Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.cer
File: EYNszBk1rrl9Z8tGvdDGEH-GEOQ.cer (raw, json)
Hash identifier: hMAYs9cd1VWmzfIiMypqNoPSJlcFrnXMn96N1owe7h4=
Subject key identifier: 11:83:6C:CC:19:35:AE:B9:7D:67:CB:46:BD:D0:C6:10:7F:86:10:E4
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266BEDA936FFA0EFDD90F1E1D8E7A3E0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:49:54 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.176.208.0/24
IP: 194.53.32.0/20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:ed:a9:36:ff:a0:ef:dd:90:f1:e1:d8:e7:a3:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:49:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=11836ccc1935aeb97d67cb46bdd0c6107f8610e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:60:d8:1a:30:bb:f9:72:59:13:6b:65:21:ef:
2d:81:3e:81:71:f1:3e:a7:25:d8:7d:1d:e2:46:18:
40:fb:58:0c:fe:d6:8a:7d:7d:6f:96:c1:e5:94:73:
b6:03:43:e9:06:bc:da:ea:47:dd:7b:df:5b:46:03:
c9:e4:0a:81:10:87:c4:56:94:84:ec:4a:a7:38:c6:
f1:e7:56:1b:42:57:73:c8:49:9d:38:1a:a4:65:15:
0c:62:a9:c7:b7:08:84:3c:54:48:1c:65:cc:1f:bd:
52:23:25:77:48:bb:27:91:58:e1:06:31:2c:de:df:
85:49:af:66:5c:65:5d:b3:e8:67:0a:e9:ec:b3:c5:
79:f6:02:86:e5:0f:10:45:06:b9:42:ed:3f:cb:10:
34:0b:f0:92:11:e8:ca:6f:4b:b8:80:a0:65:c0:e3:
22:fd:d6:79:0f:73:2b:42:ca:3f:9e:e1:23:da:27:
96:34:01:1f:e4:1b:4b:eb:b9:1f:3e:84:74:8d:37:
48:c6:75:3f:7e:1d:ca:c4:03:f1:0f:7d:58:7f:50:
f6:53:f4:1b:7c:84:d7:fa:ec:a9:9f:84:7c:5c:e8:
24:5f:7b:3b:c1:40:09:b9:fc:22:5e:6e:d0:3b:f8:
22:92:c6:f3:b0:e2:7e:91:3b:e0:3c:8c:20:0e:2d:
4e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:83:6C:CC:19:35:AE:B9:7D:67:CB:46:BD:D0:C6:10:7F:86:10:E4
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.176.208.0/24
194.53.32.0/20
Signature Algorithm: sha256WithRSAEncryption
17:76:14:34:e9:cc:71:9e:f0:2d:57:52:d1:1d:5d:62:0b:86:
d6:39:5f:31:7f:be:d7:39:56:42:db:77:59:78:9e:a2:9a:5b:
fd:0b:83:b8:02:30:7d:f6:a5:5d:b9:ee:0b:88:79:00:9c:8b:
e7:50:fb:d0:bb:72:e9:25:49:0b:ff:69:69:8f:63:fb:5b:ed:
90:7a:8c:98:29:ea:28:d3:0e:c0:c6:68:dd:d0:a8:98:7e:78:
f2:20:93:8e:7c:a8:76:fd:dd:b2:71:d7:4e:68:c3:9d:d4:86:
3d:80:e9:02:ad:6c:fb:b0:75:ec:51:db:c2:5d:0a:7f:69:f0:
15:00:cf:60:d4:e8:bf:ad:d9:22:f2:b5:0e:b7:a7:cb:e6:dc:
4d:41:f3:b4:6f:dc:60:ae:71:87:d2:56:ce:20:a3:33:d6:b4:
dc:a4:38:5c:f9:83:96:9e:68:07:4e:e8:49:db:06:ec:36:7d:
db:2f:17:bd:86:df:86:c9:86:f4:e1:99:23:58:f6:bc:26:c6:
0a:99:62:a3:91:89:3f:25:d4:b3:91:0c:b2:75:4d:a1:e7:ec:
f7:ba:62:00:68:c9:97:e6:72:93:be:69:e0:24:00:d1:b4:7a:
b8:22:7b:9e:df:b5:88:70:97:92:ab:a6:67:3e:72:59:fc:03:
72:94:9a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:07 2025 by rpki-client on console.sobornost.net