Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TKha1Dt7R-dSh4MHGEeU1woCdmw.cer
File: TKha1Dt7R-dSh4MHGEeU1woCdmw.cer (raw, json)
Hash identifier: WEnsBH+gxmpI3W4wd8kOGQac29PSOsaENVVWPtQXdOg=
Subject key identifier: 4C:A8:5A:D4:3B:7B:47:E7:52:87:83:07:18:47:94:D7:0A:02:76:6C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01955D779228DC6A93E207BE89C67E7F6CB4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/20/2bea8f-9fbc-4765-93bc-222252929873/1/TKha1Dt7R-dSh4MHGEeU1woCdmw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/20/2bea8f-9fbc-4765-93bc-222252929873/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 03 Mar 2025 19:24:32 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.169.248.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5d:77:92:28:dc:6a:93:e2:07:be:89:c6:7e:7f:6c:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 3 19:24:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4ca85ad43b7b47e752878307184794d70a02766c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:86:21:2a:68:57:63:fc:27:77:cf:33:b4:13:
bf:67:70:be:2e:69:89:90:d6:0a:41:9a:25:a5:49:
59:e6:55:c9:24:f4:07:e2:b0:b7:a4:6f:d4:01:38:
c9:16:92:cf:1f:4f:84:b8:cd:46:33:78:dd:27:d7:
e6:f7:50:17:77:18:b8:a7:db:4e:42:f5:87:7a:a8:
9d:4c:15:1a:b0:75:81:d2:a7:07:68:df:13:f6:f0:
f1:ae:7d:71:ac:0d:8f:78:1d:19:6a:53:8e:13:e0:
9c:0f:ae:34:5d:d3:de:08:a2:68:32:f4:ef:22:45:
c7:1e:d1:8a:2f:17:98:4d:1a:6d:88:e9:6f:0e:1c:
10:94:4e:74:06:35:33:67:83:82:ce:eb:bb:5d:6f:
d2:59:79:53:58:f4:11:a0:a7:b9:ef:89:ad:90:78:
0e:61:b2:4e:57:46:59:4f:a5:cd:c0:0c:e3:18:92:
25:db:b7:de:27:5b:cf:78:fb:27:e7:72:de:5d:72:
75:15:22:62:25:74:20:7a:a2:bc:21:15:b2:8f:15:
be:be:61:76:c7:2a:cf:ba:24:3e:7a:b3:df:00:5a:
66:25:ec:de:74:5c:dc:15:a6:05:e5:fe:63:9b:69:
47:53:84:7a:4c:6e:22:1a:6c:9f:70:a2:cc:41:65:
8c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A8:5A:D4:3B:7B:47:E7:52:87:83:07:18:47:94:D7:0A:02:76:6C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2bea8f-9fbc-4765-93bc-222252929873/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/2bea8f-9fbc-4765-93bc-222252929873/1/TKha1Dt7R-dSh4MHGEeU1woCdmw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.169.248.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:f0:65:4b:22:8b:70:80:4a:50:db:45:29:71:03:3f:0d:b2:
29:0f:35:45:89:50:d1:6a:5b:28:26:c1:f9:55:28:c9:31:9d:
1b:95:ff:eb:b9:f6:e4:ff:ec:fb:9f:49:6b:67:4b:4c:4d:86:
4f:3e:0b:65:3a:dc:06:f4:03:a6:81:6b:1a:38:41:7e:1b:15:
9e:13:e0:47:82:4d:be:f4:8f:5f:d9:2c:71:c0:50:32:d7:99:
b7:60:04:cf:ba:d0:6e:34:d0:37:07:f9:b8:d6:7b:4a:a8:3e:
c8:e8:08:30:78:e7:d6:b6:ce:2e:1b:2f:e4:18:a2:96:2a:be:
9a:a2:6b:20:f7:e4:33:be:6b:79:8c:36:7b:5f:50:91:f5:df:
f9:d1:50:fa:d3:b2:0b:38:f2:83:c5:67:37:86:b6:8a:bf:52:
be:16:72:9e:f5:8a:5d:fa:2f:36:2e:3d:d1:82:e4:49:d5:0d:
12:55:fd:e7:72:1e:a9:dd:f7:95:85:71:e5:9b:e0:2d:16:05:
98:0f:0a:b4:c7:ae:1a:7e:7b:29:3c:c5:32:59:ab:09:c1:ad:
9a:0e:aa:23:d9:c1:f0:f7:9f:b0:29:04:5d:7c:5b:b4:ef:95:
b5:17:e2:d0:39:f2:48:1f:83:73:8d:da:ac:2d:3e:3a:cf:dc:
0f:08:2c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:01 2025 by rpki-client on console.sobornost.net