Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer
File: Ps1TxmQkw_Npyojuevdq2yXhhFE.cer (raw, json)
Hash identifier: JP7txqYEXWz5zZSaq6aJsvLkwHH07Hg3wbn4rjLqzik=
Subject key identifier: 3E:CD:53:C6:64:24:C3:F3:69:CA:88:EE:7A:F7:6A:DB:25:E1:84:51
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942068751B9F9EF03D78AE76B933ABBC56
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:48:24 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 87.120.208.0/21
IP: 87.121.28.0/22
IP: 94.156.254.0/23
IP: 176.56.192.0/19
IP: 185.159.86.0/24
IP: 185.251.18.0/24
IP: 195.211.49.0/24
IP: 2a0b:d40::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:75:1b:9f:9e:f0:3d:78:ae:76:b9:33:ab:bc:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3ecd53c66424c3f369ca88ee7af76adb25e18451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b1:b9:ee:2b:4a:17:94:66:00:4e:2e:78:f5:
09:2c:6a:e7:83:2c:30:37:bd:96:84:4e:cb:fe:c4:
53:45:05:5f:b3:2d:ba:69:ea:ee:8e:30:30:a6:2d:
a9:d2:8e:39:de:cd:19:0a:e0:8a:f4:07:4c:d5:62:
cc:1b:56:b2:df:43:8d:b5:f2:31:67:9f:8d:66:01:
eb:56:fa:e6:11:b5:e0:7b:51:2e:de:16:84:a8:95:
7d:90:c2:8c:88:16:f0:63:81:ab:85:6a:c3:ea:f8:
ac:bf:c6:ea:b7:2a:4b:b1:98:78:9b:50:7e:7a:47:
3f:a7:37:6c:1d:1d:e2:cf:76:d9:3a:06:53:60:6e:
fa:1d:2d:a4:b3:f8:09:ee:6d:7a:55:f6:8b:72:28:
cb:c9:6e:30:ea:b9:f3:01:68:dd:6d:62:4b:15:c9:
d9:db:d7:16:a0:e3:20:79:e7:b7:bc:32:6b:80:9f:
fc:bd:f5:60:c2:c7:20:34:da:0d:ec:64:13:f3:76:
0a:4f:b0:bf:92:23:75:e2:ec:50:db:3b:59:2b:6b:
db:1a:eb:a7:60:59:1b:1d:3a:ac:36:d0:d6:e1:38:
f4:a5:eb:be:51:18:8c:43:48:7d:7a:6e:d0:e2:b9:
21:71:b7:1d:db:12:8f:99:78:e1:66:22:12:89:68:
88:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:CD:53:C6:64:24:C3:F3:69:CA:88:EE:7A:F7:6A:DB:25:E1:84:51
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.208.0/21
87.121.28.0/22
94.156.254.0/23
176.56.192.0/19
185.159.86.0/24
185.251.18.0/24
195.211.49.0/24
IPv6:
2a0b:d40::/29
Signature Algorithm: sha256WithRSAEncryption
53:6d:52:9b:32:ed:95:7c:87:4f:38:cd:d8:0a:cc:88:8a:f2:
6d:5f:81:4b:15:fc:a7:21:b0:cf:e7:ee:e3:bc:ed:96:b9:f1:
dd:67:b2:3e:45:3a:35:b6:6c:21:58:9a:83:69:68:60:64:71:
a7:24:6c:84:8d:aa:cc:2e:53:53:31:19:51:54:b8:26:73:c0:
64:2b:21:db:82:62:ff:78:55:12:52:8d:4e:a0:b8:c5:21:e0:
01:f3:7b:10:57:a4:7f:87:e4:d3:cb:8f:e7:68:b3:b1:f7:77:
63:4d:ee:66:32:28:d9:fc:a0:12:bb:f3:bc:24:79:37:ba:c4:
11:5b:89:2b:81:43:f3:78:b2:49:53:21:9f:bf:2c:04:80:e7:
0c:c5:64:41:0d:2e:da:e1:ab:32:3d:50:82:67:74:63:53:8e:
8b:fa:00:6b:ba:db:af:7c:9d:62:78:dd:65:94:d5:28:41:d3:
d1:ae:22:86:5a:31:ba:00:82:38:75:8d:be:6b:e6:4b:bb:cb:
05:a4:ce:ed:97:6a:0c:06:f9:0e:72:f1:31:07:55:1e:28:39:
16:c4:db:30:16:9c:26:72:5b:ec:74:79:39:b9:2e:82:31:53:
aa:46:e3:e0:28:fe:b2:78:89:26:e9:eb:85:a2:a7:5e:32:da:
0f:59:fd:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:53 2025 by rpki-client on console.sobornost.net