Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MYNgEO7e8V92reup9ymoKL8r6Ms.cer
File: MYNgEO7e8V92reup9ymoKL8r6Ms.cer (raw, json)
Hash identifier: Ouk8sOK+B0KfcvdSo4Q/8j5Csz3uxNb0ciJ9EE9IPq4=
Subject key identifier: 31:83:60:10:EE:DE:F1:5F:76:AD:EB:A9:F7:29:A8:28:BF:2B:E8:CB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194282700A3B26DC12B64C57E4BF9D4B4EA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/05/1912e8-0d6b-4ed6-8ae4-7d482aa48c68/1/MYNgEO7e8V92reup9ymoKL8r6Ms.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/05/1912e8-0d6b-4ed6-8ae4-7d482aa48c68/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 17:53:52 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.239.211.0/24
IP: 2a12:5ec0::/30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:00:a3:b2:6d:c1:2b:64:c5:7e:4b:f9:d4:b4:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 17:53:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=31836010eedef15f76adeba9f729a828bf2be8cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ca:da:3e:6b:d8:bc:e9:44:b2:ac:3e:34:b8:
81:45:f1:2d:54:66:42:c5:a0:8c:dc:2a:5a:9c:13:
1d:47:e6:d8:eb:90:37:a4:4c:cf:d2:df:00:07:4d:
ef:5f:f2:c8:11:33:1b:1c:ad:6e:c2:cf:d0:e5:4c:
54:27:dd:88:ae:65:54:99:aa:79:a7:fd:63:99:c8:
01:cd:07:ee:b1:59:7d:6a:09:87:85:47:ef:56:da:
ca:01:93:45:c3:d9:c1:3c:5f:31:e6:c5:89:a3:2f:
75:91:d0:4b:73:41:2f:df:75:7f:65:b0:00:ce:1f:
9e:02:39:0d:21:4a:05:39:b6:f8:96:bf:9b:66:90:
f0:84:e2:e2:c4:c7:9f:d9:f9:fb:c6:9e:95:5d:ed:
84:11:96:03:2f:38:87:e0:27:7f:c9:1e:60:77:20:
b5:2f:f1:a1:c2:73:66:6f:d7:85:72:e4:3f:03:a9:
9e:f2:be:43:0b:c2:79:cd:89:22:36:3d:95:fd:fd:
09:86:42:f3:40:3e:3e:3c:ac:d9:ef:be:49:08:f5:
15:15:4a:38:13:d9:16:6c:69:98:2a:e1:f8:dc:d5:
60:4f:34:43:69:ae:1b:8f:a4:49:d0:34:6f:d3:b3:
9d:f3:51:81:27:2c:14:21:56:6c:73:6c:0e:7a:1c:
62:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:83:60:10:EE:DE:F1:5F:76:AD:EB:A9:F7:29:A8:28:BF:2B:E8:CB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/1912e8-0d6b-4ed6-8ae4-7d482aa48c68/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/1912e8-0d6b-4ed6-8ae4-7d482aa48c68/1/MYNgEO7e8V92reup9ymoKL8r6Ms.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.211.0/24
IPv6:
2a12:5ec0::/30
Signature Algorithm: sha256WithRSAEncryption
52:9f:cc:fc:51:eb:3c:9b:85:7c:39:70:ba:f8:57:67:38:67:
b9:f7:18:7c:26:3c:37:85:64:cd:ad:b8:9b:71:d4:b6:8b:4f:
6e:ac:4b:ac:c2:0b:27:7a:07:e2:43:01:52:a4:3f:40:0e:e8:
c3:4c:48:b4:ea:cf:30:20:53:3e:4c:40:58:79:6c:b9:d8:44:
4d:9f:c9:67:fe:74:b1:0b:24:62:0b:69:58:af:68:d8:f7:1a:
05:0a:26:ee:b1:6d:d0:f3:35:07:e0:db:c1:7e:c5:d5:59:b4:
96:51:05:40:24:53:16:71:7d:9f:38:da:fd:25:ce:9b:eb:a4:
fa:b1:5b:54:ac:0f:cd:82:56:9f:f7:8b:bd:5b:45:c8:59:b9:
20:27:a8:dc:f8:01:69:ba:7a:99:b7:fd:f6:25:a0:8f:8c:1f:
50:c8:ea:ab:44:f8:95:bc:a4:6e:05:63:ab:fd:74:42:78:56:
be:95:4e:a2:58:b9:61:41:74:af:e1:4f:e6:61:0b:c2:05:6e:
8e:b9:8e:1e:df:ec:8a:4f:3d:4c:45:5b:d8:7e:8d:6b:04:38:
9b:6b:47:62:14:f3:4d:59:7f:fe:5b:c6:3e:56:6e:8c:43:fb:
5e:06:71:ba:41:05:aa:ce:7f:25:01:6b:9c:f8:9d:fc:6c:9b:
28:bb:9b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 21 17:35:58 2025 by rpki-client on console.sobornost.net