Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Zr2CuhiBrWT1JOM-zhKtpLO11X8.cer
File: Zr2CuhiBrWT1JOM-zhKtpLO11X8.cer (raw, json)
Hash identifier: 1pUC7EIpJsu+1Ld/5Un8WF27FSQvTvUiuWdUA3GIJTY=
Subject key identifier: 66:BD:82:BA:18:81:AD:64:F5:24:E3:3E:CE:12:AD:A4:B3:B5:D5:7F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942067FEF85281D64079C6BFC7A451C874
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:47:53 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 132.199.0.0/16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:fe:f8:52:81:d6:40:79:c6:bf:c7:a4:51:c8:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66bd82ba1881ad64f524e33ece12ada4b3b5d57f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:92:5c:37:3e:3a:9a:3f:ac:12:02:ee:3c:bc:
61:5f:e6:ea:8c:0c:af:17:0e:64:17:a3:b2:44:83:
d9:c1:08:e7:f5:5b:2d:a3:0e:97:0f:7d:da:68:91:
e0:14:f8:f6:81:af:6a:f6:d8:de:91:df:6d:57:4e:
25:59:4f:ec:48:9f:28:ea:3b:bf:0a:d9:cf:6d:8d:
32:9e:11:32:8a:2d:58:e2:fe:d0:24:78:24:cc:9e:
b0:ac:42:3c:fe:3c:e5:ba:41:33:28:7f:4d:3a:cf:
0f:d5:e8:c1:72:53:92:37:69:82:45:2c:d4:21:44:
77:52:5e:fc:a5:a6:1f:c8:17:7b:b3:7b:75:10:e3:
ab:a2:91:50:d4:eb:dc:b1:10:8e:e9:ed:92:48:cb:
37:45:41:5c:56:57:a9:75:42:32:67:52:36:e1:73:
a8:da:4b:e1:66:7a:ee:e3:7d:a4:09:49:4b:8e:6b:
90:0c:27:a9:67:2e:81:d3:14:12:58:87:2e:9f:08:
26:76:eb:68:db:34:c1:82:7c:d0:93:1c:23:68:ba:
4f:0d:e8:a9:85:25:a8:23:58:93:cd:5d:7c:9c:36:
a9:12:00:d5:9b:c1:15:fc:2d:a7:69:18:f7:84:79:
1d:c8:2c:c0:71:ce:37:3f:4e:f9:21:1b:c7:4e:a4:
24:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:BD:82:BA:18:81:AD:64:F5:24:E3:3E:CE:12:AD:A4:B3:B5:D5:7F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/e1e2a7-fd96-4cf1-82c3-ba2b90d49547/1/Zr2CuhiBrWT1JOM-zhKtpLO11X8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.199.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a9:7d:8c:59:32:7a:12:2b:6e:04:df:08:f0:de:17:c6:8e:bd:
fb:7f:58:32:61:6d:41:a0:f2:33:7d:d5:72:6d:16:5e:96:8a:
0a:64:0c:e6:63:22:27:9f:e2:ee:77:2f:29:b8:b2:5b:31:7d:
0c:a6:85:ef:41:4f:7f:c1:a6:08:22:52:a5:aa:da:af:6c:e2:
c4:87:0d:3b:cb:3d:63:75:55:7c:03:7e:3f:5b:00:12:06:70:
4c:be:9c:57:68:13:c8:23:be:03:4f:3f:6f:ac:e8:a4:d9:ff:
e8:3c:b0:95:f8:26:88:80:6d:ac:67:e3:9e:88:51:f6:29:a5:
07:14:c9:20:f2:38:16:4b:4d:2f:9f:43:ec:13:77:40:8a:f6:
71:a0:49:28:f4:5f:e3:ea:61:1d:ee:2d:13:ca:a2:2c:b4:ac:
ef:d2:6a:f8:c3:9f:45:ca:12:63:1b:6a:be:59:17:6d:1d:6b:
9f:fa:d2:c1:c9:95:ea:d2:3b:4f:0b:70:5e:b3:2b:b5:42:2d:
08:f0:0d:4d:49:71:7f:e0:1c:24:99:02:17:db:b6:f5:c1:f2:
06:91:c9:a7:04:37:80:14:8e:b7:e2:e5:85:d1:06:b1:68:5f:
81:99:16:bc:46:a7:65:f6:6d:04:c1:2c:d9:e9:d2:b5:b3:2c:
ad:cb:dc:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:16 2025 by rpki-client on console.sobornost.net