Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NBSgbayFTb7mCYRYjex7MoS1qlA.cer
File: NBSgbayFTb7mCYRYjex7MoS1qlA.cer (raw, json)
Hash identifier: vkPwnSHRNukuYvUl9g3UBEzfOrleSdRj4xCIrFIiHJI=
Subject key identifier: 34:14:A0:6D:AC:85:4D:BE:E6:09:84:58:8D:EC:7B:32:84:B5:AA:50
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194244513EDF29FFB68A7556CFA0B3F20D2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:48:14 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.104.99.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:13:ed:f2:9f:fb:68:a7:55:6c:fa:0b:3f:20:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3414a06dac854dbee60984588dec7b3284b5aa50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:46:76:03:76:78:c6:a5:46:af:ee:15:23:03:
59:03:b3:ad:19:77:eb:66:4a:56:b9:f9:a4:2e:3a:
96:a1:82:e3:62:67:76:ca:e1:7d:1d:32:4b:30:d3:
29:49:83:c8:aa:9a:27:df:5e:7c:c1:2d:17:01:5c:
83:27:f1:1e:ab:55:67:2d:15:8d:ed:7e:b0:d7:ba:
12:2d:e9:67:d7:5a:58:0b:35:e0:45:1f:ac:51:a5:
d7:a2:7b:a9:82:dc:89:95:53:c4:8c:4a:78:87:2c:
f7:e8:d6:7d:ca:25:2e:9d:26:08:be:14:60:26:2f:
9b:0c:1c:8a:9e:d0:a2:bf:66:57:42:f3:58:50:94:
1b:a4:18:79:86:fa:98:7d:1a:dc:1a:a0:41:f3:c5:
3c:bd:a9:44:99:16:df:66:10:9c:b9:72:cd:15:3e:
b2:77:99:d3:0f:e7:75:f8:cf:f6:76:d5:0a:12:2c:
c9:dc:1e:9b:f7:7a:95:60:79:6e:a2:f3:c8:40:41:
22:66:4f:15:b5:34:a4:d2:a1:f2:9f:13:c4:9d:54:
7f:05:8a:57:0b:fa:ee:6a:4d:34:5d:e7:73:52:61:
88:eb:1e:4f:d6:c9:44:0c:8a:1c:40:90:14:fe:5c:
75:d5:77:d6:da:6a:f1:f1:9b:13:a1:2e:ee:c1:dd:
e6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:14:A0:6D:AC:85:4D:BE:E6:09:84:58:8D:EC:7B:32:84:B5:AA:50
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/03dc6e-8524-45d7-acc5-e659fde05289/1/NBSgbayFTb7mCYRYjex7MoS1qlA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.99.0/24
Signature Algorithm: sha256WithRSAEncryption
27:70:f1:a6:19:c3:78:31:2c:16:19:5e:d3:05:9b:d2:4d:b1:
74:d0:d1:86:e3:43:3f:a6:61:c2:9d:7c:c6:8b:fa:58:2c:1c:
34:a3:d4:6a:5f:0b:48:51:c2:13:92:4f:e6:b3:59:66:ea:e2:
5b:83:3e:32:97:c5:b8:93:85:ba:f8:ea:4b:90:3b:50:9e:fe:
2b:09:30:27:e9:9a:52:76:21:1e:48:58:6c:1c:8f:90:c3:2a:
3c:51:41:94:4c:a7:5c:08:b1:da:87:e7:19:1d:dc:c5:2e:65:
39:8b:ea:35:a4:06:3c:cf:93:f1:17:ae:12:d2:bb:95:99:db:
4f:11:10:47:23:ef:af:bc:7b:32:c4:6e:b7:fd:f2:a7:7b:35:
c8:0d:f9:6c:3f:ea:54:95:fb:59:8c:3c:be:00:2f:4c:13:34:
2e:d6:ed:3a:78:89:01:79:64:60:ba:14:60:77:de:dc:5a:b8:
ff:fb:1c:af:41:fb:0a:cb:1e:35:de:8f:d7:46:a1:e2:78:e5:
bb:34:83:3a:21:1a:2d:42:0a:9b:6b:d6:6e:3f:9b:17:e7:22:
23:65:cd:61:bf:6c:ab:a5:b2:ef:07:4c:0f:75:d4:be:40:73:
6e:5f:85:c2:30:dd:fd:bb:cd:c0:72:e9:6a:e9:bd:1f:59:c8:
32:bc:90:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:48 2025 by rpki-client on console.sobornost.net