Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aBHhJcs1cHby-jE4yT6aJoGxeJM.cer
File: aBHhJcs1cHby-jE4yT6aJoGxeJM.cer (raw, json)
Hash identifier: AUfigM2Ys2+cAx/w0ekN7V4QtVK/dTQkK1/HDvwJcrI=
Subject key identifier: 68:11:E1:25:CB:35:70:76:F2:FA:31:38:C9:3E:9A:26:81:B1:78:93
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942369A3425CC7A6F174029A52729AD7C4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/11/ebacbd-8190-4e5a-a03a-cd439492b7ae/1/aBHhJcs1cHby-jE4yT6aJoGxeJM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/11/ebacbd-8190-4e5a-a03a-cd439492b7ae/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:48:33 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 31.186.228.0/23
IP: 95.172.83.0 -- 95.172.87.255
IP: 212.118.227.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:a3:42:5c:c7:a6:f1:74:02:9a:52:72:9a:d7:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6811e125cb357076f2fa3138c93e9a2681b17893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b1:00:43:1f:b5:cc:f7:a4:3a:ab:15:d8:00:
ec:65:6c:f1:9e:29:19:f6:c5:b9:8d:cd:b9:ae:83:
5a:f3:6e:22:1e:f7:25:05:88:21:86:22:8f:d6:49:
a7:13:0f:a9:fa:b8:3e:66:51:b7:6f:e6:c8:92:d3:
7d:cf:7b:70:e3:be:fb:f9:98:06:99:cd:5f:db:87:
6a:b7:ba:a3:a3:d1:5d:59:95:e7:24:a1:8c:36:6a:
8f:cf:28:04:e4:be:37:34:75:ed:50:af:3b:38:61:
ec:64:db:59:67:66:ae:79:83:71:af:20:2f:2d:b9:
f8:0a:03:5b:ea:1a:d5:8e:5d:58:ef:b4:3a:41:75:
54:ab:c6:75:c7:5a:e0:13:a8:54:37:bf:f5:1b:8c:
38:e0:85:ef:0e:ee:97:4e:c8:ea:56:3a:fa:62:c8:
27:50:00:12:de:53:43:d5:32:0e:a2:9e:e2:e4:20:
9f:f4:7d:c5:2b:d0:01:d8:79:6f:9a:3e:26:f0:fa:
5b:f0:0f:48:ab:51:d5:92:26:db:ba:65:48:b3:b5:
59:6c:1f:85:f3:d9:9f:6e:2e:68:a2:c4:aa:42:68:
9d:a0:95:3b:e7:90:5e:76:9d:5b:21:4e:e4:f8:86:
bb:e9:85:2a:d1:a2:62:80:09:f7:c2:24:8d:06:e2:
f8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:11:E1:25:CB:35:70:76:F2:FA:31:38:C9:3E:9A:26:81:B1:78:93
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ebacbd-8190-4e5a-a03a-cd439492b7ae/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ebacbd-8190-4e5a-a03a-cd439492b7ae/1/aBHhJcs1cHby-jE4yT6aJoGxeJM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.186.228.0/23
95.172.83.0-95.172.87.255
212.118.227.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:14:fb:54:37:bd:e2:f8:28:ac:c5:89:06:3b:dd:77:c8:1b:
ab:d6:46:5d:59:59:46:b0:5f:ae:53:5f:26:31:73:9b:36:f3:
a7:53:ee:a9:6b:6e:f9:e0:68:05:94:ab:b7:51:00:0a:32:85:
5f:08:24:48:d7:22:44:69:c3:0a:2e:8b:43:5b:26:6e:44:fb:
0a:d3:dd:67:be:54:c6:e6:16:8f:88:15:48:bb:5c:f5:2f:b1:
9b:ea:0b:ca:d5:4e:9b:00:cd:1e:4a:5d:db:b4:0d:8f:00:50:
ed:6b:5f:93:8e:ce:ef:8b:c7:5e:9b:44:b5:0c:e1:1e:39:91:
af:ba:0d:d1:ba:05:a5:3b:7f:e4:0c:fe:7b:2d:e6:a5:e9:3a:
24:97:48:ee:c7:e5:45:2b:3d:5a:2c:d3:51:54:3f:71:1a:7b:
ea:3c:7f:4b:46:4a:02:c9:98:5f:21:cc:56:37:c2:08:f7:50:
b0:6e:e8:c6:cf:bb:e9:88:36:9d:fe:c8:81:97:3f:b0:e8:74:
d5:ef:7a:24:24:3b:05:8d:15:ed:27:91:3a:a3:38:b7:b7:85:
76:b3:5a:fa:70:03:79:20:ac:ce:82:1d:97:36:e0:32:34:9d:
fb:60:22:79:ab:e8:05:99:99:ba:2e:88:fd:6f:54:27:79:04:
e5:c3:06:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:29 2025 by rpki-client on console.sobornost.net