Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NKLqVXtCqf06gCEVBhk8KzOJ3G8.cer
File: NKLqVXtCqf06gCEVBhk8KzOJ3G8.cer (raw, json)
Hash identifier: y+LF3G4WhtOk2BNbpnqTAEtS9+ZzC4dEQSyrh/ebJeg=
Subject key identifier: 34:A2:EA:55:7B:42:A9:FD:3A:80:21:15:06:19:3C:2B:33:89:DC:6F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC793F8937A000305913D94170EDA9D8B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/af/31315c-81a4-4969-8571-d76346a7adc6/1/NKLqVXtCqf06gCEVBhk8KzOJ3G8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/af/31315c-81a4-4969-8571-d76346a7adc6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 00:30:12 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 31.193.191.0/24
IP: 2a13:e600::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:f8:93:7a:00:03:05:91:3d:94:17:0e:da:9d:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 00:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=34a2ea557b42a9fd3a80211506193c2b3389dc6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:78:44:a7:67:16:8a:8b:b9:06:c6:a1:fa:4f:
6e:d8:27:17:00:85:d4:39:74:1e:8c:f5:0e:62:6e:
d3:a2:50:d5:f5:fd:c5:6a:9e:ee:00:f4:77:5d:32:
7b:98:bb:39:bc:7c:fd:0b:12:2c:09:2d:94:91:32:
8b:c4:7f:c3:2b:51:05:50:d7:75:e1:7a:fd:4e:ef:
ae:b1:1b:d8:c2:95:cb:82:13:d2:00:9c:ba:16:16:
0a:c0:a9:b9:b1:1e:19:fc:a0:71:c6:10:29:de:1a:
58:f0:f4:26:d0:4a:e6:36:cf:52:1f:ed:4d:9c:4b:
8c:b2:32:c5:29:10:94:02:7d:92:7e:61:1f:b8:51:
39:bc:a1:e3:82:af:8c:85:6f:35:39:a1:4f:bd:d7:
27:59:69:51:ae:de:a0:c2:0b:88:98:ca:95:1e:bf:
ad:0c:75:1d:f5:06:2a:45:57:8f:23:7a:8a:d0:d4:
ac:d0:4e:4a:e6:98:9c:5d:0b:6f:75:7b:ed:8a:7e:
e1:8a:91:49:1f:28:36:43:16:b4:03:b4:79:f3:50:
dc:da:c4:96:c1:f5:5e:bb:66:93:26:96:07:6c:19:
68:53:52:39:01:2b:29:7e:dc:b3:ec:63:a9:9e:13:
ee:14:d6:c0:77:4f:ae:74:22:25:54:a7:bf:82:b4:
4a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:A2:EA:55:7B:42:A9:FD:3A:80:21:15:06:19:3C:2B:33:89:DC:6F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/31315c-81a4-4969-8571-d76346a7adc6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/31315c-81a4-4969-8571-d76346a7adc6/1/NKLqVXtCqf06gCEVBhk8KzOJ3G8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.193.191.0/24
IPv6:
2a13:e600::/29
Signature Algorithm: sha256WithRSAEncryption
83:26:a8:74:03:0e:99:3f:5c:6a:c1:91:31:b1:ac:d0:07:ae:
bb:28:5d:b6:e1:2f:8b:20:90:0d:da:05:91:20:c7:2f:90:db:
d3:b9:b9:18:2a:c1:4f:bb:df:58:4f:4a:80:dd:35:7d:f7:a7:
0e:41:aa:82:58:b3:67:f8:da:74:cc:55:45:4e:5d:26:93:d8:
bb:06:39:a0:e3:0a:92:75:c8:19:4e:a2:92:7c:11:1b:5b:54:
cb:67:6b:c9:8e:51:65:e6:40:e6:37:a6:b4:5b:61:37:5c:58:
94:a2:41:30:a9:4d:9f:4a:2d:bf:9f:90:42:65:ca:04:b8:a9:
65:6f:e4:9c:65:1d:ba:34:5f:b9:47:b8:33:92:8a:ef:69:0f:
85:e0:ed:99:64:d1:f4:bf:d4:84:84:03:a7:99:58:b9:76:b8:
49:24:1e:3d:99:40:69:1a:bf:90:73:e9:c2:30:2d:45:de:43:
de:5a:76:89:78:bd:25:27:50:1a:8e:5a:29:cb:41:b6:d9:7b:
dc:a7:02:83:d2:88:7c:35:a3:7e:e1:d3:2f:20:16:c7:4b:bb:
b2:3e:69:ed:60:e0:00:6d:8e:6d:6e:77:ad:37:c3:5b:20:79:
e7:1a:90:4a:d5:cc:c1:31:fc:94:67:5b:2f:33:75:e3:66:4c:
2f:8b:a3:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 19:20:47 2024 by rpki-client on console.sobornost.net