Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/R-Bd8kcXTNNQsa83gzMnx3Arj_8.cer
File: R-Bd8kcXTNNQsa83gzMnx3Arj_8.cer (raw, json)
Hash identifier: i3gOsxRGPIq2dqloJf8CGeWxh+0dxv0BZVpsFdm+lQU=
Subject key identifier: 47:E0:5D:F2:47:17:4C:D3:50:B1:AF:37:83:33:27:C7:70:2B:8F:FF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA1491BBF75C024216D2767106D018
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:47:50 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.59.178.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:14:91:bb:f7:5c:02:42:16:d2:76:71:06:d0:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=47e05df247174cd350b1af37833327c7702b8fff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2d:94:9f:c5:8e:7b:0d:02:22:ff:4a:ec:c3:
0d:4c:a5:97:a6:30:02:7c:05:3b:23:66:b3:e2:fc:
2e:b8:3e:80:f3:64:81:a2:9b:4d:63:0c:67:25:e0:
4f:f5:7b:00:e7:95:7b:d2:d0:73:02:76:43:9d:c0:
34:29:de:46:e8:c4:ff:e4:b7:59:68:f2:f2:5b:e9:
01:7c:6e:12:14:93:3b:3e:3b:20:eb:65:f6:c0:fe:
e5:f7:bf:71:39:49:ef:38:af:9d:8c:78:49:79:a0:
9b:b1:4a:cd:46:0f:27:75:df:5d:0d:21:4b:e0:72:
3e:1d:aa:9e:af:01:05:27:b3:ed:ae:74:09:00:aa:
c5:03:71:e2:73:aa:76:c3:cf:2a:f0:a2:78:e9:5b:
11:3c:46:48:68:fa:de:92:46:d2:40:23:e4:37:21:
ff:63:29:9c:c6:b8:f2:07:d6:f3:88:0e:b2:e9:ea:
08:7d:60:1e:8a:74:b4:77:69:46:6f:92:3c:31:09:
4d:36:f7:1a:b9:bb:da:ae:f7:52:22:b2:4c:b6:28:
60:b1:f7:3d:96:e4:c9:5f:25:cc:57:fe:6c:c7:e2:
29:de:bd:e4:78:63:c2:70:0f:ef:e3:90:43:7d:d7:
ac:79:ba:97:e4:68:8f:8f:d8:07:ce:fc:e0:d4:a5:
77:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E0:5D:F2:47:17:4C:D3:50:B1:AF:37:83:33:27:C7:70:2B:8F:FF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/38c2e1-8a3f-40b1-8353-aec96f431018/1/R-Bd8kcXTNNQsa83gzMnx3Arj_8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.59.178.0/24
Signature Algorithm: sha256WithRSAEncryption
63:5e:df:53:a1:b8:49:b6:48:8b:e0:93:71:df:06:50:9f:78:
9f:96:c8:1d:6a:5f:30:de:40:a8:8c:c9:ad:d3:09:82:6d:2a:
92:4f:46:bd:08:06:ad:d7:d7:89:e8:4d:ef:23:8d:56:a0:b1:
de:3e:41:c3:3f:3a:c2:c1:97:7a:a8:03:3c:b7:4b:af:e0:f5:
06:75:3c:59:f6:89:24:96:f7:8a:b5:2a:50:7f:12:5b:b8:d3:
a9:b1:df:db:2d:7b:46:19:7f:82:6c:6c:ff:70:4f:d7:16:ba:
e2:de:b6:96:98:d3:49:fa:d2:a4:af:60:a4:1b:46:0e:36:82:
4c:94:24:86:8b:cd:6e:75:b2:79:95:35:87:ec:49:79:80:d1:
bc:be:e0:ba:9b:98:fa:2c:dc:17:d7:5c:10:9a:3f:af:53:2d:
86:eb:9d:ff:7d:4f:cd:47:13:b1:0f:9d:08:71:de:c8:4e:ad:
03:d3:a8:b3:e7:d5:78:1c:19:c0:fb:3e:91:4a:6c:73:62:29:
f9:47:16:e6:56:92:69:af:33:e2:b4:9e:b0:7c:fa:68:d9:4e:
b9:dd:44:cc:50:57:68:5f:bf:fe:9d:2d:a4:29:41:b2:1d:64:
85:1f:e8:11:7f:1d:e9:50:78:61:07:f2:91:bb:34:e6:0f:43:
d9:9b:c2:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:56 2025 by rpki-client on console.sobornost.net