Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
File: _4fgqwMrDAXrXnTMLAhpjdMk2WM.cer (raw, json)
Hash identifier: u4dGsvBRzA1Gi8iPsT5VW7i4co3KNGPSwjX8Rlf7tco=
Subject key identifier: FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0195281BE62D728CC26F6726F348A7B8D076
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 21 Feb 2025 10:44:31 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2a0e:6480::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:28:1b:e6:2d:72:8c:c2:6f:67:26:f3:48:a7:b8:d0:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 21 10:44:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a3:49:a2:5f:32:84:73:7d:99:d3:0f:9a:45:
72:7c:73:ca:db:eb:0d:60:f2:42:86:15:4d:27:e3:
b7:ae:6e:9f:ae:b9:74:48:46:f1:e6:bc:70:bf:36:
19:e0:cb:bc:8c:4f:0f:33:4e:32:84:52:a4:a5:94:
9f:50:02:5a:6e:09:f3:41:8e:30:ae:0b:26:75:85:
54:6b:dc:8e:fa:0b:6a:e8:62:ad:3e:62:90:e7:72:
ed:5b:b1:90:8c:e3:2d:e6:49:99:ae:49:60:40:3f:
aa:ef:3f:54:e7:62:fc:a0:57:35:de:95:02:1a:52:
b0:66:18:a4:18:04:43:ee:44:81:f3:a4:54:15:eb:
39:12:11:13:bd:c1:22:d3:16:03:75:b9:6e:20:ac:
32:18:3b:45:eb:f0:08:39:fb:71:78:ca:ae:c6:54:
97:c2:42:46:60:1e:c1:08:27:d5:59:30:78:5d:c0:
f6:30:ae:70:41:a7:86:9b:94:7e:04:74:7c:be:18:
97:20:f5:c6:89:39:f3:96:2a:eb:e4:82:5f:3f:6a:
50:61:c0:8a:a8:9a:86:45:ff:26:37:96:1e:5e:fd:
dd:34:53:9a:47:1e:0c:28:88:7f:f1:7d:d2:39:83:
17:30:ca:40:c0:7a:6a:56:a0:5b:19:3b:87:6c:6c:
d2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:6480::/29
Signature Algorithm: sha256WithRSAEncryption
70:c8:44:40:95:a9:fe:47:7e:cc:33:d1:79:80:86:10:d0:12:
a2:60:dc:28:41:1d:cf:fc:86:99:9a:05:79:0e:48:fa:df:b4:
a1:fd:a9:51:a1:86:86:cd:85:df:bf:69:f4:36:56:4d:e2:94:
bc:d0:29:0d:df:92:78:9b:46:57:c3:77:d5:f2:bf:b1:57:75:
45:37:7f:15:d7:d2:66:12:23:57:f3:8a:e8:40:79:0b:d2:96:
6a:b6:e4:1c:14:99:69:6d:78:a9:8a:b2:8d:db:a8:8a:d6:c7:
db:16:39:77:cf:e5:fb:c8:c4:05:7c:d8:7d:23:2e:5c:e4:04:
08:26:13:68:b8:14:c6:c8:d8:30:da:fc:de:4e:8e:15:3b:e3:
52:9a:58:89:a2:8b:c1:e5:1b:79:f9:90:62:73:20:0b:59:3f:
75:61:44:af:07:3c:b2:9a:54:75:98:60:7b:b4:6e:dc:88:3a:
ae:d0:b1:72:34:a0:cd:a2:49:9a:49:74:3d:df:d7:1d:8a:ef:
11:0d:94:57:9e:c1:3f:db:d8:6e:3c:01:5c:50:53:c1:8f:fc:
86:bc:e7:8d:1e:dc:b3:49:37:c1:5b:e4:10:7d:83:61:75:51:
08:c7:35:3d:cc:94:8c:79:73:89:bb:88:3a:7c:c0:e3:b1:43:
69:d9:45:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:17 2025 by rpki-client on console.sobornost.net