Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PKH6vp8LPpd_jggpwL9fCHg4Rmg.cer
File: PKH6vp8LPpd_jggpwL9fCHg4Rmg.cer (raw, json)
Hash identifier: iw5drxy66AWTcS6CUXc4IDnF6XKJ2yFw5qcn7RYyoPo=
Subject key identifier: 3C:A1:FA:BE:9F:0B:3E:97:7F:8E:08:29:C0:BF:5F:08:78:38:46:68
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D616F958EED501C3236373333B73C8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:48:09 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.235.64.0/24
IP: 185.11.212.0/22
IP: 2a02:e780::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:16:f9:58:ee:d5:01:c3:23:63:73:33:3b:73:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3ca1fabe9f0b3e977f8e0829c0bf5f0878384668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7c:87:ba:fd:1e:90:ea:2c:3b:05:16:84:14:
d1:66:56:8a:47:91:1c:88:ff:54:02:3f:25:45:c4:
c3:e2:a4:9b:7f:9e:4a:ab:ab:3e:d8:f7:c4:fc:2f:
e5:51:97:79:4e:c5:1f:d1:8e:47:6f:db:e6:d1:8b:
9c:36:c9:c5:fd:7a:20:a2:25:cf:4f:42:57:9e:1f:
10:a1:94:b1:c6:17:31:76:8b:a7:25:8b:7d:e8:c2:
34:73:32:7b:20:d0:a0:1c:31:34:a8:1f:95:13:73:
6f:88:38:39:18:50:42:3b:fa:05:07:41:23:e5:c5:
e7:b6:af:54:46:f6:68:90:a0:37:57:55:3b:67:3c:
cb:93:25:0d:5c:55:5c:ab:d2:65:cf:8d:83:17:03:
04:e7:58:8e:67:da:31:31:73:d9:b5:ff:2f:6e:08:
05:b7:ed:f3:65:cc:b2:23:b1:28:89:fa:16:8a:3a:
51:9a:cd:8f:f7:ac:48:70:5f:1b:83:58:9b:66:9b:
21:e3:a8:d5:e0:c6:d6:05:f9:93:b8:64:de:6d:71:
45:74:2e:67:84:75:bd:7a:be:3b:18:10:e8:95:10:
a4:20:e6:31:66:44:50:a7:51:e8:11:b4:b1:cd:db:
1f:3e:bc:c6:db:c6:5d:a5:e2:17:73:a8:a2:26:31:
6c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:A1:FA:BE:9F:0B:3E:97:7F:8E:08:29:C0:BF:5F:08:78:38:46:68
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/f7fe9b-69ae-4206-8d66-f660a57e2dd5/1/PKH6vp8LPpd_jggpwL9fCHg4Rmg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.64.0/24
185.11.212.0/22
IPv6:
2a02:e780::/29
Signature Algorithm: sha256WithRSAEncryption
30:a2:ee:c7:85:1a:3b:a1:91:44:49:75:3c:4f:c3:fe:ae:42:
22:ca:89:e7:f1:6e:1f:58:c3:52:59:d5:ff:f9:a8:36:a4:92:
46:d5:64:df:85:50:19:ec:51:95:d2:ce:dd:42:70:d2:0e:8a:
11:2e:9c:af:be:28:56:70:60:66:b5:a5:04:1d:7a:c8:71:1a:
d2:83:f0:80:81:a7:58:55:ca:35:b5:8f:27:1d:1d:fc:9b:5e:
3e:5b:82:e2:8f:a5:c4:96:ca:70:6e:06:7a:4f:08:41:8f:eb:
46:e8:ea:d3:97:98:c8:f0:72:42:a8:44:19:ab:e6:19:03:b8:
e6:b8:28:9b:ff:d8:a1:46:3e:e8:ad:3f:4f:55:9a:17:e0:30:
54:08:f8:b1:7d:b1:fd:14:e5:e5:1d:f6:67:35:42:5c:17:18:
e3:fd:1e:cc:b9:f2:d2:2d:4d:5a:f6:9c:95:ad:d4:85:62:7a:
28:76:ba:02:34:41:63:3b:f2:30:4a:43:3b:19:59:d3:a5:c1:
11:4d:ae:83:c4:08:9f:f8:42:54:7f:d9:10:2c:54:a1:93:1d:
d9:e5:6e:5d:55:50:6d:e7:0c:dc:7e:d9:6e:51:f5:7f:8d:bc:
c6:1c:ba:ad:3b:4d:a1:65:a3:f8:d2:1e:6b:83:75:6d:a4:4f:
40:87:7c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:52 2025 by rpki-client on console.sobornost.net