Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DS-BuMF_Vdzd3sVMjM6t1pXSjwc.cer
File: DS-BuMF_Vdzd3sVMjM6t1pXSjwc.cer (raw, json)
Hash identifier: wV1iJpLFbZJCBM3gyvhpG0UZhHjhfYbe+9iLoebDW4k=
Subject key identifier: 0D:2F:81:B8:C1:7F:55:DC:DD:DE:C5:4C:8C:CE:AD:D6:95:D2:8F:07
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D9C67842397B0AEC8566CA65D47598
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8d/af19a0-7cbf-4078-a987-68f2fa001fa7/1/DS-BuMF_Vdzd3sVMjM6t1pXSjwc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8d/af19a0-7cbf-4078-a987-68f2fa001fa7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:53 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.153.146.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:c6:78:42:39:7b:0a:ec:85:66:ca:65:d4:75:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d2f81b8c17f55dcdddec54c8cceadd695d28f07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:64:e2:ae:4b:a9:92:4c:04:10:d7:79:2d:e0:
71:51:e6:95:42:20:72:35:e0:a5:33:cd:23:8d:b4:
8b:07:2f:82:48:52:6a:1c:f0:d5:67:f4:a2:7c:e7:
bc:33:3e:d4:0f:88:5b:18:a3:f4:7a:d1:79:72:16:
48:87:63:72:49:9c:b9:ce:a8:8d:a3:17:5a:78:b8:
b5:9d:3c:f1:39:ef:62:cd:3c:43:fe:9e:54:ca:fb:
5e:e3:45:0f:a7:35:d5:ff:fd:aa:a9:fb:5b:5f:69:
ac:b8:8d:b8:1e:06:b5:23:65:25:d3:f2:4f:27:23:
d0:62:98:fb:c9:e7:3f:95:92:13:2b:e4:6e:e4:52:
f0:c4:6f:a6:03:c1:20:6b:40:f8:74:13:44:9a:69:
9d:ea:08:4d:f2:3c:4c:66:09:4e:ca:fc:10:f0:d5:
7c:43:6c:1e:f1:f1:54:7e:c1:75:e9:4a:07:84:35:
7e:6f:15:31:1f:fd:dc:f1:01:3f:48:3c:fd:76:46:
ba:11:1d:d2:ad:8f:a4:08:7f:ca:40:0b:06:54:9c:
62:4b:63:63:b1:f6:1d:9b:ab:6b:9d:e0:61:a7:e1:
31:f5:ed:b9:c7:cc:af:7d:bd:74:55:3c:64:67:d7:
80:6f:0b:53:4a:2a:39:96:40:6e:5f:14:e0:c9:bf:
d1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:2F:81:B8:C1:7F:55:DC:DD:DE:C5:4C:8C:CE:AD:D6:95:D2:8F:07
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/af19a0-7cbf-4078-a987-68f2fa001fa7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/af19a0-7cbf-4078-a987-68f2fa001fa7/1/DS-BuMF_Vdzd3sVMjM6t1pXSjwc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.153.146.0/24
Signature Algorithm: sha256WithRSAEncryption
44:f4:12:d0:39:b8:65:f4:bf:18:f0:a0:59:96:43:0d:13:14:
0b:10:63:b9:90:04:ad:80:b6:c4:70:18:e9:a2:40:f6:d7:c9:
1d:a4:98:5b:a7:70:93:e4:93:98:fb:02:78:42:22:4a:b3:8a:
6e:22:44:67:72:47:00:bd:1c:88:92:c9:dc:2e:37:3c:61:c2:
6e:a2:55:72:43:e8:89:68:fe:9e:db:45:11:e9:f6:bc:d4:85:
5f:b3:ae:fb:e4:09:5e:2d:2a:d9:b6:0d:9b:f3:c0:5f:c6:f1:
81:c4:f2:b8:42:c1:1b:0f:37:eb:d4:3e:89:b0:11:88:07:ef:
ad:21:04:d9:c0:9b:a3:f8:9d:19:12:63:ac:30:d7:b5:3a:19:
e2:8a:68:53:6a:fb:af:70:7b:01:82:78:47:ba:cc:38:a0:13:
ae:bc:a5:3a:30:ba:1e:2e:29:9e:da:d6:96:d7:87:ff:ba:95:
5f:e5:82:b9:d3:e2:88:e2:eb:36:28:68:14:91:ec:2b:8f:88:
74:56:76:99:03:ca:3e:7f:63:fd:17:f1:2a:2c:03:fe:36:5f:
65:93:b8:27:c3:a7:af:23:6d:45:3a:77:fe:2f:37:b5:d9:26:
4e:45:f9:ad:71:3e:2f:25:05:db:bf:ec:97:54:1f:34:de:51:
0f:e9:4e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:04 2025 by rpki-client on console.sobornost.net