Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bSsrfHiimiI-pZxnydqj3H7bHnQ.cer
File: bSsrfHiimiI-pZxnydqj3H7bHnQ.cer (raw, json)
Hash identifier: 52HZHy6U57S1ET+axgFi8bj5n4hnX2Lnv5ELAM5CDrA=
Subject key identifier: 6D:2B:2B:7C:78:A2:9A:22:3E:A5:9C:67:C9:DA:A3:DC:7E:DB:1E:74
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194D5B2776CC151902A45808657EB3217FD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/80/e8a2f6-6c0f-4276-849e-0c52556e9865/1/bSsrfHiimiI-pZxnydqj3H7bHnQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/80/e8a2f6-6c0f-4276-849e-0c52556e9865/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 05 Feb 2025 10:40:30 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.252.16.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d5:b2:77:6c:c1:51:90:2a:45:80:86:57:eb:32:17:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 5 10:40:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6d2b2b7c78a29a223ea59c67c9daa3dc7edb1e74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e2:61:49:60:1c:d3:1d:c3:a1:89:21:2c:e9:
3b:60:8e:be:11:b2:50:dd:89:bc:6c:df:39:2c:bd:
1f:0f:7b:3d:d4:4d:15:ad:7e:23:bd:8e:cc:2b:87:
f8:45:81:4d:53:3d:27:b4:76:03:95:93:70:f1:11:
e2:26:25:4f:61:03:29:55:ad:8d:5d:6d:47:77:e2:
95:67:35:74:f4:8b:d9:20:03:da:25:c3:7f:86:77:
a0:e5:f4:da:23:a8:83:af:8c:6e:a4:98:89:4d:18:
2e:e4:fe:6e:a7:0d:0c:af:56:97:86:5e:81:e7:7d:
3b:4f:51:37:83:fe:a0:ec:cf:8b:1c:ef:86:cc:7a:
bc:26:0d:71:67:9f:3b:bd:4d:a1:61:04:60:5b:4f:
e3:c4:b6:56:57:49:af:98:48:5c:e4:af:a4:86:d8:
bc:e1:63:c8:7f:c1:e0:21:ce:4c:d7:59:3b:19:6b:
01:5d:11:31:f9:32:29:13:d0:70:87:14:f1:61:7f:
5d:d1:75:ca:71:65:02:75:14:56:b2:15:f5:ab:d8:
29:15:3c:4b:f6:57:72:46:ae:57:4c:c9:12:38:5d:
18:3f:69:58:34:c2:5f:6b:93:22:69:2e:fa:5c:91:
fc:b2:19:6f:76:ff:aa:c8:2f:31:b0:b3:dd:83:e5:
95:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:2B:2B:7C:78:A2:9A:22:3E:A5:9C:67:C9:DA:A3:DC:7E:DB:1E:74
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e8a2f6-6c0f-4276-849e-0c52556e9865/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e8a2f6-6c0f-4276-849e-0c52556e9865/1/bSsrfHiimiI-pZxnydqj3H7bHnQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.16.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:52:dd:e1:fd:f2:b7:b1:43:0a:a8:bf:8a:89:1d:40:33:e1:
ee:ae:48:10:01:61:13:b9:7a:86:30:05:1b:13:cd:75:0f:32:
97:b8:42:98:2c:5f:6f:53:1d:64:3d:82:1f:a8:bc:89:28:bf:
98:12:86:fe:72:15:8c:35:75:1f:32:b5:96:8e:39:c3:db:20:
ac:61:f2:be:9e:4d:26:47:af:d9:1a:49:a5:48:ee:c9:cd:9d:
99:21:28:6d:73:6b:7c:a3:d0:40:96:c3:04:e0:9f:01:50:96:
70:ab:56:e9:b8:90:e2:ef:8f:20:5d:7e:5b:48:a7:a8:8a:15:
0a:c7:51:1b:92:be:85:fa:e0:b6:bf:9f:7f:56:93:b1:1d:11:
82:89:7e:52:e0:94:ea:90:b4:ae:82:d4:82:28:58:76:d1:35:
be:bb:4d:4f:5f:11:b7:b9:fe:1e:0f:bc:63:57:d1:15:d2:84:
ac:58:c5:12:87:f7:71:70:8c:33:43:86:08:a1:4b:13:31:b9:
7e:61:c9:b1:00:eb:42:5c:72:fc:f6:c1:cf:e2:cc:e6:e8:ea:
f6:71:13:51:f3:4f:c7:59:62:fb:41:c9:8d:78:4f:57:62:20:
a4:2c:1d:f0:ec:4b:9c:ec:92:b5:a2:cf:02:ef:73:9c:be:8d:
31:b5:b1:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:46 2025 by rpki-client on console.sobornost.net