Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/TmROKYPFxQTYAPLQWCsYLrq_JIc.cer
File: TmROKYPFxQTYAPLQWCsYLrq_JIc.cer (raw, json)
Hash identifier: Pr2BQ0cyEZ3oof1XfGDCrqYsmYU70YdIoY2EEev1VGU=
Subject key identifier: 4E:64:4E:29:83:C5:C5:04:D8:00:F2:D0:58:2B:18:2E:BA:BF:24:87
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942369E9151A1F9716F9A77D381CCF0F09
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:48:51 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.135.190.0/24
IP: 216.170.113.0/24
IP: 216.170.115.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:e9:15:1a:1f:97:16:f9:a7:7d:38:1c:cf:0f:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4e644e2983c5c504d800f2d0582b182ebabf2487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:92:90:51:eb:b5:f7:62:50:ce:7f:a7:4f:97:
e2:33:bc:e2:95:bd:5c:25:2c:ef:f7:2e:53:46:15:
23:cd:35:e6:c0:5d:06:b1:94:44:56:bc:fe:c8:1c:
c2:4c:48:48:59:0a:db:d2:88:91:0a:cc:bd:10:d2:
5b:87:4d:1f:df:0f:13:e5:b0:53:1b:7a:52:34:86:
5a:83:6d:1d:b0:7b:6f:15:d5:09:b0:b2:a3:92:5c:
5c:6c:0b:3f:73:41:07:85:29:fc:05:a2:db:d1:b7:
23:76:74:7c:f8:d9:fa:c4:d0:61:ad:76:f9:d0:e5:
2d:36:3f:0b:50:f5:55:a5:72:82:e8:1d:42:9b:96:
df:d1:79:02:ad:30:b5:96:b8:d7:b7:6c:3d:34:8f:
39:32:81:cd:11:8e:b2:69:0b:db:f1:a7:c8:29:9b:
ce:49:b0:e8:c9:9f:12:1c:fd:79:c8:9b:44:64:4a:
00:85:00:36:22:90:58:b5:d5:1a:39:c3:ee:c4:14:
92:b3:a0:c7:66:80:e6:ce:c3:6d:86:bc:e5:00:33:
4c:03:5a:63:04:af:0c:87:08:6d:2c:a0:c3:1a:bd:
0f:d2:ed:b9:a8:87:a9:28:42:e4:f7:d1:0e:fb:87:
46:03:32:e6:19:24:b5:6d:15:c7:57:39:c9:85:32:
8c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:64:4E:29:83:C5:C5:04:D8:00:F2:D0:58:2B:18:2E:BA:BF:24:87
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.135.190.0/24
216.170.113.0/24
216.170.115.0/24
Signature Algorithm: sha256WithRSAEncryption
65:72:21:43:97:b3:81:c3:f6:da:47:cb:6e:0b:05:d9:38:88:
a9:24:48:14:36:bd:80:fe:dc:53:d1:c4:3a:8b:fc:2c:4a:24:
d7:e0:27:45:a5:7f:f7:68:4b:17:0e:2d:b0:ef:02:04:3b:ca:
ee:bc:93:75:1a:29:20:7e:cc:33:ac:6e:8e:89:36:05:fb:16:
1f:a9:fd:eb:d7:68:a5:5f:ce:c6:15:33:4c:23:90:b5:32:81:
8c:d1:41:be:87:e3:e7:ea:3d:18:a2:76:78:37:48:66:5f:a1:
c0:24:c7:51:6f:59:b8:43:46:a6:54:d9:cf:ba:66:8f:3e:1f:
21:92:95:3d:cf:8b:cb:a0:2c:d2:cc:12:bf:1c:4d:89:64:cf:
4f:70:f2:fa:61:2c:fe:02:0c:ec:d2:bf:0c:04:89:da:85:0b:
b6:21:05:ec:9e:76:99:11:60:b5:2a:64:09:47:fa:13:d5:4f:
20:7f:8e:f2:a1:ef:aa:35:33:b4:fd:f1:95:cd:5f:c3:95:5f:
d7:8b:c0:c6:6e:ac:f3:f8:63:20:4b:2b:42:d4:73:18:13:b8:
c4:3a:5b:77:13:87:3e:d2:a0:26:7c:57:c8:04:09:18:64:47:
e9:d5:1a:6d:29:85:7c:66:bb:5a:60:a8:64:4c:a8:c8:49:35:
74:4a:f2:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:02 2025 by rpki-client on console.sobornost.net