Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8jZS9834PkAzWqMQizbFNl860Y.cer
File: d8jZS9834PkAzWqMQizbFNl860Y.cer (raw, json)
Hash identifier: T2OOhBHg1vekGoxr2dlvcAyn+JCVfbsZGbQZJbla2HI=
Subject key identifier: 77:C8:D9:4B:DF:37:E0:F9:00:CD:6A:8C:42:2C:DB:14:D9:7C:EB:46
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01955C2B8C861207A637644F1E9B20C11A53
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 03 Mar 2025 13:21:52 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.53.16.0/20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5c:2b:8c:86:12:07:a6:37:64:4f:1e:9b:20:c1:1a:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Mar 3 13:21:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=77c8d94bdf37e0f900cd6a8c422cdb14d97ceb46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:31:c2:ff:af:3b:ca:24:d7:e2:f1:c3:e4:5a:
63:6b:f6:ea:7a:dc:18:7d:65:37:83:be:ae:46:9c:
24:56:e7:38:af:e0:92:a3:57:34:0e:b7:a5:70:91:
cb:52:52:50:71:33:39:c6:2d:a8:95:a1:f3:6c:aa:
82:80:df:f3:fd:19:a8:d3:d8:20:4e:98:8d:2d:16:
ac:65:40:86:4f:71:cc:8f:70:60:b3:bf:9c:43:53:
52:c5:d7:c7:1d:14:d7:94:9e:ab:62:c3:e5:d6:07:
c2:58:1e:3a:fa:b7:5c:47:b6:29:11:45:24:14:cc:
0c:40:09:95:9e:fe:38:23:26:e9:a7:a2:21:dc:01:
36:aa:b4:ed:d9:d3:b9:d2:a3:99:c8:84:ee:a0:1f:
bc:e3:b0:70:4b:e2:ca:0f:3b:a2:6f:a3:a9:66:34:
4a:03:17:ce:29:ae:fe:70:5d:13:37:c3:5e:7d:ae:
b6:b7:16:b5:41:4c:18:d6:bb:20:87:f2:80:0b:9e:
ab:db:5e:14:3a:dd:ba:34:c9:ce:31:c1:8f:d6:64:
f4:ca:25:92:01:67:b6:fc:2e:77:bd:61:7c:15:76:
a8:c5:11:5c:dc:02:f0:d3:48:69:92:e3:2f:d5:24:
52:f9:64:6c:ae:1e:92:9d:f0:16:fa:4e:e9:f9:0b:
51:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:C8:D9:4B:DF:37:E0:F9:00:CD:6A:8C:42:2C:DB:14:D9:7C:EB:46
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6ce53c-7670-47a7-81ae-54c0ae6176d4/1/d8jZS9834PkAzWqMQizbFNl860Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.53.16.0/20
Signature Algorithm: sha256WithRSAEncryption
85:66:fa:39:b1:80:01:a3:96:2e:46:29:86:a0:20:be:07:40:
4c:03:f1:e6:14:67:2f:9e:d0:c8:e9:e4:39:28:98:24:a1:d3:
ac:bc:71:f4:18:50:6b:5e:38:d9:cb:ff:88:ce:78:36:9b:a0:
d3:4c:53:b7:37:7f:8e:b3:75:23:16:28:d8:41:66:73:52:8b:
2b:11:5f:83:d7:e6:ab:0a:65:a0:05:bf:cb:ab:dd:95:42:f9:
65:11:7d:37:b4:70:2a:0d:f9:ea:a3:88:dc:20:32:f5:fd:db:
c1:1b:4d:31:b8:49:f2:5e:e3:1b:16:da:ed:d5:1f:51:75:86:
3a:2b:71:36:3b:98:7f:18:f8:92:6f:b1:56:c2:19:45:67:50:
f8:88:23:ec:46:a2:2c:77:b5:3d:3b:51:60:d0:39:33:29:53:
88:d5:61:13:64:26:c7:29:e1:26:8e:3b:54:09:d6:20:3d:44:
fc:78:ea:ec:36:6a:4b:97:36:a3:a3:5d:8e:14:34:b2:a2:ed:
9f:a8:c3:2e:ce:86:8c:06:d5:5c:bc:15:ec:4d:d4:d6:4e:c2:
d2:7d:c3:61:8a:5c:b6:87:05:f3:d9:cc:55:4b:a5:8e:42:d0:
da:66:fa:f4:0b:7c:6b:4b:b0:ba:fa:9f:a4:9c:2e:cd:a0:f2:
32:03:30:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:17 2025 by rpki-client on console.sobornost.net