Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/czFVtC-vxzVab8gJx9nM9bL4zcI.cer
File: czFVtC-vxzVab8gJx9nM9bL4zcI.cer (raw, json)
Hash identifier: Sq4zx1Bc1LlaVF+xVbWJIZkTjlxS0hV2U/I7fdMHGS4=
Subject key identifier: 73:31:55:B4:2F:AF:C7:35:5A:6F:C8:09:C7:D9:CC:F5:B2:F8:CD:C2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B46D070E1015A2D17FA0ED1DE8BA1F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/95/4ceff0-0ae4-414c-a0f6-e51e6ef5d3b1/1/czFVtC-vxzVab8gJx9nM9bL4zcI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/95/4ceff0-0ae4-414c-a0f6-e51e6ef5d3b1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:48:43 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.138.104.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:6d:07:0e:10:15:a2:d1:7f:a0:ed:1d:e8:ba:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=733155b42fafc7355a6fc809c7d9ccf5b2f8cdc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:69:20:54:6b:b1:05:52:47:9f:04:7c:a5:1c:
40:0c:bf:42:30:7b:6d:cc:33:f2:47:74:c6:41:8c:
bc:c9:65:c7:eb:9d:14:f8:ca:b9:21:7b:d7:2e:99:
c0:02:ef:7f:56:8d:69:6b:e8:10:6b:26:d9:be:bc:
b7:14:50:b6:e1:d5:0d:9a:34:8a:7b:d6:db:16:87:
86:96:7d:50:c2:3f:cf:35:13:73:ed:98:08:93:a9:
74:3f:e1:c4:78:5a:f4:56:41:68:3a:e8:2a:4d:a0:
94:c2:ed:bd:c9:c9:6c:cf:06:7d:4c:5a:06:03:34:
fa:d4:e6:7a:f9:14:6b:af:25:39:9c:6f:1b:ec:6e:
70:fb:7d:53:42:67:72:e3:00:8f:f9:3f:c9:c3:58:
13:42:22:e9:10:85:71:df:a6:2a:17:84:a0:de:95:
61:c5:c5:70:b9:4c:f2:7d:8a:2e:91:74:a6:9d:88:
61:f2:7c:37:12:0b:51:38:8e:76:77:7e:3f:28:7f:
08:28:62:fa:89:b3:72:fe:18:3a:6d:9f:d6:7a:be:
e5:43:2a:8f:ae:cc:d6:7f:d7:14:63:42:fb:2e:de:
a9:8f:e7:ac:30:69:aa:ff:a8:62:fc:e1:28:30:43:
68:99:2b:7c:e5:fb:ef:c2:58:bf:a6:8b:e4:76:b3:
b4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:31:55:B4:2F:AF:C7:35:5A:6F:C8:09:C7:D9:CC:F5:B2:F8:CD:C2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/4ceff0-0ae4-414c-a0f6-e51e6ef5d3b1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/4ceff0-0ae4-414c-a0f6-e51e6ef5d3b1/1/czFVtC-vxzVab8gJx9nM9bL4zcI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.138.104.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:5c:8a:9c:6c:73:b7:5a:01:33:8a:da:dc:c5:2d:7d:50:1e:
e0:ca:f7:18:a0:16:c6:8f:04:f5:60:32:e9:81:0d:47:c9:23:
ad:08:4d:c1:b1:7a:17:e8:bc:0a:f8:36:64:15:1f:8c:8d:fe:
d4:99:01:18:74:01:1b:65:99:77:c1:78:30:49:e6:7b:41:86:
eb:a1:d4:9b:d4:e6:94:4e:bb:48:20:51:7f:78:a8:80:ff:b1:
36:1b:6b:df:a2:0e:38:0c:75:25:89:a6:3a:d8:11:ee:f6:55:
4b:c2:8c:9a:99:e6:17:1d:ca:b1:a8:48:b8:c8:76:af:77:27:
60:01:c5:42:d7:63:36:e8:57:c2:36:ad:9d:8e:e8:f3:eb:ae:
db:ba:df:72:ef:5a:91:2d:9b:fd:25:4e:93:d4:73:5a:8b:01:
64:4e:39:d2:bd:0a:b2:92:40:c5:72:7a:aa:9b:22:aa:f6:19:
d9:7b:fe:5c:41:81:c3:3b:f3:84:08:cb:04:09:04:36:7a:70:
eb:86:53:cc:b1:10:17:66:c6:69:c8:69:c3:b0:4c:27:71:b0:
9d:b2:0c:99:91:c2:f6:5f:a6:d0:1d:88:ae:38:23:de:fd:c6:
ae:1a:58:70:7c:6c:82:ff:d7:a9:1f:43:f7:13:fd:de:2e:93:
01:ff:ef:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:12 2025 by rpki-client on console.sobornost.net