Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/MshG8ZFDMjDZc8vI_aBrYC6_y1s.cer
File: MshG8ZFDMjDZc8vI_aBrYC6_y1s.cer (raw, json)
Hash identifier: 6BIiZ6A8/uQ8T3VIjoHOoObdLd1lpzV2ZrmYxEF+Fzs=
Subject key identifier: 32:C8:46:F1:91:43:32:30:D9:73:CB:C8:FD:A0:6B:60:2E:BF:CB:5B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA039C00EB7E9318CBACEA0C58B439
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:47:46 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 195.68.244.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:03:9c:00:eb:7e:93:18:cb:ac:ea:0c:58:b4:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=32c846f191433230d973cbc8fda06b602ebfcb5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:37:62:3f:cd:f7:8f:70:9a:d1:7b:cc:17:99:
c7:ef:67:3b:3b:3a:ec:4a:73:5a:8b:d5:19:a7:65:
35:56:19:06:8f:d1:6a:44:2d:56:a3:21:7f:cd:62:
a5:34:f7:18:7b:a5:c4:23:b9:bc:69:35:3e:b0:3f:
97:da:90:ec:37:46:cf:54:c8:b7:b2:5b:ad:ce:d2:
fb:88:a1:b8:17:d7:06:66:c8:d0:33:a0:63:3a:68:
6f:33:6c:c6:ff:07:5a:a0:8a:3a:20:bf:ce:94:69:
37:de:bd:c7:45:02:ac:9b:28:3c:91:48:2e:26:41:
78:e2:11:af:1f:3b:08:3c:9f:8a:26:1a:ba:a8:52:
87:5a:9f:07:86:eb:d3:c7:58:77:ef:e9:80:47:a2:
92:9b:73:09:d0:73:19:b0:b8:7b:89:1a:72:16:9a:
ec:5a:2c:d8:94:7e:b8:f7:22:e8:24:b5:9c:95:2d:
c4:34:93:68:ed:75:a5:17:4c:f6:da:7f:99:f4:56:
22:fe:b4:bf:f7:88:ed:20:69:d3:c1:ba:98:0b:66:
ef:ab:9f:1d:84:1b:69:fb:e4:2a:a5:5d:16:ce:e1:
ca:7c:d1:60:61:ed:8c:03:8d:c8:89:84:0f:b9:66:
86:f3:16:56:b6:64:af:86:81:f3:37:97:32:eb:bc:
4d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C8:46:F1:91:43:32:30:D9:73:CB:C8:FD:A0:6B:60:2E:BF:CB:5B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/e5756e-1317-4472-8302-a2341d3bb053/1/MshG8ZFDMjDZc8vI_aBrYC6_y1s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.68.244.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:33:28:c1:88:d1:55:82:59:a8:4d:93:bc:01:41:fd:05:e6:
b2:fd:17:df:99:fc:94:de:22:d6:11:5e:07:ac:44:09:1a:05:
13:28:a9:7c:d1:3d:e3:9d:eb:a9:a4:63:bd:ac:b3:7e:ab:9f:
11:18:6a:cf:e6:40:bd:23:c0:d4:75:3f:ad:f0:31:1b:bd:1e:
ad:bd:0d:2f:6b:f1:ed:4f:22:73:16:42:6d:96:de:60:cf:e1:
1e:17:57:ca:57:cc:94:7a:6f:7a:da:64:f6:0a:54:75:97:f5:
90:25:ec:87:d7:7c:ef:04:d9:2f:fa:95:ed:59:44:b0:35:c2:
86:d0:b9:8c:67:64:a3:b8:25:93:82:9b:9e:fa:71:83:7f:f1:
14:49:fc:f7:bb:74:2c:42:c2:33:17:27:6d:07:22:d5:44:cd:
41:83:53:bb:16:41:db:47:c7:8f:a5:86:48:e0:ae:48:d0:b1:
72:61:94:88:86:53:9a:07:41:7d:2a:05:a5:c0:c4:6e:ef:be:
6d:55:ba:83:72:67:b6:77:73:91:7a:42:fb:98:4d:5c:3b:88:
5e:e8:32:a8:50:69:2a:90:c1:c6:f7:4c:b4:32:98:7c:37:dc:
b4:cd:91:10:22:22:ec:b2:61:cf:c1:c4:ea:8f:16:68:3e:47:
a3:ba:31:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:47 2025 by rpki-client on console.sobornost.net