Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_QsmgyFXCqBCF7NThHwQv3MSVLU.cer
File: _QsmgyFXCqBCF7NThHwQv3MSVLU.cer (raw, json)
Hash identifier: nodeZiHS9OHzNzNDhzEb0530IqaixQIl1KNk4FtmeU4=
Subject key identifier: FD:0B:26:83:21:57:0A:A0:42:17:B3:53:84:7C:10:BF:73:12:54:B5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221F7829C1B4E978D5D41BE6B58A28A3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9f/43f177-5368-4b31-89c9-5b3f64181fff/1/_QsmgyFXCqBCF7NThHwQv3MSVLU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9f/43f177-5368-4b31-89c9-5b3f64181fff/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:47:55 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.84.120.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:78:29:c1:b4:e9:78:d5:d4:1b:e6:b5:8a:28:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd0b268321570aa04217b353847c10bf731254b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:87:b2:1c:da:2b:66:70:9b:83:b2:61:c5:a4:
0d:87:ae:15:a3:0b:23:f2:48:f8:8a:84:26:66:69:
4a:2b:92:1d:5b:23:15:5d:e1:0a:c4:89:9a:18:e4:
f9:7f:7d:e5:67:46:51:45:07:f8:d1:97:64:23:c0:
f5:44:b9:79:73:f3:c2:d5:06:64:5f:31:e6:37:b3:
b1:66:44:80:ae:5f:ee:fb:0c:96:e5:2b:0c:7b:55:
72:83:59:8b:d4:6c:4b:8b:1f:31:9b:c7:ea:d3:4d:
5d:48:87:a3:ad:15:dc:b2:55:d3:07:0d:2c:ce:62:
35:74:2b:ce:af:f8:4c:fa:ba:b3:c2:4c:09:95:72:
23:18:7f:4e:5e:e6:4f:a4:3c:a6:b2:f6:95:02:a4:
e6:f2:ad:b1:d8:79:38:f3:2b:2c:3c:62:54:0e:fc:
d0:38:9a:94:85:01:31:92:c5:38:34:46:b9:c4:22:
6c:83:4d:96:51:4c:17:70:cb:93:8b:44:92:ae:03:
4f:03:fa:3e:73:ba:10:86:b4:82:aa:94:af:cc:67:
31:7a:fe:23:85:0d:6b:f1:48:54:f3:b8:e8:88:8a:
fa:80:ed:8d:4a:33:90:ef:96:e3:12:23:89:2f:53:
d5:e8:65:ca:76:0a:72:b7:68:0c:0f:04:1f:a9:d2:
6b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:0B:26:83:21:57:0A:A0:42:17:B3:53:84:7C:10:BF:73:12:54:B5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/43f177-5368-4b31-89c9-5b3f64181fff/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/43f177-5368-4b31-89c9-5b3f64181fff/1/_QsmgyFXCqBCF7NThHwQv3MSVLU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.84.120.0/22
Signature Algorithm: sha256WithRSAEncryption
76:94:3f:33:43:25:db:ca:70:1a:a4:e9:24:49:33:f7:9a:06:
91:f8:96:d7:f3:49:5b:c3:10:45:f1:f9:fc:e9:bb:4a:be:84:
a6:71:e6:ca:3a:9e:58:54:7b:ac:d2:36:99:14:5d:50:38:57:
18:82:a1:1a:6f:e3:01:2c:72:45:4c:e4:f9:57:51:4e:7b:7d:
67:f3:30:77:88:1b:e1:38:11:4c:9f:ad:44:af:e1:db:ce:54:
fc:22:ca:f1:0e:3f:1f:ec:bd:a6:de:41:e6:40:8d:03:8e:e2:
ab:ea:79:64:1f:ca:e0:92:bb:e7:2a:a6:7f:e6:e5:dd:a5:c4:
b5:63:33:ae:33:14:bf:a6:ae:23:b2:6c:aa:c2:01:5d:1f:3f:
92:2b:7b:e6:bb:03:58:3e:d9:1e:12:27:09:2f:1b:ed:6a:f3:
76:9a:c9:16:1d:12:0b:7b:45:ba:a6:64:ca:4d:52:1c:e4:a4:
8a:0b:7d:4b:96:5b:10:c7:3c:91:ac:bf:ad:a1:6b:61:6a:68:
73:6f:ee:90:9f:8e:ac:28:69:4a:ba:fb:8b:5f:9b:32:a2:d9:
45:5c:10:60:8c:28:ed:5c:4c:02:27:9c:32:69:7d:64:57:f4:
23:33:d8:39:2c:56:31:06:fa:cb:de:ba:9f:19:24:c8:f3:ef:
72:56:68:83
-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgISAZQiH3gpwbTpeNXUG+a1iiijMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTM0NzU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZDBiMjY4MzIxNTcwYWEwNDIxN2IzNTM4NDdjMTBiZjczMTI1NGI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIeyHNorZnCbg7JhxaQNh64Vowsj
8kj4ioQmZmlKK5IdWyMVXeEKxImaGOT5f33lZ0ZRRQf40ZdkI8D1RLl5c/PC1QZk
XzHmN7OxZkSArl/u+wyW5SsMe1Vyg1mL1GxLix8xm8fq001dSIejrRXcslXTBw0s
zmI1dCvOr/hM+rqzwkwJlXIjGH9OXuZPpDymsvaVAqTm8q2x2Hk48yssPGJUDvzQ
OJqUhQExksU4NEa5xCJsg02WUUwXcMuTi0SSrgNPA/o+c7oQhrSCqpSvzGcxev4j
hQ1r8UhU87joiIr6gO2NSjOQ75bjEiOJL1PV6GXKdgpyt2gMDwQfqdJrpwIDAQAB
o4IChDCCAoAwHQYDVR0OBBYEFP0LJoMhVwqgQhezU4R8EL9zElS1MB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzlmLzQzZjE3
Ny01MzY4LTRiMzEtODljOS01YjNmNjQxODFmZmYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWYvNDNmMTc3
LTUzNjgtNGIzMS04OWM5LTViM2Y2NDE4MWZmZi8xL19Rc21neUZYQ3FCQ0Y3TlRo
SHdRdjNNU1ZMVS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCwVR4MA0GCSqGSIb3DQEBCwUAA4IBAQB2lD8z
QyXbynAapOkkSTP3mgaR+JbX80lbwxBF8fn86btKvoSmcebKOp5YVHus0jaZFF1Q
OFcYgqEab+MBLHJFTOT5V1FOe31n8zB3iBvhOBFMn61Er+HbzlT8IsrxDj8f7L2m
3kHmQI0DjuKr6nlkH8rgkrvnKqZ/5uXdpcS1YzOuMxS/pq4jsmyqwgFdHz+SK3vm
uwNYPtkeEicJLxvtavN2mskWHRILe0W6pmTKTVIc5KSKC31LllsQxzyRrL+toWth
amhzb+6Qn46sKGlKuvuLX5syotlFXBBgjCjtXEwCJ5wyaX1kV/QjM9g5LFYxBvrL
3rqfGSTI8+9yVmiD
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:17 2025 by rpki-client on console.sobornost.net