Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.cer
File: M2IjRPKea2Qgv-vDi7Z6MPRFP3E.cer (raw, json)
Hash identifier: CHpe8IIxkv6qa25q6GXwkLKjWS8PCRecQAupu2fn9JA=
Subject key identifier: 33:62:23:44:F2:9E:6B:64:20:BF:EB:C3:8B:B6:7A:30:F4:45:3F:71
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D80430958767B9C89EAD23EAD795F0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:49:06 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 165.220.128.0/17
IP: 185.136.44.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d8:04:30:95:87:67:b9:c8:9e:ad:23:ea:d7:95:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=33622344f29e6b6420bfebc38bb67a30f4453f71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ab:5e:9d:92:9e:98:21:47:0d:73:bb:59:5c:
f6:b2:f3:a2:40:9b:f9:07:37:b5:e4:4d:6e:28:bc:
d1:a2:33:3c:d9:01:84:7d:6d:03:b6:92:c8:37:db:
6c:5e:fb:ae:49:bb:8b:10:56:15:d1:de:4e:ed:75:
41:bf:66:34:7a:56:ea:a1:46:22:8f:16:00:e9:08:
7a:39:c7:b9:4a:84:7b:75:ab:b5:38:6c:d5:21:88:
17:de:20:87:e1:ec:da:bb:51:51:65:22:b2:30:6a:
98:09:48:6d:88:42:b3:f8:23:26:7f:2a:d4:c1:c7:
b3:bd:fd:b9:de:62:e3:2f:bb:eb:6c:c9:a5:60:b2:
c5:ed:d2:09:8a:c5:f4:d3:fd:ce:84:b5:4d:d8:9a:
e5:17:fa:a1:15:29:be:d2:b7:82:3e:d8:25:e1:40:
64:ed:92:e4:99:fb:9d:8c:20:13:7b:d2:b3:ff:bc:
a7:85:ed:25:01:83:8a:51:a0:64:8d:ef:80:6e:85:
e0:ab:16:4a:90:ab:2e:05:95:db:46:9e:91:22:9a:
28:46:39:21:53:f6:65:1f:e6:b8:2a:b1:02:49:b4:
d1:aa:a4:9d:6b:86:8e:a4:c2:8c:00:ee:13:b8:91:
13:ac:7c:0d:ca:b5:98:23:99:ff:70:5f:b3:31:82:
cf:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:62:23:44:F2:9E:6B:64:20:BF:EB:C3:8B:B6:7A:30:F4:45:3F:71
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4c68e4-4d71-4696-9557-6c6658bd952e/1/M2IjRPKea2Qgv-vDi7Z6MPRFP3E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
165.220.128.0/17
185.136.44.0/22
Signature Algorithm: sha256WithRSAEncryption
01:09:69:c0:81:76:8b:c6:78:79:80:64:c9:2e:fc:27:5d:8a:
76:47:b2:4f:25:64:f6:7d:b7:82:f1:ad:52:73:2a:0b:ac:bc:
53:3c:3d:7d:cb:da:15:8f:55:42:ec:ff:87:1a:87:e3:bb:d3:
77:da:88:82:9d:50:34:e2:9b:30:18:fd:d5:60:04:77:22:9d:
02:dd:58:3b:49:e4:8b:92:bd:df:9e:de:36:04:45:3a:66:8e:
89:ae:60:82:99:a7:e7:47:b2:b5:93:ce:f1:69:c4:32:c0:9c:
62:11:d6:1e:19:ca:50:9b:aa:c5:29:10:3c:86:7d:ef:0e:70:
68:31:48:c4:aa:40:34:93:bb:d5:d6:e1:06:6b:2c:0b:0e:68:
71:2b:0e:a8:b5:eb:c9:7c:2f:8e:dd:94:62:b9:1a:68:bf:54:
a7:48:00:d2:af:61:d4:b1:8e:27:ac:0e:21:10:a5:f5:e1:98:
6b:13:58:a4:79:a4:b4:26:04:2e:80:e0:f2:67:f2:72:05:36:
c2:07:2d:74:fe:f4:30:03:9b:66:2e:42:17:53:c1:98:8e:ab:
d2:01:59:f6:aa:38:8a:e5:d0:d7:ee:f8:2d:21:d9:35:68:d8:
b7:56:10:0a:df:e8:62:ad:93:a7:90:eb:47:de:83:8f:1f:1d:
2f:93:be:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:23 2025 by rpki-client on console.sobornost.net