Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RmI6xd-e7899JPMXx7aUKX5PNio.cer
File: RmI6xd-e7899JPMXx7aUKX5PNio.cer (raw, json)
Hash identifier: cxacAGNiWmyeZGfsHNIQYEBf1lLL/X1sKg9PxSZX9X0=
Subject key identifier: 46:62:3A:C5:DF:9E:EF:CF:7D:24:F3:17:C7:B6:94:29:7E:4F:36:2A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942521AD104A0938F168F9889CD8CA9A11
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/RmI6xd-e7899JPMXx7aUKX5PNio.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:49:11 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 195.191.96.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:ad:10:4a:09:38:f1:68:f9:88:9c:d8:ca:9a:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=46623ac5df9eefcf7d24f317c7b694297e4f362a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f7:b1:c4:e4:fc:b2:6d:2d:29:f0:18:55:81:
ab:09:92:56:2e:46:18:77:b9:50:3d:51:31:8c:17:
85:24:70:16:b4:56:04:76:68:cc:b2:29:ec:07:22:
ef:8c:ca:97:28:b2:6e:db:84:b4:70:e0:e1:cb:4a:
79:ee:b2:cf:ca:b0:b8:6c:ef:aa:ae:fd:99:9a:e0:
1f:80:c3:cd:bc:b8:8f:7b:59:0a:23:ab:54:ba:17:
25:33:c4:d6:66:7b:8e:6f:e4:c6:5d:48:84:2f:20:
b5:49:3f:c5:2e:50:be:ab:9e:7d:26:e2:f2:dd:15:
ff:49:8d:c2:0b:a6:da:ac:1d:0a:59:9b:31:8a:a3:
d1:ee:87:ab:32:13:7d:7d:86:b2:ed:1b:c3:fd:e4:
c3:5f:1c:12:4e:ba:35:ad:d9:07:6e:0f:8b:1c:62:
2b:4b:a3:3d:e1:78:4e:57:79:be:7e:c9:db:7f:2c:
49:24:f3:66:9d:55:ee:bb:f3:9b:a4:2e:5c:ad:01:
95:01:d9:b5:4e:75:d9:64:f8:92:4c:66:8e:60:a1:
31:1c:36:0f:70:41:86:6c:1f:9b:58:71:e2:88:73:
87:35:6d:f2:4e:bb:8f:9e:d2:7a:b2:b3:c1:09:7b:
7f:1d:93:58:6f:16:d6:a7:d3:ff:20:5b:28:e9:df:
ca:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:62:3A:C5:DF:9E:EF:CF:7D:24:F3:17:C7:B6:94:29:7E:4F:36:2A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a713e0-d164-4fbb-b4ae-7a58ba3ddf43/1/RmI6xd-e7899JPMXx7aUKX5PNio.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.191.96.0/24
Signature Algorithm: sha256WithRSAEncryption
18:f1:00:1f:5d:39:66:04:41:9f:98:28:6f:f3:a5:4d:89:ab:
17:c6:ec:bb:d2:44:12:2a:52:64:47:d3:66:bf:fb:c1:94:85:
2d:e3:f9:d3:58:d7:8e:70:61:55:ef:61:67:67:80:5b:a5:d8:
e4:63:82:65:84:a8:22:fb:5e:59:6c:70:3a:8c:eb:d2:fa:77:
a1:5b:0f:0f:16:86:c8:0d:7b:49:d6:c7:96:41:8c:dc:48:50:
dd:67:96:d4:cf:bd:8d:d0:8c:cd:fa:32:74:28:0e:74:35:4f:
1d:69:62:ab:f2:d8:14:11:f9:f1:e2:d4:2a:2d:7f:50:12:3e:
ff:ca:99:29:39:ed:59:d4:ac:ef:f3:9c:56:1a:13:b6:c6:67:
4c:10:3a:45:0b:85:e9:75:79:cd:8a:c9:b6:cf:18:75:33:16:
6c:b3:c2:7c:53:1f:a8:7e:be:23:77:dd:7a:93:df:ff:1d:33:
db:fe:93:23:5e:ce:2a:18:62:bd:9c:40:09:6b:45:58:3b:31:
43:c7:82:5b:e8:92:7e:4e:3c:97:93:10:80:59:c2:a3:a5:72:
20:8e:11:5b:52:6b:3a:d8:85:a9:46:20:0b:72:44:3b:fa:8c:
9b:de:8f:3f:45:6d:c3:c6:d4:75:f4:54:60:67:e6:a3:33:e6:
4c:91:38:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:57 2025 by rpki-client on console.sobornost.net