Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NeXw-_PWvzoWokvseAyw_W7fMec.cer
File: NeXw-_PWvzoWokvseAyw_W7fMec.cer (raw, json)
Hash identifier: 5LCxt94nMnJ7TZE/GVhJzX+HzY+SF3oeRtKBQrZv3UI=
Subject key identifier: 35:E5:F0:FB:F3:D6:BF:3A:16:A2:4B:EC:78:0C:B0:FD:6E:DF:31:E7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D793E87DA34A6ABF4B07EA01B58118
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:48:38 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 195.85.241.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:93:e8:7d:a3:4a:6a:bf:4b:07:ea:01:b5:81:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35e5f0fbf3d6bf3a16a24bec780cb0fd6edf31e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:df:06:63:bf:28:b5:0b:67:48:5c:32:72:0b:
32:58:8a:06:1a:1a:02:ab:0c:52:70:1d:4c:4e:2b:
32:33:8f:55:e2:dc:34:f6:6b:f2:7e:06:2f:b3:b9:
09:b2:a1:8c:cd:d4:cb:2f:5e:99:35:39:66:0c:ad:
c8:14:58:b7:36:10:83:78:37:18:b8:5b:8f:77:1d:
07:56:5a:8a:fd:9e:52:31:5f:62:ae:34:8d:ad:30:
53:4f:7f:6d:65:82:23:ba:8d:34:01:4c:4d:be:2b:
b4:47:40:23:8e:1b:0c:48:b0:79:09:b5:a7:12:7c:
80:99:4e:3e:46:fa:0b:97:83:8a:3a:81:7f:69:de:
ae:9d:a4:05:be:11:a8:ff:d1:df:74:21:1e:f8:53:
93:b9:51:5c:30:33:7c:ae:d7:49:43:01:2a:ec:e2:
d9:b4:a8:0e:0a:de:6c:0f:e9:77:ce:a8:68:50:72:
02:59:b8:35:1a:e3:15:6f:3d:03:69:ce:80:c3:d5:
ca:ae:14:0b:21:60:39:0c:cc:49:fd:37:d1:22:f1:
cf:44:ca:ad:23:8e:c1:3e:80:40:39:e7:26:12:09:
2f:40:d7:be:29:91:6c:f3:a2:1a:15:aa:14:d6:bf:
b4:7f:6f:51:ca:d7:ac:94:60:c4:f1:7b:d2:2c:b3:
dc:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:E5:F0:FB:F3:D6:BF:3A:16:A2:4B:EC:78:0C:B0:FD:6E:DF:31:E7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.85.241.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:24:23:f3:94:8d:a4:32:d8:39:86:e7:35:53:3e:4f:24:8a:
ae:50:a5:0b:99:32:24:94:d4:9c:e8:2c:de:91:1b:65:dd:3c:
5c:38:c7:83:82:cc:e0:80:5a:3a:b0:f3:9c:8d:8b:c9:b8:a4:
2e:05:38:88:e9:a6:dd:62:b3:29:b6:80:66:4e:1a:f0:a2:23:
8d:7d:4b:93:44:9a:ea:a7:72:2a:f0:5a:b7:4f:65:2f:c9:de:
88:b6:08:0d:d9:4e:3c:e3:80:e5:5c:05:8b:24:2e:28:35:9f:
65:4f:5e:68:da:8c:31:33:46:83:47:1c:2d:e8:99:db:b4:0a:
75:d7:83:31:8e:13:a7:ef:b3:4d:a2:24:d8:5e:30:b1:f9:57:
5f:a4:c0:07:ab:e9:c3:3d:34:e4:34:fa:62:9e:b5:29:9d:9b:
2e:3a:f5:4e:bf:23:6f:b2:fe:63:fd:af:5b:a2:43:23:4d:40:
93:53:e4:ce:d1:09:93:e5:79:66:35:c2:c5:9f:d7:67:37:25:
52:a2:0c:29:5d:9d:5d:53:f1:e6:f6:a6:dc:81:d0:2d:62:e4:
b8:10:c8:40:58:30:5c:41:a2:33:4f:49:1c:55:bf:b7:4c:ce:
52:8b:0e:55:f0:40:4f:59:a3:be:d0:b7:dd:fc:3e:d6:50:3e:
9e:0c:3c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:48 2025 by rpki-client on console.sobornost.net