Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_LVQtxDX8PlLDOQyzw5OlQzE4co.cer
File: _LVQtxDX8PlLDOQyzw5OlQzE4co.cer (raw, json)
Hash identifier: Nj6jzHAS82IU4voJHIlW0hkCTKZSqA4CwxjrcwjIjfk=
Subject key identifier: FC:B5:50:B7:10:D7:F0:F9:4B:0C:E4:32:CF:0E:4E:95:0C:C4:E1:CA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942521A8DE523AAD96274F6B8856765CF4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:49:10 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 2a04:ac40::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:a8:de:52:3a:ad:96:27:4f:6b:88:56:76:5c:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fcb550b710d7f0f94b0ce432cf0e4e950cc4e1ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d6:7a:4a:e7:c3:49:48:03:f7:5f:a4:8d:40:
b2:6f:37:41:09:da:e1:44:6d:5f:89:58:6b:73:8c:
f6:06:ad:5b:f4:e8:ef:f9:b0:66:f1:52:b2:8c:5c:
1d:8d:1c:2e:20:b2:a3:b2:42:03:4a:b0:9e:86:d8:
70:fd:ba:ac:5e:49:b0:6b:e4:b6:a4:5d:08:c1:19:
77:b4:71:2e:5d:6c:70:3c:77:74:d1:bf:35:88:dc:
fd:90:80:e4:2f:b7:7a:59:8c:96:07:aa:b7:29:6d:
4e:31:de:3b:aa:e2:b5:06:4d:92:11:cc:b9:a7:4f:
08:10:3b:6b:0a:33:51:1d:40:4b:5c:c9:90:38:67:
cf:3b:4e:cb:5b:e0:10:1c:2c:51:cd:0e:b0:78:e9:
68:96:31:34:22:63:96:9a:a2:e7:a9:f2:8e:ce:53:
b7:d4:83:8e:a7:23:ab:a3:20:0a:d0:6e:d6:00:2a:
18:3b:0e:fa:d7:06:29:b2:14:16:1c:fa:62:80:1b:
4f:73:5a:98:8e:de:82:ee:0a:65:ed:fb:1f:1d:05:
6c:ec:61:b7:1b:01:65:91:49:eb:94:e4:86:6a:fa:
a2:d7:1c:a5:15:d8:37:19:36:e1:c3:f1:d3:02:06:
b7:c3:62:ec:e5:ef:76:fb:8e:0c:83:e3:d1:00:d8:
4f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:B5:50:B7:10:D7:F0:F9:4B:0C:E4:32:CF:0E:4E:95:0C:C4:E1:CA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/e5cf67-e296-46e8-919c-473a29ac3363/1/_LVQtxDX8PlLDOQyzw5OlQzE4co.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:ac40::/29
Signature Algorithm: sha256WithRSAEncryption
ab:db:2d:bd:1a:05:34:2d:e9:bb:d8:5c:52:20:18:2b:72:28:
fc:5f:35:23:93:cf:04:0e:47:d4:7c:df:e0:a6:5c:78:e7:34:
e6:bb:31:2a:72:d5:f9:87:9a:58:38:a5:53:ba:7a:9c:03:b9:
81:0d:63:4f:54:46:0c:71:ec:79:b9:2e:a3:78:3a:06:cd:67:
ef:44:ac:56:cc:93:55:68:37:a4:16:87:2f:df:f0:6d:69:ad:
08:8a:04:4d:0c:8f:72:aa:66:53:a4:8a:0e:69:63:e2:29:f8:
26:ef:9c:ee:ae:ec:b8:7e:88:84:84:24:20:02:a5:bf:e3:36:
32:19:6c:57:b4:6b:42:31:1d:9c:e4:67:c9:53:78:31:f4:8a:
73:c1:97:84:d4:dd:55:e9:e9:60:09:94:bb:d5:21:21:24:98:
fe:04:ea:82:44:2f:65:c1:d3:01:49:b9:2f:4e:ba:6a:94:2c:
81:85:3d:9e:f3:bc:22:03:18:65:8b:b0:b6:10:c9:76:41:a0:
fe:90:e3:c8:a5:4f:b2:5b:67:68:09:9a:10:2e:2f:0d:28:86:
fa:d0:be:b5:56:85:77:1e:68:22:a9:ac:66:9c:f2:71:02:d4:
40:d5:a2:5d:ea:0d:9c:fa:03:8a:59:77:c7:db:95:11:e1:a9:
39:42:7a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:17 2025 by rpki-client on console.sobornost.net