Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aMwyXIrZdpobVNopYwX-DDZXN3U.cer
File: aMwyXIrZdpobVNopYwX-DDZXN3U.cer (raw, json)
Hash identifier: toWAa488dfXqT0C+D7rYHUt71lEkKgEIWUbQd1Is//0=
Subject key identifier: 68:CC:32:5C:8A:D9:76:9A:1B:54:DA:29:63:05:FE:0C:36:57:37:75
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C9D436EA7218AFA5CEA66C12411A7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0f/617778-9f31-475b-84fa-74c979a6536e/1/aMwyXIrZdpobVNopYwX-DDZXN3U.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0f/617778-9f31-475b-84fa-74c979a6536e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:48:16 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 80.88.80.0/20
IP: 85.235.128.0/19
IP: 93.186.240.0/20
IP: 193.254.240.0/23
IP: 195.128.234.0/23
IP: 195.225.168.0/22
IP: 195.234.171.0/24
IP: 195.250.34.0/24
IP: 212.237.0.0/18
IP: 217.61.96.0/19
IP: 217.73.224.0/20
IP: 2a01:5940::/32
IP: 2a02:fd40::/29
IP: 2a03:cdc0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:9d:43:6e:a7:21:8a:fa:5c:ea:66:c1:24:11:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68cc325c8ad9769a1b54da296305fe0c36573775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8e:df:61:ab:1d:4c:68:c8:18:33:80:6c:dd:
94:97:1d:ba:2c:f4:3b:3a:a9:53:e2:d2:36:45:b1:
c4:6f:b5:06:7a:db:57:3b:ae:9e:d9:77:6b:38:51:
da:7d:e1:84:6c:38:af:ce:da:f2:50:c6:33:5b:c0:
6e:16:fe:66:7d:77:38:36:86:53:20:e2:64:da:d2:
42:ca:b3:81:6c:44:15:f1:f9:83:ed:36:59:77:8d:
d3:c5:68:f8:e4:f7:00:ee:25:01:53:98:f2:be:9b:
3f:b0:b8:82:de:00:53:f6:94:b2:8d:2e:6b:8c:f3:
ac:40:8a:b0:6c:2c:fc:5c:48:c6:c2:24:bb:21:03:
8a:9b:2b:60:e1:5e:b8:b5:a6:52:0f:05:db:17:99:
a9:a6:cb:98:01:30:97:42:6e:f0:c8:45:11:7f:16:
5e:b3:8f:b6:54:86:92:84:4c:31:98:5b:69:eb:c9:
fc:a0:5d:77:53:96:36:88:c2:a8:ad:5f:31:bd:9c:
41:5a:9e:21:30:38:af:a2:1f:e6:b9:f0:90:12:2d:
9b:88:f1:0b:6d:29:3d:c3:1c:f7:fc:7b:27:49:c7:
51:b9:be:85:6b:02:b0:83:96:dc:55:11:1c:c2:ad:
54:2a:ab:94:eb:a1:c7:8e:ef:b8:0c:bf:08:e8:5e:
e8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:CC:32:5C:8A:D9:76:9A:1B:54:DA:29:63:05:FE:0C:36:57:37:75
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/617778-9f31-475b-84fa-74c979a6536e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/617778-9f31-475b-84fa-74c979a6536e/1/aMwyXIrZdpobVNopYwX-DDZXN3U.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.88.80.0/20
85.235.128.0/19
93.186.240.0/20
193.254.240.0/23
195.128.234.0/23
195.225.168.0/22
195.234.171.0/24
195.250.34.0/24
212.237.0.0/18
217.61.96.0/19
217.73.224.0/20
IPv6:
2a01:5940::/32
2a02:fd40::/29
2a03:cdc0::/32
Signature Algorithm: sha256WithRSAEncryption
7c:df:2f:35:6f:49:00:48:31:3d:41:7d:ce:fc:e9:55:32:13:
18:d8:94:14:9d:f1:9c:48:04:7c:27:19:cd:0e:3d:0a:6a:f5:
8a:8a:ef:b6:89:e5:2c:84:14:87:f3:4e:7e:fb:8d:00:7e:cd:
9b:49:24:7a:dd:25:10:32:93:bb:61:5e:f7:5d:6e:7c:5f:d5:
36:eb:28:a8:4c:6e:73:6d:d6:28:0e:de:14:3f:6d:55:e1:6e:
51:62:ac:e2:70:30:0d:db:ce:ee:dc:ea:2b:54:f5:e1:d1:2a:
a6:30:36:a5:e4:ba:f7:92:a9:3a:1f:9b:84:be:1e:a5:93:8a:
bb:94:d5:04:bf:ba:77:7a:29:69:7c:d5:c2:0e:d2:c6:db:91:
b8:eb:5f:05:46:62:64:cf:2a:5d:c1:c8:a6:8f:bb:da:42:5e:
81:54:42:04:6c:aa:de:90:15:c2:9c:2d:4c:5b:8b:c8:a3:48:
0e:0a:d3:2b:b5:af:f0:1b:7e:0f:c7:cc:2b:a2:d5:b2:23:8e:
1b:3a:02:17:1c:75:33:22:63:42:f6:f7:ca:8d:c2:c8:95:59:
2b:6b:64:be:c9:b4:86:53:ff:e2:23:38:9d:40:65:53:99:30:
d7:47:a5:56:e0:22:75:76:91:a0:e3:70:9b:66:61:da:4b:bc:
9d:d6:bd:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:30 2025 by rpki-client on console.sobornost.net