Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Yg0Py0uU5BGo3iYgncFeMt-omqA.cer
File: Yg0Py0uU5BGo3iYgncFeMt-omqA.cer (raw, json)
Hash identifier: MwkavQqpS9rVqgdUGyYMmjLcKccXU3Hpr+26wOEv1/o=
Subject key identifier: 62:0D:0F:CB:4B:94:E4:11:A8:DE:26:20:9D:C1:5E:32:DF:A8:9A:A0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194A7F89692C9C0BB0623D381845902B865
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c8/6e12c8-9dd7-478b-9071-1423e4a07296/1/Yg0Py0uU5BGo3iYgncFeMt-omqA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c8/6e12c8-9dd7-478b-9071-1423e4a07296/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 27 Jan 2025 13:34:34 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2a0c:5440::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a7:f8:96:92:c9:c0:bb:06:23:d3:81:84:59:02:b8:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 27 13:34:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=620d0fcb4b94e411a8de26209dc15e32dfa89aa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:74:a9:a4:f0:20:d4:01:4f:00:1e:58:ae:1c:
3c:2f:8b:a5:68:c1:0e:9c:09:67:ab:97:8a:80:82:
0c:2a:16:c3:8a:62:a1:90:63:2d:a5:41:f7:12:37:
d4:7d:ca:26:d9:6f:43:de:23:f3:9d:07:cb:af:ea:
eb:99:3c:b6:2f:67:5f:a9:67:01:7e:07:37:40:c1:
90:2f:e2:bf:6b:20:78:c4:41:09:bf:93:29:b1:da:
45:64:9e:f3:a4:35:3c:56:e3:24:7e:f4:b1:db:22:
58:d3:db:87:41:28:3d:ec:54:3b:a2:75:58:5f:20:
94:c4:3b:fe:dd:15:0b:41:2f:41:20:05:f4:d1:54:
6b:e2:85:c2:38:24:bb:b6:7b:5d:b0:5f:45:3a:3e:
7c:df:b8:8a:4b:e5:03:12:54:6f:d0:d4:1a:5b:ab:
ce:a4:64:09:fa:65:ff:ab:67:38:89:b8:24:29:d0:
fd:33:a4:d5:f4:a5:f5:fc:47:6c:50:eb:2c:55:8e:
ac:d6:07:64:ca:26:79:43:f4:6a:f3:f2:be:ec:34:
5e:e0:49:29:15:93:16:11:fa:fc:5b:a5:e0:cc:c3:
2e:00:5c:2c:72:65:22:35:cc:4b:24:d7:1f:78:f8:
b5:e7:34:55:48:a9:0a:dc:3e:3e:3c:55:91:dd:cc:
c8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:0D:0F:CB:4B:94:E4:11:A8:DE:26:20:9D:C1:5E:32:DF:A8:9A:A0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6e12c8-9dd7-478b-9071-1423e4a07296/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6e12c8-9dd7-478b-9071-1423e4a07296/1/Yg0Py0uU5BGo3iYgncFeMt-omqA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:5440::/29
Signature Algorithm: sha256WithRSAEncryption
a0:6c:ae:45:32:ec:5d:90:89:9c:ad:ce:4f:71:ef:58:cf:f4:
2d:de:a3:80:58:9a:fa:21:4d:f6:25:73:4f:60:29:3e:dd:ab:
a4:b0:b6:19:71:97:b2:eb:5c:b4:ed:d6:e5:43:a3:0d:13:f2:
53:c9:d0:3b:60:71:8c:51:ff:45:02:2e:16:0b:00:06:8f:a6:
f8:e8:8f:df:69:59:ab:e6:42:47:08:40:35:3c:fc:e4:7d:ab:
c8:ea:89:46:2f:62:e4:6e:53:25:a0:e1:59:1e:32:28:68:4b:
c1:e0:a5:7f:07:24:8b:d5:ee:ef:b3:da:4c:04:9a:96:24:d3:
0d:25:84:40:8b:9a:c2:49:e0:8b:b0:c1:1c:48:00:6c:0f:7c:
3b:47:bc:c5:a9:dc:00:aa:12:cb:a4:d5:50:e8:ed:4c:2d:87:
88:fd:1b:c7:05:12:1f:34:f7:54:2a:fb:be:c1:6c:ae:df:b0:
4c:ef:a9:5a:ab:24:f6:ad:2b:e4:54:49:98:72:e0:67:bb:f6:
e2:35:d4:63:8d:25:ef:94:29:16:7c:ad:a6:c2:bc:ed:07:bc:
6b:fd:e9:b0:41:9c:86:84:48:3a:ed:cb:94:d7:c1:4c:57:0a:
5f:b7:69:51:b1:70:d8:b9:a1:ac:09:26:9c:78:ed:8b:70:f8:
c5:87:33:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:14 2025 by rpki-client on console.sobornost.net