Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/L9lxonxvwsZi8GXdi_qLihMsHq4.cer
File: L9lxonxvwsZi8GXdi_qLihMsHq4.cer (raw, json)
Hash identifier: 6sTT+1PjHLBjKkaVFssSpmrx8FLEXBXtxc1depvdHDI=
Subject key identifier: 2F:D9:71:A2:7C:6F:C2:C6:62:F0:65:DD:8B:FA:8B:8A:13:2C:1E:AE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C54748B10990151E87D4CCA7F6AD0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d6/c2a48a-3a89-46b5-ae62-abeed70fabd1/1/L9lxonxvwsZi8GXdi_qLihMsHq4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d6/c2a48a-3a89-46b5-ae62-abeed70fabd1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:47:57 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 80.91.223.0/24
IP: 2a12:b180::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:54:74:8b:10:99:01:51:e8:7d:4c:ca:7f:6a:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2fd971a27c6fc2c662f065dd8bfa8b8a132c1eae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:30:90:86:76:20:1b:ce:9e:d6:2a:35:11:df:
38:d2:59:45:42:09:a1:4c:ff:6e:bf:25:7c:71:40:
d8:90:11:c1:61:e8:b7:89:2c:d2:d0:1c:77:83:89:
5b:b7:b5:6d:49:18:7b:3f:91:bb:a5:dc:d9:9d:23:
3d:fb:85:a1:69:1a:c5:62:eb:60:7b:cd:73:e4:90:
6c:0b:40:1e:28:03:7d:b7:b2:5b:cb:c0:80:45:c5:
93:fb:bc:15:76:09:dd:18:24:d6:9f:fe:f4:47:cf:
96:e7:5b:50:bc:d5:87:a0:56:3f:cc:f2:d4:3a:2b:
8f:b7:b0:25:39:d9:6f:d8:ce:ca:06:6d:7b:cb:28:
87:f2:d7:4b:fd:8b:1b:bf:ef:d4:8a:a5:09:b6:60:
43:e1:36:9a:64:fe:0a:5a:2f:e8:a1:98:cc:f3:06:
dd:01:5e:8a:e8:4a:20:37:fa:c7:19:ad:0f:3a:e0:
65:01:6c:ed:25:de:ee:73:51:7e:7c:b8:18:3e:9a:
e0:9d:bc:d3:56:94:34:87:5f:24:bf:ae:43:90:dc:
b4:49:76:b0:0e:cd:1a:80:7d:20:5d:50:35:82:bd:
97:cf:7b:76:1a:2d:5e:ef:35:6e:5a:89:f5:1b:ae:
5b:e2:6b:d3:2a:fc:17:02:ec:c2:2d:48:c2:71:60:
73:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:D9:71:A2:7C:6F:C2:C6:62:F0:65:DD:8B:FA:8B:8A:13:2C:1E:AE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c2a48a-3a89-46b5-ae62-abeed70fabd1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c2a48a-3a89-46b5-ae62-abeed70fabd1/1/L9lxonxvwsZi8GXdi_qLihMsHq4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.91.223.0/24
IPv6:
2a12:b180::/29
Signature Algorithm: sha256WithRSAEncryption
5f:82:e9:5d:58:32:f1:88:36:cb:43:1c:79:f2:d0:b7:19:f2:
c4:a4:39:e6:26:3a:5a:b9:af:41:55:91:82:d4:b3:b8:53:aa:
e2:00:ea:03:0a:f2:0d:13:0f:d2:0e:b6:2f:1e:6c:25:4b:b0:
6f:e2:ff:80:cb:09:7a:0a:e7:b3:2a:3f:1f:91:9f:63:ff:6f:
1a:e7:8e:dd:28:7b:47:8b:74:4a:53:2a:1a:8b:81:da:6b:6e:
e2:4d:ab:35:4c:45:07:f5:f7:11:db:31:15:11:ab:75:f6:f7:
3f:9a:d5:ef:49:19:da:95:85:df:cb:c5:27:07:c6:85:0d:1a:
71:05:fd:f9:c0:95:0e:ce:63:1b:74:7c:b1:fb:19:97:55:07:
a5:4c:4f:0c:a0:00:8f:79:f6:9b:13:ea:4e:ae:1b:a1:97:90:
4d:4b:ad:c1:15:a6:27:f7:a9:22:8f:03:92:f4:f0:7f:5c:11:
f8:0d:3b:67:a6:d2:1b:7d:26:09:40:59:db:74:c0:2e:b7:89:
b9:9b:14:0a:8b:ab:e1:1d:ac:7e:2b:ad:80:10:4a:c1:d8:58:
cf:5a:5b:20:fd:89:79:5e:e5:66:07:01:62:6b:8b:15:2a:7a:
38:81:d0:40:fb:7e:58:7e:51:17:9c:a7:13:ac:78:04:7f:3e:
f2:f9:8d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:15:04 2025 by rpki-client on console.sobornost.net