Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/F-wxRBaRuFmzR_0XIXpeXRsL4wM.cer
File: F-wxRBaRuFmzR_0XIXpeXRsL4wM.cer (raw, json)
Hash identifier: KmmL0w9qFRrSk1tzTUw0/2+Wb/12iOOITibQmqYfcNA=
Subject key identifier: 17:EC:31:44:16:91:B8:59:B3:47:FD:17:21:7A:5E:5D:1B:0B:E3:03
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019428268DA297340ABA5E796CDF290BD5C3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6b/f17562-3020-46ef-9cff-a772e5834fd2/1/F-wxRBaRuFmzR_0XIXpeXRsL4wM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6b/f17562-3020-46ef-9cff-a772e5834fd2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 17:53:22 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.107.126.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:8d:a2:97:34:0a:ba:5e:79:6c:df:29:0b:d5:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 17:53:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=17ec31441691b859b347fd17217a5e5d1b0be303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:f6:aa:5e:e9:93:41:6b:79:76:42:02:29:7a:
9f:79:c0:85:4b:57:8e:2f:19:44:af:5d:c0:7d:d2:
b5:a9:ab:1b:61:71:29:53:34:95:00:fb:b9:92:f1:
84:0c:e0:fc:d6:07:ca:43:f0:c4:b5:e7:ef:d7:f5:
76:16:ba:d4:07:6d:12:8e:2d:d3:12:6c:b7:0c:9a:
bb:28:49:bf:0e:e8:b3:1d:c3:78:51:83:9c:8a:36:
71:38:3e:60:f9:f4:0d:2d:c5:eb:3f:96:68:78:cd:
c1:8f:b9:eb:61:b3:d0:b3:f2:48:2d:17:46:7f:4a:
6a:8a:87:27:5e:cd:b4:56:ea:5f:da:ba:35:b4:ba:
a4:f1:cd:dd:f9:19:1c:1c:f4:0a:61:8e:f9:45:c7:
68:58:eb:3b:cf:47:8a:1c:34:d1:29:d7:17:68:e2:
49:01:1c:c0:3b:1f:d4:99:e6:1f:4e:60:2a:f2:d2:
5b:90:5c:4c:e8:e9:c2:95:28:44:95:0c:2b:bf:db:
12:bb:57:5d:77:ac:03:c6:ed:d6:38:ef:8c:17:f4:
52:91:66:ef:aa:8d:6e:2d:ed:38:fd:a2:a3:96:13:
d3:e5:92:f6:6f:60:fb:9a:27:b5:20:3f:24:9c:51:
f4:cd:77:bb:81:0c:cd:33:c2:6c:84:ed:f9:85:79:
7c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:EC:31:44:16:91:B8:59:B3:47:FD:17:21:7A:5E:5D:1B:0B:E3:03
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/f17562-3020-46ef-9cff-a772e5834fd2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/f17562-3020-46ef-9cff-a772e5834fd2/1/F-wxRBaRuFmzR_0XIXpeXRsL4wM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.107.126.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:be:7a:b6:88:04:e7:01:dd:10:1e:d0:1f:b6:87:cd:e0:a0:
6a:15:50:e5:d1:69:10:5b:93:ca:23:a0:fa:40:a3:26:02:31:
7c:c3:e1:41:14:67:2f:54:83:11:7c:74:de:e1:3d:9a:57:0d:
ff:91:99:e8:46:3a:3a:73:6f:c4:75:2d:74:8b:fc:f4:1f:8a:
fc:7d:b9:a2:7f:91:b1:49:39:0e:a1:c5:a8:69:67:11:69:89:
eb:88:68:0f:7a:00:fa:44:5b:9d:4d:e7:6e:17:94:77:08:c6:
8a:e6:61:d2:3a:ad:56:6c:14:bc:21:24:d5:17:57:fa:e4:29:
19:5b:88:11:ec:70:13:c6:b5:db:45:87:a7:a9:3f:df:5a:83:
e2:90:b4:6f:47:c9:60:d5:a8:70:8e:c4:c5:c2:55:92:5a:84:
05:10:cc:5f:e3:42:ed:2f:c7:59:f1:c9:b7:47:d6:90:c4:a3:
6a:61:4b:06:09:56:4c:63:cd:03:e6:12:6c:1e:12:fb:23:91:
7f:92:98:dd:47:95:5c:bc:8d:c8:8c:7d:76:de:9b:9e:c7:e9:
07:c8:60:72:5d:67:85:60:43:c2:29:c6:bd:88:32:ed:93:b0:
58:e0:66:82:05:d5:06:7a:86:4b:bf:81:ea:0d:a5:9b:80:40:
84:48:29:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:07 2025 by rpki-client on console.sobornost.net