Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YTfS_L1DpR5TG8mL-rXq9xkAkK8.cer
File: YTfS_L1DpR5TG8mL-rXq9xkAkK8.cer (raw, json)
Hash identifier: UJF5VAHGx5D//ltk+NuqQq8GKL/f6mm1uVXhTAdXSgw=
Subject key identifier: 61:37:D2:FC:BD:43:A5:1E:53:1B:C9:8B:FA:B5:EA:F7:19:00:90:AF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427479157181717BF9DA25319AA0504B6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:49:49 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 195.200.77.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:91:57:18:17:17:bf:9d:a2:53:19:aa:05:04:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:49:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6137d2fcbd43a51e531bc98bfab5eaf7190090af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0c:2e:76:a4:d5:24:e2:11:fc:45:19:d4:e7:
29:ae:b6:f1:0f:e0:0d:66:5f:58:5c:6d:88:40:cd:
ce:cb:7c:f8:a7:cb:b5:d3:64:12:3e:09:98:11:81:
12:f0:30:d9:40:0d:68:ce:88:04:84:95:24:de:84:
31:8e:96:ce:7e:f1:48:58:11:4a:ba:34:64:89:6b:
8d:78:d7:f4:57:a1:09:48:2a:f1:ac:7e:7e:53:6a:
4e:21:07:6b:12:54:05:ad:e8:ee:92:11:d8:8b:9c:
6d:33:27:da:10:63:59:29:c2:33:66:4b:41:95:52:
b6:5c:0a:1e:aa:e4:57:ff:97:17:31:f0:a0:e1:d3:
1f:05:4e:c0:64:eb:62:c3:2f:41:41:a7:e4:99:94:
7c:be:92:12:a5:1c:c8:03:be:c2:a3:f1:b7:22:46:
c9:a5:fd:43:f2:1d:26:0a:21:44:3d:d0:88:c4:bd:
15:cf:d2:3a:1a:e1:93:1e:d6:2f:da:9f:6b:7d:d2:
ef:da:98:54:c7:b0:53:91:11:f2:72:b7:bd:10:c5:
32:d1:88:a8:ff:fb:58:e6:7e:80:1f:cf:19:08:ad:
1c:76:2d:ec:ef:64:fd:4c:65:3c:a5:9b:92:78:aa:
98:0c:58:32:16:8d:2e:42:10:fe:db:e2:e3:e1:0f:
8d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:37:D2:FC:BD:43:A5:1E:53:1B:C9:8B:FA:B5:EA:F7:19:00:90:AF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e29ff2-8e63-4e6c-8aff-732653c4fe2c/1/YTfS_L1DpR5TG8mL-rXq9xkAkK8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.200.77.0/24
Signature Algorithm: sha256WithRSAEncryption
56:af:92:5b:51:fc:b8:c8:f9:ce:b8:d2:6b:c5:b4:13:8a:e7:
dd:58:a2:50:e1:98:00:7d:3e:1f:56:d7:ff:37:d5:3c:56:e7:
ae:77:c9:93:d3:63:f6:d1:33:99:f1:c2:94:b4:c7:69:5d:94:
24:80:bf:be:9a:3a:49:84:a3:3d:4f:2e:1a:28:bf:16:56:e9:
f0:bf:4f:15:7d:fb:41:98:1f:e5:c3:25:30:84:27:40:b4:8e:
04:e5:01:e9:c4:7d:b6:52:ed:dc:ac:c9:56:7e:9f:3d:92:69:
51:bb:3d:28:a5:05:2b:5a:32:3a:23:77:04:a4:58:b2:41:87:
a0:c5:be:74:d1:3f:f4:8e:2e:4d:19:0b:23:7f:fe:17:85:10:
14:35:d6:b9:33:80:40:5b:3f:b3:96:6b:0f:95:56:49:b5:40:
cd:78:de:ba:bb:fd:16:a7:17:7e:80:50:95:5b:06:81:bb:46:
40:91:42:05:f9:cc:90:80:03:d8:b8:fe:19:65:e6:e8:28:f2:
8a:ae:1d:ec:7c:36:11:83:f0:a8:9e:fb:fe:07:f6:c5:b5:a3:
55:13:99:ab:f8:6d:fb:fa:6b:8e:5a:49:5d:d0:41:75:8f:ea:
cb:62:d6:0c:a0:69:2a:f0:46:d6:0b:d2:33:04:97:a6:32:20:
02:f2:5f:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:14 2025 by rpki-client on console.sobornost.net