Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FpFMUdAxQRwTQBcVk2AxY8PUoI4.cer
File: FpFMUdAxQRwTQBcVk2AxY8PUoI4.cer (raw, json)
Hash identifier: DJXl09TAinkMuCIuEIV+vu1SkhwfFDqu8aIKJIaeeOw=
Subject key identifier: 16:91:4C:51:D0:31:41:1C:13:40:17:15:93:60:31:63:C3:D4:A0:8E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D97ACD646A5A9B02F12C9A79CE01FF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/FpFMUdAxQRwTQBcVk2AxY8PUoI4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:34 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.203.152.0/22
IP: 176.123.128.0/19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:7a:cd:64:6a:5a:9b:02:f1:2c:9a:79:ce:01:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16914c51d031411c1340171593603163c3d4a08e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:64:aa:96:b5:38:43:2c:f8:8c:af:35:50:b0:
52:f3:85:57:00:4b:5f:a7:d3:67:1d:e7:13:7b:80:
c9:1f:d1:3d:ff:fd:86:bd:7b:b3:83:1e:0a:a5:0b:
2c:21:ee:ed:c5:c9:a6:50:49:f2:ac:59:06:98:6b:
91:5b:f6:af:76:07:3b:26:86:c4:d0:23:9e:59:45:
1e:f7:36:c9:76:0a:39:0b:b7:2d:70:48:e0:bb:9d:
15:c9:0e:9f:99:d6:a0:72:b3:75:b1:5d:ad:81:56:
17:0b:fa:20:50:65:64:77:5f:f5:df:f0:d9:0e:4c:
89:4f:20:2a:65:30:0b:9b:05:b6:cd:6f:2f:a6:41:
26:88:3d:28:76:cc:cc:ac:11:23:4c:52:3e:6b:77:
8f:e4:7b:91:4b:96:38:88:6e:1d:77:1a:d2:55:23:
1e:26:44:f6:15:8d:9f:2e:82:44:90:8e:a4:17:3e:
86:a4:91:d9:c5:7f:08:77:3e:9d:ad:94:90:eb:f5:
01:74:81:83:b6:aa:2d:3d:60:a7:af:0a:c4:ca:d7:
61:34:fa:4d:cd:d3:07:0b:62:2e:c3:a9:1a:3a:c0:
92:39:cb:cd:70:37:a3:16:b3:56:8e:ab:bd:a8:cd:
2d:5d:bc:a4:6e:26:b9:07:9a:fd:df:e6:3c:92:af:
0a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:91:4C:51:D0:31:41:1C:13:40:17:15:93:60:31:63:C3:D4:A0:8E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/FpFMUdAxQRwTQBcVk2AxY8PUoI4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.203.152.0/22
176.123.128.0/19
Signature Algorithm: sha256WithRSAEncryption
7c:29:9a:ba:b4:72:4b:a5:ff:c3:7a:28:c0:c5:5e:02:2c:b3:
8a:a8:cf:c2:d3:25:9e:04:26:83:32:4e:4b:cd:ed:8b:08:9e:
ce:fe:68:c1:49:cb:07:20:39:81:39:1b:08:64:fa:48:9f:3d:
38:24:8c:ec:0c:ea:ec:9f:54:dd:5f:4e:96:6b:f5:65:dd:ff:
7f:12:ca:f6:01:9e:0c:5e:bd:11:e6:98:74:75:32:02:6f:21:
af:df:ec:f2:33:b8:ff:a9:6b:32:1d:ab:65:65:cf:68:e7:eb:
33:eb:55:93:d3:b6:09:c4:ba:d2:7b:84:9a:88:d3:0a:02:ca:
9d:79:69:26:59:3a:be:e4:5c:cc:10:a0:b4:56:81:09:79:f3:
d9:1d:08:4e:e8:53:dd:b5:76:29:d2:58:63:94:2d:8d:88:80:
8e:80:02:e8:e6:d5:ff:91:d1:41:2c:59:3e:8a:b7:a4:dc:ea:
7e:72:bc:69:37:aa:d1:2c:db:36:14:ef:ef:41:26:3c:d2:29:
b2:06:15:a5:15:11:2e:04:a4:dd:27:46:4c:f4:06:60:21:35:
43:1a:52:39:37:82:67:37:04:a8:b2:0b:d7:48:97:c5:9f:f5:
71:1a:45:5e:42:98:2b:8d:8f:7f:4b:65:e8:29:68:a6:97:dd:
99:9a:30:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:09 2025 by rpki-client on console.sobornost.net