Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd9sdT6ghb7zcrOSYw90uldpbuU.cer
File: cd9sdT6ghb7zcrOSYw90uldpbuU.cer (raw, json)
Hash identifier: nlgrNe3ySmGF/KqbW7DO+Ry84ZtCX1kakuaj5TqdAkk=
Subject key identifier: 71:DF:6C:75:3E:A0:85:BE:F3:72:B3:92:63:0F:74:BA:57:69:6E:E5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B1EC7BDEA2C10ECBCEF6A287D3BB72
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:16 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 83.97.32.0/22
IP: 85.159.112.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:ec:7b:de:a2:c1:0e:cb:ce:f6:a2:87:d3:bb:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=71df6c753ea085bef372b392630f74ba57696ee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c6:2d:ed:48:43:19:ae:e9:09:dd:6d:61:aa:
5d:87:8e:87:64:bb:9b:2a:e6:86:c4:90:ac:72:39:
4f:da:7e:b9:3e:bb:03:d8:94:4b:92:e8:3e:3f:59:
06:fe:24:a4:d3:03:dc:8b:92:f8:97:a7:31:22:4c:
65:7c:81:ae:eb:04:3a:06:2e:a3:b6:d8:47:47:12:
36:1c:24:6a:68:05:5d:b5:2b:12:fc:1e:0e:2c:e1:
85:c3:b0:ba:02:bd:8f:f3:4e:0e:1b:16:4b:3b:9a:
82:f1:5e:c4:7d:78:62:3a:12:8e:b0:6c:41:de:13:
91:df:01:50:78:18:cc:6d:11:fb:79:51:f3:68:b9:
1f:42:b6:dd:0b:5e:a0:ed:ca:d3:cb:17:c0:6d:4a:
bb:37:d5:0e:11:bb:0b:b2:93:8e:22:e7:45:9e:bf:
95:37:9e:e4:2b:8c:5b:f0:53:9e:25:fc:06:c1:ce:
44:ca:11:12:4a:b9:d7:28:1c:a4:59:ea:8b:be:00:
8c:ca:fe:1a:17:c0:7d:8e:1b:6a:bc:d3:f4:a5:98:
47:0a:b5:88:c6:b6:f9:e8:3a:31:c6:4d:7a:f7:f9:
dd:14:71:f2:e3:27:7a:0b:7e:57:4d:34:8d:b8:2c:
b0:f2:32:96:2f:46:fe:3f:8f:fa:fc:2b:27:a1:b4:
ec:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:DF:6C:75:3E:A0:85:BE:F3:72:B3:92:63:0F:74:BA:57:69:6E:E5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c59484-b07a-4ca1-abcd-a83845caac21/1/cd9sdT6ghb7zcrOSYw90uldpbuU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.97.32.0/22
85.159.112.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:37:74:59:f3:f1:ef:4d:81:5c:42:c4:08:88:9f:65:dc:98:
3d:13:60:15:fb:64:7c:83:83:33:76:64:9a:6f:2b:5c:70:21:
e7:7a:ed:9a:75:36:78:77:8d:de:d6:f5:87:24:1f:f2:0d:41:
7e:7d:95:ed:66:76:11:f4:92:62:e9:5c:0d:2f:0d:98:70:c8:
87:16:45:66:65:7d:45:05:9e:a1:cd:08:9b:54:52:42:4d:0f:
49:bf:70:3c:b4:2b:70:24:2d:b2:86:a0:20:9d:0a:95:80:a0:
25:0e:19:48:c6:8f:57:fe:c2:10:9f:de:59:11:4e:5d:26:a4:
82:0d:3a:b8:5d:af:cd:62:b3:50:65:ec:66:a2:85:9a:20:4d:
0e:d3:24:85:8c:3d:75:47:33:14:c3:73:31:a1:cb:63:f7:de:
19:d9:8a:0d:fd:26:eb:18:3d:21:25:c4:91:09:af:51:f4:aa:
cf:e4:b7:eb:74:ae:8c:9d:1f:d6:9a:47:c9:bb:c7:ee:17:df:
a4:0b:33:f5:4f:6d:25:a9:3b:38:02:22:9d:d4:fd:d7:d2:e2:
c0:2b:e9:81:3a:94:94:ef:80:3b:6b:76:bd:4c:53:de:17:7f:
8d:51:19:5b:cf:77:aa:cc:60:ca:c9:30:fa:ad:9b:e4:84:e9:
04:2c:f3:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:09 2025 by rpki-client on console.sobornost.net