Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LG1GLWWE49of8lFVSjReScatD7E.cer
File: LG1GLWWE49of8lFVSjReScatD7E.cer (raw, json)
Hash identifier: PJuo9ciVMyCKdFKaiaXgcPN9TnybDFrovHstKAEOQII=
Subject key identifier: 2C:6D:46:2D:65:84:E3:DA:1F:F2:51:55:4A:34:5E:49:C6:AD:0F:B1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942747F9B648CA6DB630F763AFA8399C9F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/84/675704-8d7d-47fa-82e4-afe8cd94a8d9/1/LG1GLWWE49of8lFVSjReScatD7E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/84/675704-8d7d-47fa-82e4-afe8cd94a8d9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:50:15 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 45.93.196.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:f9:b6:48:ca:6d:b6:30:f7:63:af:a8:39:9c:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:50:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2c6d462d6584e3da1ff251554a345e49c6ad0fb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:76:5d:f8:e4:5a:31:25:b4:dc:20:b7:69:44:
d0:5a:08:e0:39:7b:cd:e2:b2:62:f7:be:6e:10:93:
42:c0:21:50:ee:f3:b3:cd:e6:a7:c8:ba:62:5c:64:
52:e7:7d:9b:f3:5b:4a:0d:2d:a2:f4:df:3e:b3:16:
b7:ab:7e:0d:90:3f:81:4d:a1:99:a4:cc:64:1f:b7:
b4:09:27:03:52:1b:50:23:25:f5:26:cd:9c:44:86:
ab:ca:db:de:59:b3:9a:3a:3a:cb:4e:4f:67:45:71:
98:84:fe:a2:44:f9:cd:75:d7:8c:e7:19:b5:f3:f0:
6b:82:95:20:4d:9d:28:6f:ee:32:a7:3b:06:69:f4:
84:44:d6:2a:c5:27:ce:57:e6:52:ff:c3:a0:72:72:
88:a7:bf:ec:ce:fb:31:79:e9:a7:d5:b4:70:e7:76:
5f:a9:3f:ea:5f:31:09:b8:fc:e2:d6:0d:de:14:a7:
b7:af:47:a2:81:88:ae:1c:a6:68:f2:ea:88:46:87:
a7:fd:36:6b:4a:8b:53:1d:85:95:4c:df:b0:7f:b5:
18:66:7b:d3:b7:fc:fa:7c:f7:20:53:ea:57:1b:18:
3b:bd:ba:cc:05:a9:7d:fe:1a:a7:48:55:8b:ac:8a:
e3:69:7f:96:42:e9:59:d8:19:66:86:87:81:a7:d2:
0d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:6D:46:2D:65:84:E3:DA:1F:F2:51:55:4A:34:5E:49:C6:AD:0F:B1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/675704-8d7d-47fa-82e4-afe8cd94a8d9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/675704-8d7d-47fa-82e4-afe8cd94a8d9/1/LG1GLWWE49of8lFVSjReScatD7E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.196.0/22
Signature Algorithm: sha256WithRSAEncryption
64:a0:8a:20:1d:bd:ae:10:f7:d7:4a:4a:e8:5c:c4:41:84:fc:
86:e3:80:24:8e:32:57:a4:64:35:db:bf:63:51:d8:41:69:f3:
15:36:91:72:92:83:3b:b7:b1:74:32:0b:ee:40:37:89:fa:3a:
35:de:d4:1e:8f:a6:b5:08:41:58:01:0f:f0:18:52:59:7f:94:
86:f5:e7:75:0c:85:09:7f:c1:c5:13:4d:46:21:39:fd:5c:98:
f8:77:d7:f7:e1:58:74:f5:14:46:3b:d3:52:80:a6:59:0c:ac:
a2:4a:aa:83:98:51:82:ce:51:00:dd:c6:91:80:42:ac:51:97:
89:6d:ea:87:52:c8:9d:cd:08:41:c8:4b:48:dd:a3:f0:4f:59:
9a:8e:de:30:64:14:8e:2c:27:d8:4e:ca:f2:be:39:c3:1f:82:
9f:c2:d1:33:e1:a3:4f:ac:e3:e5:62:11:80:11:87:d8:d5:17:
bd:45:dc:5a:d7:73:fc:1d:9b:ab:72:e7:41:3a:66:fc:e0:21:
b6:7d:d8:f9:29:65:c4:0a:e8:a5:5a:1b:95:32:c2:e5:e6:12:
26:f9:19:44:78:f7:b2:ed:24:73:04:e7:c6:c1:65:cf:ac:b3:
d4:f4:26:30:c0:57:2f:cd:b6:28:82:a8:41:fe:60:ae:5f:d5:
9a:79:26:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:21 2025 by rpki-client on console.sobornost.net