Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DgXmzqSzk0XOKQLJeh26vLRtKjs.cer
File: DgXmzqSzk0XOKQLJeh26vLRtKjs.cer (raw, json)
Hash identifier: mUg100yIYAOPK/y/xXK4eKc/eg2UdywDd0Flu37Wtac=
Subject key identifier: 0E:05:E6:CE:A4:B3:93:45:CE:29:02:C9:7A:1D:BA:BC:B4:6D:2A:3B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266AE069E85E0A3BF75EC9E6B1147D82
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:48:46 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.199.75.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:e0:69:e8:5e:0a:3b:f7:5e:c9:e6:b1:14:7d:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e05e6cea4b39345ce2902c97a1dbabcb46d2a3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f5:cd:62:a4:79:e4:4f:8a:c9:64:e5:26:74:
9d:01:13:10:d8:f8:82:17:e5:97:e5:cd:7e:d4:9f:
4c:ef:3b:8c:e5:8d:2a:41:f4:17:43:ad:01:ee:68:
a3:f5:da:1b:28:7b:a3:6a:36:a9:ee:29:29:3b:4e:
1e:09:16:c8:fa:ce:02:6b:bc:7d:c3:a4:08:0b:2a:
d0:ed:98:0a:b8:26:73:c2:ee:73:10:43:2e:56:a9:
ab:40:3b:eb:49:00:51:f7:07:2b:1c:22:6d:58:2f:
b1:15:93:ee:b7:0d:5e:61:2f:32:fa:e1:f6:eb:dd:
ec:f0:bd:73:8f:ee:69:a3:12:9f:cf:6a:8e:2c:28:
f6:6b:a5:bc:ff:b7:5d:f1:c4:b1:6c:c8:bd:11:39:
16:1a:6a:6e:17:7f:1c:fb:29:79:b1:ce:fc:18:06:
c8:84:9b:ee:8a:b2:e0:f9:d3:0a:ca:df:85:75:94:
3f:ed:c1:2d:d6:69:9f:a5:ea:63:45:d1:a6:93:b5:
cb:16:6f:58:1c:24:93:29:5a:a9:fc:8a:8f:18:17:
ca:d2:9a:57:bc:e3:fa:cd:11:04:f5:65:78:03:ed:
76:13:96:a8:c6:a5:31:72:6b:88:e7:ba:0e:18:35:
9f:30:9e:81:26:e3:0d:65:12:53:27:64:a2:83:ae:
a7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:05:E6:CE:A4:B3:93:45:CE:29:02:C9:7A:1D:BA:BC:B4:6D:2A:3B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/36d70c-58f0-45bb-a8f1-77eeab28be26/1/DgXmzqSzk0XOKQLJeh26vLRtKjs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.75.0/24
Signature Algorithm: sha256WithRSAEncryption
00:3e:25:97:03:7f:77:bc:34:a8:5f:b4:e7:89:0b:66:c7:4c:
c2:a5:18:2b:ae:2e:44:24:e0:5c:db:c3:69:75:77:55:24:8d:
6a:1a:f5:86:77:53:9a:a3:9d:88:36:6d:be:11:55:63:d9:b8:
66:80:a5:af:cf:f9:25:9d:45:2d:cc:c2:27:8d:01:7c:68:3d:
a3:38:8e:a0:ce:b8:82:27:73:6e:eb:15:45:ee:e8:9e:23:71:
1d:26:5f:a0:a5:c4:b1:2d:68:38:c9:12:7f:12:db:d7:7c:ef:
9c:41:5d:17:cd:22:71:dc:ee:41:59:bf:a1:5d:e2:ea:c9:e4:
6e:aa:ae:7c:5f:55:b0:15:a5:11:7b:55:64:f6:4b:d0:a3:6c:
55:e5:01:06:25:96:ec:57:4d:4a:b9:a3:d2:8b:f4:0d:94:3f:
4f:97:a7:44:96:1f:e1:9d:37:6d:2f:fc:f7:45:89:54:97:cd:
e4:70:18:fb:86:07:dc:5d:a8:9a:c8:5f:22:3e:77:c3:71:66:
68:a3:3f:29:c5:ba:b2:3d:e0:df:82:16:7a:54:dc:44:d3:2c:
a1:2a:68:44:d1:5c:64:00:fd:41:41:17:b2:c7:f3:92:18:69:
fc:94:ed:57:d2:32:17:94:96:06:76:1f:78:67:14:83:d3:1f:
ea:48:e2:e4
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQmauBp6F4KO/deyeaxFH2CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAyMDk0ODQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTA1ZTZjZWE0YjM5MzQ1Y2UyOTAyYzk3YTFkYmFiY2I0NmQyYTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvXNYqR55E+KyWTlJnSdARMQ2PiC
F+WX5c1+1J9M7zuM5Y0qQfQXQ60B7mij9dobKHujajap7ikpO04eCRbI+s4Ca7x9
w6QICyrQ7ZgKuCZzwu5zEEMuVqmrQDvrSQBR9wcrHCJtWC+xFZPutw1eYS8y+uH2
693s8L1zj+5poxKfz2qOLCj2a6W8/7dd8cSxbMi9ETkWGmpuF38c+yl5sc78GAbI
hJvuirLg+dMKyt+FdZQ/7cEt1mmfpepjRdGmk7XLFm9YHCSTKVqp/IqPGBfK0ppX
vOP6zREE9WV4A+12E5aoxqUxcmuI57oOGDWfMJ6BJuMNZRJTJ2Sig66nrwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFA4F5s6ks5NFzikCyXodury0bSo7MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2U2LzM2ZDcw
Yy01OGYwLTQ1YmItYThmMS03N2VlYWIyOGJlMjYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTYvMzZkNzBj
LTU4ZjAtNDViYi1hOGYxLTc3ZWVhYjI4YmUyNi8xL0RnWG16cVN6azBYT0tRTEpl
aDI2dkxSdEtqcy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAW8dLMA0GCSqGSIb3DQEBCwUAA4IBAQAAPiWX
A393vDSoX7TniQtmx0zCpRgrri5EJOBc28NpdXdVJI1qGvWGd1Oao52INm2+EVVj
2bhmgKWvz/klnUUtzMInjQF8aD2jOI6gzriCJ3Nu6xVF7uieI3EdJl+gpcSxLWg4
yRJ/EtvXfO+cQV0XzSJx3O5BWb+hXeLqyeRuqq58X1WwFaURe1Vk9kvQo2xV5QEG
JZbsV01KuaPSi/QNlD9Pl6dElh/hnTdtL/z3RYlUl83kcBj7hgfcXaiayF8iPnfD
cWZooz8pxbqyPeDfghZ6VNxE0yyhKmhE0VxkAP1BQReyx/OSGGn8lO1X0jIXlJYG
dh94ZxSD0x/qSOLk
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:05 2025 by rpki-client on console.sobornost.net