Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/FqX_fn4arzjlmWnWCYBKOz8Fvog.cer
File: FqX_fn4arzjlmWnWCYBKOz8Fvog.cer (raw, json)
Hash identifier: 2S/dpxdyiNMy/iOnbaomDiLMfoSgKy5Q69w0akw+GH8=
Subject key identifier: 16:A5:FF:7E:7E:1A:AF:38:E5:99:69:D6:09:80:4A:3B:3F:05:BE:88
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FB5D64F33DB8F5C3C80829A8321AB8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/66/0fecd5-ee62-401a-a57b-66dadea29c4a/1/FqX_fn4arzjlmWnWCYBKOz8Fvog.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/66/0fecd5-ee62-401a-a57b-66dadea29c4a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:48:06 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.84.75.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:5d:64:f3:3d:b8:f5:c3:c8:08:29:a8:32:1a:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16a5ff7e7e1aaf38e59969d609804a3b3f05be88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:3a:13:e4:6d:92:bd:27:6c:7e:b1:85:b0:eb:
ea:d2:51:a5:aa:8f:a2:b2:26:ba:14:b0:c1:01:21:
f2:14:6a:78:0b:25:dd:0f:f1:ee:25:5e:d1:d5:5d:
43:76:7e:65:98:01:41:11:d2:b4:e8:ed:a1:35:b2:
1a:4b:53:a7:fb:a9:60:f8:ce:7e:f8:4c:9f:f6:d0:
2a:52:2d:9e:9d:42:32:ce:08:a6:33:92:fd:58:1b:
be:e2:ca:76:da:0e:a9:a7:11:f9:99:62:e0:b6:5d:
a3:33:10:d9:cb:57:e6:8e:b5:56:89:1a:43:48:6c:
5a:ee:c6:e0:e5:94:78:a2:a7:a8:7c:e5:4a:b1:f3:
fb:c0:7e:ad:fa:b2:e1:06:04:a0:0a:17:fe:9a:7e:
dc:4b:28:a9:e8:77:93:8b:ca:d8:8f:83:0c:33:65:
6a:bc:bc:80:b3:04:a1:58:11:26:34:89:13:03:1e:
5a:2d:c4:62:3d:0c:a4:8f:79:0a:67:39:1e:86:01:
d3:dd:3a:99:bf:ba:a6:fc:92:59:60:e8:b4:f2:b9:
cc:72:e6:5e:92:54:45:b7:07:69:dd:31:c1:c6:6c:
ac:88:79:b3:9b:76:19:0b:45:67:f8:aa:37:44:1d:
eb:42:b6:7e:43:d9:ff:0b:22:49:8f:61:53:0b:a0:
91:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A5:FF:7E:7E:1A:AF:38:E5:99:69:D6:09:80:4A:3B:3F:05:BE:88
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/0fecd5-ee62-401a-a57b-66dadea29c4a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/0fecd5-ee62-401a-a57b-66dadea29c4a/1/FqX_fn4arzjlmWnWCYBKOz8Fvog.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.84.75.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:7d:72:9e:9d:3f:45:28:35:76:63:08:76:aa:eb:0a:71:0f:
a0:28:b7:11:e8:27:92:26:73:b6:25:d5:33:61:a8:59:15:11:
f7:fe:ee:f2:99:10:70:18:15:c5:00:8c:dd:67:c8:d2:43:c6:
ad:ad:1c:95:d4:84:a9:28:09:b5:97:20:6a:ff:e7:43:cd:ba:
9a:9c:c4:0c:1e:2b:45:dc:1a:90:29:99:3c:74:e1:bb:98:a9:
b2:d0:09:5d:e4:c0:ce:d4:dd:46:ac:fe:b9:82:cb:95:63:50:
48:d8:7f:50:d5:24:c5:5b:80:1c:18:ae:b1:af:fb:bf:07:45:
f4:92:22:69:3e:b3:4e:76:ff:12:69:b1:b2:45:37:84:08:50:
f4:e1:ee:2b:32:39:44:64:e9:d0:7b:f9:ae:74:8b:ba:78:bb:
39:aa:f2:e3:ac:43:db:9e:92:ba:64:45:12:a4:d0:a0:c8:ef:
21:1e:48:ab:24:a6:32:4d:01:a7:69:2c:f1:c8:63:21:29:2c:
32:11:a5:0b:69:cc:93:c8:cd:91:bc:68:74:a1:1e:a3:ee:d1:
ca:b2:c5:13:bd:3a:11:c3:0f:c9:a9:5d:93:1d:83:07:c1:62:
2c:a9:c6:ca:b6:21:fe:70:6b:64:a8:88:9e:46:aa:95:46:3d:
c2:f4:0a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:09 2025 by rpki-client on console.sobornost.net