Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_tf4F9fm3tVu3txESIzUHAUqDcU.cer
File: _tf4F9fm3tVu3txESIzUHAUqDcU.cer (raw, json)
Hash identifier: 0p+QeIiu/cErGsJianCFqur9eLcGlVcpdpqp/4aLlFE=
Subject key identifier: FE:D7:F8:17:D7:E6:DE:D5:6E:DE:DC:44:48:8C:D4:1C:05:2A:0D:C5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942747E3ACF7576753B338B1C8838C2166
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:50:10 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.226.236.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:e3:ac:f7:57:67:53:b3:38:b1:c8:83:8c:21:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:50:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fed7f817d7e6ded56ededc44488cd41c052a0dc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:7a:7b:4f:6a:62:6d:7a:a5:fa:71:85:0b:96:
47:a4:52:74:09:ac:78:23:1f:ef:7e:94:37:09:62:
bd:3e:46:6b:66:1b:2f:f3:f3:be:35:c5:61:fd:5a:
03:28:5b:a6:a5:2b:e7:ff:c2:a4:b8:c0:b2:f4:93:
62:df:c1:de:73:2c:93:db:4d:87:f7:8e:49:77:7b:
9a:b8:cb:db:57:1d:a7:b7:0a:ae:32:1f:5f:b9:07:
3e:d2:54:f3:e4:47:64:9a:a2:76:e6:10:56:6b:a5:
f8:8f:3b:54:2e:4c:db:84:63:12:7f:3e:79:a0:f2:
ad:95:f6:cf:32:15:87:75:43:fb:8d:51:90:b3:e8:
44:b1:72:c3:d9:68:90:93:f9:af:54:ec:50:e2:b5:
74:59:26:78:c9:70:47:53:86:cd:b5:b8:f3:25:d8:
11:b1:d4:bd:0f:b5:2a:08:86:a1:d2:6a:6f:89:0f:
ed:84:01:ff:59:b0:3f:cf:10:64:7f:60:0f:db:2f:
1d:b0:fd:8d:a6:38:ba:82:e1:cb:dd:19:de:d1:bb:
b2:93:e0:82:81:94:41:c4:36:52:db:d3:c5:22:7b:
3d:44:a9:ba:d2:ac:f7:75:62:9e:4e:86:b7:94:c6:
0a:f2:a4:fd:7d:9e:63:43:01:24:66:4b:e5:3f:88:
b1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:D7:F8:17:D7:E6:DE:D5:6E:DE:DC:44:48:8C:D4:1C:05:2A:0D:C5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.236.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:d4:3f:9b:1c:bb:79:e8:c9:c2:85:89:8f:dc:9a:43:79:30:
a4:b4:1c:3b:65:57:77:96:ab:7f:9f:46:23:d4:c9:ad:c5:fc:
d4:c0:8c:63:43:7c:4e:d9:c0:40:4d:37:13:bd:09:bd:ab:34:
b0:10:e1:45:c7:4b:39:8c:e5:90:98:d7:d7:e7:ac:53:a4:a2:
c5:e6:7f:e0:05:e3:30:0b:a1:04:a9:e7:ac:36:a3:9c:b1:ad:
27:02:95:a1:4e:d9:60:e5:63:57:a3:13:95:90:ec:87:11:b1:
de:cb:45:3a:5c:46:e1:bf:80:fe:cb:74:60:72:28:0a:61:f9:
bc:d5:82:bb:cc:c3:a8:21:65:e1:81:60:64:be:19:ba:8f:51:
70:7d:5e:fe:2e:85:bd:47:c8:68:d5:46:d2:a6:5b:79:59:f7:
29:d1:43:9f:21:17:76:00:a2:23:b9:9f:10:8c:55:8a:19:c6:
bb:0b:b7:6a:f2:6d:0d:5f:52:49:e7:25:b6:5b:51:3a:eb:c4:
be:40:fb:40:d0:7c:2c:e1:7d:1b:0b:c9:13:96:15:57:d3:b5:
c6:7d:33:1b:77:70:d1:1b:27:7b:b4:16:95:b3:6c:18:f2:22:
9d:0c:0a:7e:3d:03:16:d2:73:3b:79:c1:62:1b:1b:d9:3f:d3:
2c:86:31:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:18 2025 by rpki-client on console.sobornost.net