Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ZmiQh-eHmQkWh42yDVVWhMIs2dU.cer
File: ZmiQh-eHmQkWh42yDVVWhMIs2dU.cer (raw, json)
Hash identifier: N/ZHDiA4j0w6+81WMKKZTDFVe6hxiv18f0368YCVXCs=
Subject key identifier: 66:68:90:87:E7:87:99:09:16:87:8D:B2:0D:55:56:84:C2:2C:D9:D5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D9DBCC8175ADB135018B8CE4806538
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:59 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.226.32.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:db:cc:81:75:ad:b1:35:01:8b:8c:e4:80:65:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66689087e787990916878db20d555684c22cd9d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bd:dc:e1:87:e0:df:66:06:3b:ba:94:ef:e5:
7e:84:3e:62:6b:df:9b:c6:28:6c:c9:65:21:cb:39:
ad:67:7d:76:c5:f2:e7:cb:6e:cb:5d:00:65:9c:24:
aa:00:f0:f0:89:84:d1:5b:cf:b6:f0:62:1a:e9:ab:
0a:31:67:51:63:86:1b:f2:f3:ba:6c:36:cf:d8:bd:
a9:72:3a:5f:cb:7e:9f:2e:8b:e2:f9:b1:90:a0:04:
d7:ed:e9:42:3f:1f:fd:6c:53:85:b4:21:5a:a8:e9:
d6:5c:c9:7d:5f:67:ee:32:e1:9c:fa:05:61:b8:28:
03:d7:1d:ab:f2:6e:16:e3:82:3d:50:68:6d:b7:2e:
54:0b:dd:b6:8b:4f:21:f4:b1:32:c4:91:5c:df:a4:
96:dc:e5:0a:f4:0b:1a:3a:81:07:33:78:ce:e5:dd:
c9:59:c4:5f:4f:65:cf:b8:60:83:34:bc:b5:37:c3:
2e:90:28:88:2c:eb:b1:e3:30:75:8a:5c:8c:fa:e4:
05:b4:f9:31:04:76:55:25:ca:e4:c4:52:ea:a5:b0:
e7:e2:90:f7:29:4f:30:07:95:02:da:b8:03:4a:08:
73:d0:73:db:44:fb:f0:9b:55:34:14:ec:c7:7f:23:
0d:85:c1:48:f6:dd:db:72:0b:9b:02:e0:5a:ce:51:
c8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:68:90:87:E7:87:99:09:16:87:8D:B2:0D:55:56:84:C2:2C:D9:D5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/80b442-5039-408e-9813-1e7c17728b50/1/ZmiQh-eHmQkWh42yDVVWhMIs2dU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.32.0/24
Signature Algorithm: sha256WithRSAEncryption
48:01:ac:86:4a:ca:18:91:c8:e5:42:ad:c3:82:95:ec:f9:87:
ad:40:0c:f4:de:a3:c2:b4:39:af:3f:76:83:fb:c1:9c:02:9c:
e3:62:78:8b:49:91:d6:d5:f9:e3:25:02:1d:91:2f:ea:ee:f2:
3b:53:79:f5:79:ca:3a:23:a5:bf:d3:e8:5f:b2:5c:eb:6b:8b:
26:05:68:b3:47:c7:12:8f:3b:98:ca:26:a0:99:0a:8f:e7:73:
e5:b2:cb:8f:4c:23:b6:9b:db:c2:6c:ec:e5:19:e2:70:5d:9f:
a9:1a:ca:9c:2e:ad:b5:90:b7:7e:b4:d5:68:c8:a2:df:7a:dc:
d7:01:96:11:c4:cf:f6:6e:37:fc:31:8b:34:ca:c4:67:ca:a6:
36:1b:07:b6:99:ab:2a:0b:a7:e2:d6:97:a9:4a:aa:60:d1:87:
4a:87:a0:d9:1a:61:87:0b:2e:35:75:21:ce:27:57:bd:9c:9f:
b7:5c:b8:eb:f6:86:6c:cb:a2:46:0b:63:ec:30:d4:30:1f:ae:
47:50:17:dd:1d:28:49:60:e1:3e:a2:9c:23:f6:0b:89:91:3a:
e4:a4:5b:be:6e:96:2c:13:c1:d3:87:17:7a:7a:37:52:57:ec:
d6:e1:dd:1e:b2:11:66:56:f3:88:eb:b9:06:86:80:42:da:b1:
32:cd:94:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:16 2025 by rpki-client on console.sobornost.net