Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.cer
File: Q6Q4gTdQEz5VABv4lnCg2zrlvh8.cer (raw, json)
Hash identifier: kpPxFonHeOzE6V4SrAfZEyd7TdoP/xSNY9lyQfT8IY4=
Subject key identifier: 43:A4:38:81:37:50:13:3E:55:00:1B:F8:96:70:A0:DB:3A:E5:BE:1F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B21212110CC43BD63273224AAB384F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:25 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.50.177.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:12:12:11:0c:c4:3b:d6:32:73:22:4a:ab:38:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=43a438813750133e55001bf89670a0db3ae5be1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:cc:c6:c5:d6:83:6e:1c:af:e9:19:22:52:10:
15:a6:20:87:5d:7c:2d:0f:62:fa:be:3d:6e:c7:ff:
61:ff:1b:f5:44:cb:e8:15:7a:cd:e4:c4:26:d2:49:
f4:8b:15:09:f2:3d:00:be:ef:e3:dd:26:72:11:14:
0d:c1:f3:7b:fa:63:27:0f:eb:be:59:8c:a2:f9:1f:
ab:ae:83:80:e6:d6:59:fc:70:c6:95:f9:b4:11:c9:
00:8d:3f:76:21:a8:03:c1:e0:3f:83:20:53:b1:a5:
45:c0:a6:fc:15:87:d0:1c:b0:48:4b:2b:d7:96:6d:
1d:bc:d3:17:54:94:0f:e0:44:8c:4f:ea:72:5b:b4:
99:25:d9:77:8b:df:d2:84:8b:4c:25:2b:52:cc:0a:
4b:dc:3f:cf:30:d8:22:84:16:9c:65:c0:c9:96:68:
0e:d2:12:99:0a:fd:f7:0c:e3:07:fb:d0:05:e1:be:
6e:ba:61:28:77:d7:3b:85:49:2d:55:b2:94:d5:59:
ad:04:98:70:b3:86:d9:4c:fb:27:c0:9a:3c:26:59:
98:79:1d:23:21:5a:a6:a9:f4:e4:11:53:c5:5e:d4:
28:70:b0:af:70:23:14:97:5a:68:c0:a9:66:1f:c7:
55:1f:35:57:0d:78:d6:68:d7:35:53:db:68:91:db:
81:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A4:38:81:37:50:13:3E:55:00:1B:F8:96:70:A0:DB:3A:E5:BE:1F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/5cb473-35a1-4727-8773-a0d6f0eeb5c2/1/Q6Q4gTdQEz5VABv4lnCg2zrlvh8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.177.0/24
Signature Algorithm: sha256WithRSAEncryption
73:5e:e4:1f:e6:d1:8e:8c:04:da:6b:02:5a:dc:af:a1:6c:e5:
63:ec:48:5a:68:95:f9:5a:e8:93:e3:e7:55:b3:3a:70:6f:58:
31:e3:75:42:03:a3:00:65:18:f0:b9:44:c6:5c:64:a1:da:f4:
76:4d:16:dd:13:d1:a9:83:b5:4b:fb:45:88:54:23:41:dc:7c:
93:c2:c9:d3:6f:21:49:83:88:68:24:1d:c9:4f:30:42:1a:93:
19:9a:aa:87:83:ce:90:59:86:c6:e9:0e:1e:49:d3:c2:e9:4b:
53:32:25:8a:40:45:7c:93:c9:e0:ec:98:ce:b0:69:81:0d:04:
fb:f0:e4:be:86:e8:87:2a:b8:fc:63:82:95:69:2a:57:6f:2a:
d5:9a:fc:79:74:be:b8:82:b7:55:66:7e:78:cf:16:d9:56:df:
2a:dd:95:a7:7d:94:39:50:e0:bd:c5:1e:d5:12:27:4f:e0:8e:
49:ef:46:32:41:5a:c3:81:c9:11:51:6c:77:91:3c:e6:2b:ec:
db:d3:3c:75:72:d4:26:bf:76:db:ae:e7:73:91:c7:73:81:68:
87:97:ff:4d:6a:34:5f:9b:e1:88:be:1e:d4:ff:66:08:4d:a1:
71:c2:93:ac:ed:a7:1a:ab:d7:ff:d6:80:39:62:7f:2b:fb:00:
25:18:f5:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:54 2025 by rpki-client on console.sobornost.net