dde44-d7b5-48da-bc68-2c5bac35c344/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/7dde44-d7b5-48da-bc68-2c5bac35c344/1/CKkhe9gwYnyz5lfAuQY8giNN28s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.74.112.0/21
109.69.248.0/21
185.111.144.0/22
IPv6:
2a02:54c0::/29
Signature Algorithm: sha256WithRSAEncryption
14:73:25:84:8b:4c:1a:f1:86:f7:d8:b6:07:89:af:c9:5a:66:
61:1c:90:39:1f:89:86:32:ed:99:ec:6b:4b:b3:33:3f:85:4a:
1f:80:0c:d4:ba:10:73:7d:dc:4d:8f:f1:56:20:7b:69:a2:b9:
a1:db:3d:37:c9:0a:65:d9:67:60:db:8d:de:5a:c3:b3:d5:d4:
b2:c2:2e:7b:b4:27:3c:72:52:d8:85:e2:4d:0a:0b:41:f3:22:
f1:27:83:92:56:e8:c8:b9:90:34:46:ef:b0:13:8f:98:fb:81:
48:cb:76:06:f2:b3:77:68:ac:02:2b:2e:bd:3f:da:10:1a:6d:
b9:11:21:f9:79:34:2a:bd:f5:d9:11:38:a9:91:9d:df:07:72:
c1:ff:9c:d8:79:58:6c:4a:6a:9f:ca:51:05:81:69:ef:e0:96:
e8:59:44:61:8c:ed:be:80:87:b4:b2:c5:d1:ee:8b:86:36:63:
cd:84:8b:17:57:65:0a:57:dc:ae:44:e0:13:de:34:7c:50:01:
5b:9e:83:f6:18:0c:c1:dc:07:11:05:d1:29:33:20:7e:9b:b5:
08:24:67:50:f6:86:ea:ac:1d:0b:db:1e:2b:b5:61:a9:07:73:
8e:fe:66:ec:93:a2:13:3c:f0:85:1c:72:2d:7f:26:cf:03:5c:
a4:63:88:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:02 2025 by rpki-client on console.sobornost.net