Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/S-CVOnswPWoemgKHFgwvRg8H8iY.cer
File: S-CVOnswPWoemgKHFgwvRg8H8iY.cer (raw, json)
Hash identifier: P6hPbXCPnO2txatAaJQw6MySFNThXljjV+4Mw9pNtRo=
Subject key identifier: 4B:E0:95:3A:7B:30:3D:6A:1E:9A:02:87:16:0C:2F:46:0F:07:F2:26
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942144360F23DFD74924B9C13F6F2D392D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:25 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.105.9.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:36:0f:23:df:d7:49:24:b9:c1:3f:6f:2d:39:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4be0953a7b303d6a1e9a0287160c2f460f07f226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:47:d6:3e:ee:80:5e:70:2f:42:f7:f9:e6:68:
18:a2:d3:ee:c0:f6:22:81:b4:ca:0a:63:7b:b1:45:
4d:f9:a5:ae:4c:51:04:2a:b4:74:43:c5:b4:13:b9:
bf:0c:ea:71:98:03:f0:8e:f2:76:f2:14:54:2a:20:
06:59:8b:d3:27:5a:ff:7a:5d:2e:2a:5e:68:26:b4:
fd:fd:19:8f:80:65:5e:82:cc:fa:af:cd:11:5d:ae:
71:f8:a9:a9:44:28:11:01:1b:3d:47:82:51:c7:2a:
0d:8e:0d:f3:de:39:9a:44:e1:e7:95:fd:43:67:e9:
57:35:a6:c4:bf:90:e4:61:52:d1:b5:e7:77:1c:52:
26:a7:02:4f:f7:0c:60:db:6a:b5:bc:35:02:b0:c1:
70:7b:60:11:eb:57:aa:bf:9f:35:ba:79:85:12:9a:
21:13:34:5b:79:d1:70:b7:39:38:41:c4:96:dc:44:
b9:9f:f0:d7:8e:47:0e:f3:70:aa:97:32:aa:52:3c:
39:e2:4d:90:9a:28:c5:5d:22:88:bc:36:df:8f:f8:
c4:01:e8:65:8a:d7:fe:db:49:d6:d0:b9:0e:43:d9:
80:12:c5:f3:a7:75:d1:cb:b9:a7:b0:f0:ba:3c:80:
0c:e0:ff:7a:96:7f:09:97:fc:76:40:91:fc:da:2b:
3a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E0:95:3A:7B:30:3D:6A:1E:9A:02:87:16:0C:2F:46:0F:07:F2:26
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/e45c52-171f-4c5c-abe8-ee96d0df0003/1/S-CVOnswPWoemgKHFgwvRg8H8iY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.9.0/24
Signature Algorithm: sha256WithRSAEncryption
74:c0:cc:05:72:17:ee:cc:b8:25:20:05:59:4c:07:42:c0:50:
ee:4a:f3:f1:e3:f1:dc:78:df:ba:b9:78:d1:11:18:23:c0:ad:
44:ff:6c:cd:32:3d:6b:29:e9:09:a1:e4:52:15:9b:a0:13:14:
eb:88:02:75:43:aa:76:d5:77:37:93:dd:fe:b7:24:0a:3f:5d:
28:20:c0:f0:00:14:79:d5:2d:c0:43:39:60:b5:d4:7d:08:ac:
c0:c7:f6:97:62:21:3b:68:d4:17:5b:5a:6a:28:bc:d3:3b:85:
ff:f9:75:9e:4c:91:c4:b4:04:e0:60:15:5f:d7:d0:5f:69:5d:
c2:8f:81:96:15:05:87:57:92:e2:75:f7:31:e7:fc:69:7e:74:
a6:99:78:5d:43:d9:a2:f7:97:24:4f:d1:54:69:85:91:63:37:
7a:07:e3:a4:0a:aa:95:cd:ee:97:2e:2f:99:f7:d2:6e:43:ed:
c3:36:d2:66:ec:ef:14:4e:44:22:bb:17:00:3d:e7:b8:0b:12:
4f:d9:b5:a9:1e:5c:a8:d1:28:39:56:65:7f:72:4d:07:55:b8:
8c:a2:7f:50:1a:08:6b:3c:22:a9:5d:ed:bd:cf:38:ec:68:3c:
b6:c1:69:6a:bd:15:3c:cc:4d:16:ba:1b:3d:3e:e8:ca:fc:7b:
93:27:3b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:30:58 2025 by rpki-client on console.sobornost.net