Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/XL1s2RrWpyhrIfZQn92fUP7nXYc.cer
File: XL1s2RrWpyhrIfZQn92fUP7nXYc.cer (raw, json)
Hash identifier: ZCxwiIITQEdgVE7/wou31YFMxjE/bJWJT0UoK07yuYU=
Subject key identifier: 5C:BD:6C:D9:1A:D6:A7:28:6B:21:F6:50:9F:DD:9F:50:FE:E7:5D:87
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194236910B24EFE1F0BB9E34272D4D4110A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8a/e0223a-31fd-4cac-8164-fba074ba1b90/1/XL1s2RrWpyhrIfZQn92fUP7nXYc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8a/e0223a-31fd-4cac-8164-fba074ba1b90/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:47:55 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 195.10.206.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:10:b2:4e:fe:1f:0b:b9:e3:42:72:d4:d4:11:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5cbd6cd91ad6a7286b21f6509fdd9f50fee75d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a2:a2:1d:62:0f:a6:e9:ed:b0:c3:57:fe:11:
e6:6f:83:51:b2:92:ed:8d:e9:4b:f3:55:f6:b1:91:
e3:fc:b3:45:e2:1e:f5:3d:3c:34:a6:96:a3:86:30:
e7:a5:ce:29:d5:a2:51:f1:67:4a:42:c3:5f:0d:19:
ae:2b:e8:e4:0a:a6:bc:5b:be:45:2f:1d:d7:eb:8b:
1c:1f:fc:11:c2:70:2c:66:4a:0c:be:bc:2a:d0:28:
db:39:05:b7:93:67:35:49:56:7e:e4:ab:5b:4d:af:
bf:57:49:79:f7:9d:87:26:f3:b7:58:6e:f7:bc:13:
aa:32:5d:15:4d:a9:6c:83:4a:3c:55:c8:13:97:04:
9f:e2:54:1e:68:1a:cc:48:58:04:15:38:2c:cd:fd:
e0:7e:93:7e:ba:7b:28:8d:11:1e:e1:af:3c:92:3c:
05:2e:03:0f:22:8c:48:9a:b0:2e:96:54:9c:0c:a1:
ba:9f:58:02:d3:31:3e:80:ff:b9:6d:7c:5b:9c:e1:
6c:41:2f:3c:5d:24:01:32:81:44:6b:36:29:ee:f0:
0b:87:3f:ad:0c:e4:fc:42:76:66:f1:d3:90:17:58:
3b:ae:8f:0b:5d:15:ea:41:e5:4a:83:32:d8:f5:3f:
1f:5d:f2:62:d3:00:95:e6:6d:ed:ee:94:3e:89:fa:
fb:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:BD:6C:D9:1A:D6:A7:28:6B:21:F6:50:9F:DD:9F:50:FE:E7:5D:87
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e0223a-31fd-4cac-8164-fba074ba1b90/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e0223a-31fd-4cac-8164-fba074ba1b90/1/XL1s2RrWpyhrIfZQn92fUP7nXYc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.10.206.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:68:c7:1e:7d:0e:0e:03:cc:86:fd:17:8d:cf:7f:fd:63:3d:
97:74:35:4f:07:ed:37:46:e9:42:87:70:7f:c9:15:45:23:23:
73:c2:5b:90:38:ff:0d:e8:49:b2:cf:29:ac:61:5d:f8:9d:d3:
be:a4:f5:7b:f2:30:01:ab:47:da:8a:1f:7a:f4:5a:f9:86:97:
46:96:41:06:af:92:4f:45:04:bb:3c:88:53:38:c7:4c:8b:f2:
0f:81:e0:6e:bc:8d:20:c1:db:48:da:a2:a7:b7:3e:2b:53:a6:
f8:df:4c:95:aa:e6:c2:d0:7e:98:24:31:3f:fe:7d:fa:4f:1e:
74:61:f2:76:b0:52:fd:a9:b5:c7:98:8e:e1:63:d0:40:f6:cd:
a6:e8:f2:16:3f:2c:d7:5b:8c:19:9e:a3:6f:30:f7:87:0e:48:
5f:1d:6a:a0:7e:0f:74:93:2c:1f:00:5a:0a:78:be:7a:84:49:
c2:41:63:95:2d:92:2f:7a:11:ea:07:01:18:25:eb:77:9e:9c:
4c:dc:2d:5a:c4:21:78:73:4f:19:1a:81:07:a5:e7:99:bf:9a:
3a:fc:e6:08:db:68:db:0a:e4:2a:6d:55:e8:bd:bb:b7:f8:a0:
66:8c:1a:d9:c9:cd:f2:59:55:6a:41:e2:6b:b2:03:b2:6e:67:
ba:0e:28:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:11 2025 by rpki-client on console.sobornost.net