Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MNXiAi6oLsd_kt3bd2YYzWwFdXU.cer
File: MNXiAi6oLsd_kt3bd2YYzWwFdXU.cer (raw, json)
Hash identifier: dNHfYwzRPQbGtf76g1Qx5xGvMhQ7vo8tYv2+PIMjN0o=
Subject key identifier: 30:D5:E2:02:2E:A8:2E:C7:7F:92:DD:DB:77:66:18:CD:6C:05:75:75
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942067ED122C74FCD7BE60456561B10F7A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/MNXiAi6oLsd_kt3bd2YYzWwFdXU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:47:49 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.84.247.0/24
IP: 193.84.250.0/24
IP: 193.84.253.0 -- 193.84.254.255
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:ed:12:2c:74:fc:d7:be:60:45:65:61:b1:0f:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=30d5e2022ea82ec77f92dddb776618cd6c057575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c7:d3:c4:30:d8:3f:72:54:bd:8f:12:c4:46:
2f:c8:c2:67:15:ce:dc:f2:33:69:49:b3:32:57:af:
74:8c:b6:7b:0e:e3:aa:df:4d:54:40:fc:eb:c8:22:
0f:90:7f:fc:7d:40:60:38:43:ad:36:2c:97:29:b9:
7f:f4:1b:08:14:83:4c:cb:e9:37:b0:96:ad:59:88:
4b:ac:e4:6e:af:2a:09:17:c3:c5:d1:f0:a5:c1:1b:
05:a5:33:89:01:d2:71:3e:70:c6:af:d0:8c:c4:9e:
1c:10:5e:bf:62:98:bd:ed:c8:14:aa:a9:06:fe:9f:
07:61:8d:8c:e9:27:44:6d:72:7a:9e:65:58:d3:1e:
8e:20:8e:44:dd:89:78:96:c2:b4:0c:55:21:4c:be:
f6:07:f5:16:4d:3a:d5:83:5d:27:1c:5b:b8:c7:a3:
3a:01:25:0f:13:c6:a9:5f:b0:e2:5b:59:93:22:0c:
15:2e:30:2d:01:a1:8e:8f:13:0c:57:4c:8d:81:15:
12:04:0f:32:df:00:37:f4:04:5c:82:b8:48:d0:06:
a6:1f:cb:4e:b2:32:4e:c7:f0:38:c6:ca:35:3a:76:
d9:c2:3c:b9:fb:7f:f1:b0:9d:29:68:cc:1d:5a:70:
58:cc:04:8d:89:da:a3:46:36:7e:03:71:d0:3e:0d:
a9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D5:E2:02:2E:A8:2E:C7:7F:92:DD:DB:77:66:18:CD:6C:05:75:75
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f7ca4a-ca73-47f8-9fd7-9b2f51b80a98/1/MNXiAi6oLsd_kt3bd2YYzWwFdXU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.84.247.0/24
193.84.250.0/24
193.84.253.0-193.84.254.255
Signature Algorithm: sha256WithRSAEncryption
39:4e:b8:99:3a:c7:47:33:51:d8:e3:d3:cf:34:51:48:f4:e5:
44:70:e0:86:34:0c:3b:90:a3:be:84:79:74:a6:06:ed:48:26:
1a:c3:2d:0a:ed:2b:a4:95:f0:60:29:4c:8f:c6:e9:37:1d:1a:
22:d5:33:34:7b:2f:d0:fc:cd:1c:e3:ff:9c:d5:7f:41:10:e0:
a4:af:ff:f9:6e:39:bf:1a:15:0d:03:bd:1b:a0:4e:9b:b0:ca:
b5:1f:8f:01:17:59:65:c1:cc:93:fd:48:aa:62:7c:c3:4a:8b:
03:0f:3d:02:4e:f6:6b:d4:80:bc:cd:ad:1c:14:81:2f:8d:31:
f6:7b:3e:16:1e:a8:f6:60:f6:2f:33:87:12:0f:f2:7e:ff:93:
1c:c7:8f:92:e5:e0:b2:81:ac:18:ff:80:6f:de:a9:72:02:d0:
0e:d7:32:ca:4c:b4:66:c3:5c:ce:62:35:cf:7d:42:a5:18:e7:
36:93:96:ec:a2:88:ca:49:78:ab:3a:5c:ba:5a:0c:b3:f8:e7:
8e:81:01:a1:a9:59:2a:2f:f7:9a:4b:09:77:90:12:4e:0f:79:
b8:e2:8f:3a:d9:75:1a:2a:44:26:7b:6a:95:58:58:ad:d7:50:
3e:a9:f3:97:bf:c4:4d:f7:c8:d5:84:87:f7:50:d8:0c:ee:8b:
26:a8:34:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:24 2025 by rpki-client on console.sobornost.net