Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DY05iX3-Ia7thQlskKRzlvyknUE.cer
File: DY05iX3-Ia7thQlskKRzlvyknUE.cer (raw, json)
Hash identifier: lhZeslsZiNpYSkmyjE0shCKKzDDlOlLDzX1EPbOGIMQ=
Subject key identifier: 0D:8D:39:89:7D:FE:21:AE:ED:85:09:6C:90:A4:73:96:FC:A4:9D:41
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B1B9B909D45A84BF7739A266F44CE8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/68/508c68-a737-43a9-af10-be823109855e/1/DY05iX3-Ia7thQlskKRzlvyknUE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/68/508c68-a737-43a9-af10-be823109855e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:03 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.169.236.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:b9:b9:09:d4:5a:84:bf:77:39:a2:66:f4:4c:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d8d39897dfe21aeed85096c90a47396fca49d41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:46:51:54:bb:f0:4d:fb:cf:40:51:20:b9:c7:
df:89:09:af:64:20:55:51:d9:04:a1:98:97:8b:4e:
82:41:76:f5:e7:4f:cb:94:69:8d:55:68:05:99:16:
11:df:53:0c:ed:bb:0d:58:80:6b:ff:2c:ad:4c:5d:
82:c7:01:e2:7d:b7:69:2d:7e:3d:f1:03:64:ed:15:
96:5e:b9:2a:15:e3:a0:e7:c7:10:0f:4e:1f:f2:2e:
01:4f:19:f5:2e:77:6a:43:99:61:31:67:0a:eb:f0:
b8:ba:c3:54:bd:ef:72:7c:9d:88:2c:b2:e5:5a:ad:
34:07:5b:e2:9c:e0:44:31:4f:21:2a:b2:a5:1f:7d:
bb:c0:94:99:1d:eb:4c:99:58:30:fb:06:9d:47:0c:
95:65:ce:b6:78:a2:fa:88:64:d9:27:3b:ab:e0:d1:
00:f1:2d:76:d4:99:a0:13:7a:6e:ba:5a:ce:12:65:
ac:23:7b:a0:fd:05:47:52:50:a3:8f:3c:21:3f:3c:
2c:7c:5c:0b:45:93:18:ef:4e:13:6a:fe:03:71:76:
d5:e7:69:09:54:25:77:22:52:20:8b:d9:ff:06:c5:
27:16:ed:02:2b:95:73:f9:c4:0e:05:d6:a3:9c:e7:
30:4b:00:04:78:cb:1b:5a:c3:d5:8a:44:9b:03:d1:
bc:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:8D:39:89:7D:FE:21:AE:ED:85:09:6C:90:A4:73:96:FC:A4:9D:41
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/508c68-a737-43a9-af10-be823109855e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/508c68-a737-43a9-af10-be823109855e/1/DY05iX3-Ia7thQlskKRzlvyknUE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.169.236.0/23
Signature Algorithm: sha256WithRSAEncryption
73:71:9e:01:06:ac:79:47:ea:97:af:6a:b8:0f:80:ec:65:a6:
b9:11:03:73:e2:05:35:61:34:ca:61:9d:b5:37:1e:bf:ca:07:
d6:14:a1:11:87:56:e6:21:5a:10:b6:a9:bf:57:5f:be:a2:60:
cf:70:a4:23:ac:01:7b:fc:0f:1e:08:3c:6b:03:b4:91:b0:5f:
e3:f5:de:b2:86:a7:ff:61:a6:b5:80:2d:c1:42:67:6c:5b:d1:
b3:b7:23:f6:eb:e1:08:e5:3d:bf:43:88:66:e1:2a:e2:66:3b:
9f:73:b2:87:72:0f:ad:53:d6:fc:14:09:a1:77:68:52:77:d9:
97:3f:ca:ea:92:91:f4:41:fa:e1:b4:2a:2d:ce:81:92:4b:62:
8e:b7:34:c6:5b:1f:7a:8a:bf:c4:08:57:01:bd:16:d7:9f:c9:
53:97:ad:1e:59:c5:ee:bd:8e:69:af:dd:46:c4:27:0a:db:1c:
bc:30:7c:cd:3b:f5:a9:91:f9:02:60:9b:b2:f8:a7:50:4e:56:
98:69:1f:68:b9:3d:bf:f8:b6:fa:2a:0e:42:3c:f7:17:c3:e4:
32:a6:07:a0:08:59:e2:81:9d:0f:82:5f:cb:11:19:7a:b0:b7:
a3:d0:c2:b4:21:ae:7e:ce:e8:75:98:88:2e:11:d9:45:03:f0:
e0:36:de:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:05 2025 by rpki-client on console.sobornost.net