Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DTIXImHJUJ5XNSE3ugGSqEhrb90.cer
File: DTIXImHJUJ5XNSE3ugGSqEhrb90.cer (raw, json)
Hash identifier: EMnoCxn8NtwEGlDVU1wFRBQf4u3i5f7pWaiBWKLPJJA=
Subject key identifier: 0D:32:17:22:61:C9:50:9E:57:35:21:37:BA:01:92:A8:48:6B:6F:DD
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA7A063A51129D879655F9FB7A3C3D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9b/58e8f8-1b27-41a4-92ab-fe8484f7079d/1/DTIXImHJUJ5XNSE3ugGSqEhrb90.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9b/58e8f8-1b27-41a4-92ab-fe8484f7079d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:48:16 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.216.104.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:7a:06:3a:51:12:9d:87:96:55:f9:fb:7a:3c:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d32172261c9509e57352137ba0192a8486b6fdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1a:04:49:56:15:53:d5:65:e7:26:1c:8a:14:
f0:b5:13:98:d8:5d:7a:ef:cc:97:59:80:46:3e:d6:
72:3b:90:b9:ee:02:98:17:c3:78:ff:c1:13:21:a8:
bb:60:1f:0f:6e:b9:68:c1:56:a6:a4:a1:c4:f6:23:
6d:b4:31:a0:41:3e:8e:b6:fa:91:d5:67:b7:9c:ea:
2c:09:c1:53:87:0d:f4:56:85:1a:e9:f2:13:10:b7:
14:98:19:1c:39:23:2f:f9:9d:1a:33:8f:67:01:b7:
f3:c8:be:f0:d3:97:55:49:0b:fa:be:a1:3c:52:07:
23:e8:22:bb:43:66:05:5e:5e:4f:70:d2:3d:d3:9b:
f6:1d:49:95:69:86:53:88:05:5e:48:3d:7c:4e:3b:
9d:a7:6f:66:13:c5:c4:7c:2e:16:25:c7:ac:3f:3b:
b2:75:91:a7:64:55:b4:49:af:3b:c4:21:aa:9a:72:
81:81:67:a7:e8:01:ff:db:f1:3d:54:3d:e2:fb:5b:
ee:b8:d7:da:d6:01:3b:7f:bc:35:08:76:17:c3:70:
56:8c:fe:be:cf:ee:c9:41:d6:15:2f:27:cf:c6:3f:
20:93:bc:e8:95:0b:56:bc:1e:d7:a2:62:a3:68:1c:
16:c2:c3:1a:28:32:89:6f:80:c8:32:f4:b2:dc:40:
12:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:32:17:22:61:C9:50:9E:57:35:21:37:BA:01:92:A8:48:6B:6F:DD
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/58e8f8-1b27-41a4-92ab-fe8484f7079d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/58e8f8-1b27-41a4-92ab-fe8484f7079d/1/DTIXImHJUJ5XNSE3ugGSqEhrb90.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.104.0/24
Signature Algorithm: sha256WithRSAEncryption
33:ba:10:f7:b9:ce:c9:71:27:cf:11:12:3a:55:84:c1:fa:0e:
cf:d4:05:90:72:f4:20:22:91:18:88:b0:f2:a4:4a:09:5f:f5:
11:25:1a:d6:ae:a9:1f:fc:4b:78:08:b9:c1:22:af:02:b0:9e:
10:76:f1:e7:28:41:d7:f0:7f:1d:98:79:1f:5b:3c:09:fb:70:
04:d9:94:b7:48:fb:40:2a:41:43:4b:c3:48:c6:e6:d9:ed:36:
c5:9c:ed:9b:a0:a5:be:98:f6:81:44:2f:e5:77:94:88:f5:d9:
3e:97:a1:98:21:ba:6e:3e:ff:95:95:cc:a3:66:90:f9:91:4c:
d0:3e:c6:23:9c:6c:20:ad:95:31:ad:68:60:f9:01:86:a4:a5:
06:db:f3:5f:d1:c8:df:bd:4f:c2:fd:47:d0:3f:cc:67:65:fd:
ca:1e:35:7b:df:bc:d4:e6:16:1d:c7:07:c3:f3:29:1d:d5:9b:
fe:4e:f3:13:79:a8:44:df:a5:30:bc:9b:6e:e4:79:30:0b:c4:
42:bf:fb:3d:a7:83:b6:23:36:d1:2e:8b:c9:8e:84:77:b9:e1:
c0:83:d7:df:3f:31:0d:11:5d:86:d2:fd:db:9c:c3:8e:60:9d:
c1:67:a8:be:f0:d5:ad:9e:45:04:27:a0:5d:cf:69:fe:98:05:
6b:d5:95:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:04 2025 by rpki-client on console.sobornost.net