Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZC8kHMyieCtfxAfhu696l6mEdGA.cer
File: ZC8kHMyieCtfxAfhu696l6mEdGA.cer (raw, json)
Hash identifier: hWxKO6mQPM4WT4Z7/9eQDre0fBIC5WCCdyY2hq7Tw74=
Subject key identifier: 64:2F:24:1C:CC:A2:78:2B:5F:C4:07:E1:BB:AF:7A:97:A9:84:74:60
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427481A8B3500D108BBB07F78294F7FAE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:50:24 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 195.200.68.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:1a:8b:35:00:d1:08:bb:b0:7f:78:29:4f:7f:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:50:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=642f241ccca2782b5fc407e1bbaf7a97a9847460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2e:3f:3b:50:18:3b:8e:47:82:af:a9:28:f7:
4f:2b:e9:38:55:8d:5e:64:25:7d:6e:8d:84:0e:25:
b4:d7:0e:c2:cb:52:24:de:0d:99:15:59:27:b6:8c:
31:e2:b5:87:39:f8:2b:5b:2e:35:14:a5:86:a6:50:
53:e7:7a:e2:4e:07:ef:f7:c6:78:c2:4c:24:57:a9:
e0:f2:ad:c4:fb:42:ca:9b:14:32:94:5f:d9:dc:91:
2a:3b:49:1d:cc:80:b8:8a:b7:c4:10:39:24:71:54:
d4:c4:2f:e7:21:19:97:9d:2a:1d:6d:9a:a8:a1:26:
39:89:17:5f:fa:ec:20:2d:29:bd:a8:cf:ee:ff:6c:
fc:81:9d:01:bc:71:33:7a:b7:77:3d:d0:8f:7b:ec:
08:5e:26:4b:ed:1b:b1:a7:d2:dd:39:2f:38:75:6f:
fd:9d:59:5c:12:b2:98:86:ec:e2:8c:b1:65:e9:7f:
f1:f7:0f:45:f3:87:61:bf:bd:82:14:de:5c:dd:aa:
b4:c3:78:ba:f0:c7:16:f2:7e:12:64:d7:90:92:89:
71:52:5b:b5:c3:d6:37:35:eb:63:76:ae:d6:85:2f:
a6:59:ad:f7:35:51:9d:46:08:6f:b1:a7:ac:c0:d6:
07:43:20:bf:4d:40:93:d6:6e:40:8e:cc:a7:a8:1c:
c8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:2F:24:1C:CC:A2:78:2B:5F:C4:07:E1:BB:AF:7A:97:A9:84:74:60
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/cae548-c3e1-4571-9a0b-145e95e8a7be/1/ZC8kHMyieCtfxAfhu696l6mEdGA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.200.68.0/24
Signature Algorithm: sha256WithRSAEncryption
94:bd:2b:4f:68:cf:f6:d4:57:22:69:25:61:04:82:bf:85:71:
96:da:b4:d0:9c:76:2f:1d:a7:4a:16:f4:0e:3e:09:7c:99:6c:
a6:ef:a9:3b:03:36:5d:99:38:0e:89:c3:17:fc:0f:9e:4c:3f:
e5:c1:4d:de:6a:a5:fe:e7:8e:2c:b9:5f:9b:c7:d4:37:5c:d5:
2e:9a:25:52:d5:1a:a9:2a:ba:d5:a9:b7:61:aa:af:af:ab:49:
ed:52:41:98:8c:b8:c2:37:14:9d:34:51:2d:78:96:0f:b0:8a:
a2:d6:c5:3b:9e:a6:5a:40:29:0e:cc:f0:3b:96:4d:b0:31:1f:
3b:36:6b:e5:15:c1:ff:d8:6d:75:b7:38:b4:77:cc:9f:8f:a9:
9b:84:96:d0:8d:c8:ab:e1:86:63:db:a5:c7:96:8b:5f:a1:00:
60:6e:93:22:c5:cc:a9:f6:35:cf:8d:af:4b:9f:e2:96:1d:59:
a1:1c:74:d2:32:c3:f1:1d:ec:41:d4:b6:77:58:5a:88:f2:53:
d3:7d:47:01:cb:f6:32:b4:67:c2:54:74:95:b1:7c:4e:0e:c5:
00:86:b5:a9:31:06:27:4e:45:53:16:c8:55:c0:f7:2b:bd:a0:
85:1f:d9:45:9f:56:e2:6e:9f:79:db:b5:b4:eb:17:d4:82:ad:
37:a8:21:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:15 2025 by rpki-client on console.sobornost.net