Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dp1cUsMVfllF5mO5LtRALGBhbjs.cer
File: dp1cUsMVfllF5mO5LtRALGBhbjs.cer (raw, json)
Hash identifier: 3iBb++JCFvBYXJHxt2QwauTMgDeZVkrOdNvgaIYFfUY=
Subject key identifier: 76:9D:5C:52:C3:15:7E:59:45:E6:63:B9:2E:D4:40:2C:60:61:6E:3B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B20C5D4B349C05E1929B93B40FBA64
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:24 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 193.161.144.0 -- 193.161.146.255
IP: 193.161.154.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:0c:5d:4b:34:9c:05:e1:92:9b:93:b4:0f:ba:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=769d5c52c3157e5945e663b92ed4402c60616e3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:85:74:2a:ff:e7:6c:93:8b:8a:f9:4d:ea:5b:
50:56:18:d7:b5:1e:d8:34:ac:46:f0:5f:f5:78:de:
fc:7c:4d:67:ba:fe:3e:30:c8:13:bf:d7:ce:54:5e:
f8:ab:93:9a:f0:e3:ab:12:16:66:3c:6a:9d:63:81:
27:7c:69:b7:b0:b3:c9:ad:a3:74:0b:0f:00:77:d7:
b1:f6:87:1e:8b:0b:9e:d5:1c:fa:35:5b:42:cd:e0:
1f:1d:e7:5c:f5:bc:47:6e:76:17:05:19:db:e8:55:
16:a5:81:6e:e9:f3:a2:2f:e3:16:aa:a8:05:13:8c:
77:23:7b:1e:56:d7:77:03:df:d1:c9:c3:0b:51:c6:
c7:f3:57:70:5b:af:a0:ec:f8:14:a2:5b:f6:25:ef:
38:78:2e:c0:f7:e4:9f:df:56:18:98:49:1e:ea:cd:
e9:29:ee:45:f7:0e:bd:e6:05:75:ba:e5:7f:50:75:
a6:5a:df:fb:64:8a:a9:93:cd:d4:12:69:09:38:77:
1c:8c:ee:6b:05:2c:00:44:88:9f:1f:cb:31:0b:69:
cd:3c:99:48:0b:ce:9f:86:ef:be:b4:7a:77:dc:64:
71:9d:3e:74:75:60:67:fb:eb:1d:3a:a8:8a:5b:44:
dd:62:79:34:1d:ce:c6:c8:91:1d:6e:d5:82:ba:2a:
c6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:9D:5C:52:C3:15:7E:59:45:E6:63:B9:2E:D4:40:2C:60:61:6E:3B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/cc66b2-1267-4516-a39f-376b49d52d7e/1/dp1cUsMVfllF5mO5LtRALGBhbjs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.161.144.0-193.161.146.255
193.161.154.0/23
Signature Algorithm: sha256WithRSAEncryption
34:e2:86:81:3f:2c:59:c9:8a:4c:89:75:b2:aa:3e:f6:af:8b:
ea:85:ee:fd:e3:f9:39:a2:97:a0:59:4f:27:6c:9d:12:2e:99:
a8:ed:9c:c7:59:51:f2:73:b5:34:b4:52:06:d0:27:8c:29:d9:
46:55:9a:36:d8:9c:03:8f:2e:59:c7:91:34:fb:aa:e0:b8:2e:
0a:db:8f:46:42:f4:8a:ce:83:8e:47:a8:71:5a:e3:42:25:ae:
2f:a6:6a:77:1a:43:a1:c7:a0:15:80:a9:93:42:8d:ca:4b:74:
8c:01:d4:43:37:3a:11:94:5d:d8:b0:66:71:66:31:b5:92:a4:
e9:14:ee:99:67:40:66:58:3b:1d:6c:fd:54:2f:e4:91:f3:d1:
65:13:8c:92:a5:a5:13:2b:b9:2a:b7:a8:e1:89:a0:8b:ca:c8:
87:e7:fb:3d:9b:29:1c:c9:77:79:6a:9f:59:b5:ec:d4:31:f6:
15:04:21:b3:c6:4c:cb:8d:de:51:ed:5a:81:81:26:d3:32:74:
24:3a:f2:2b:82:2f:08:73:55:d8:72:e0:4f:ae:b9:7e:89:6d:
18:27:b0:ec:16:32:10:4b:47:bd:d3:e2:78:0d:95:32:6a:9a:
e6:c4:33:81:9d:72:13:66:b7:e2:35:c1:5c:b6:f6:84:0e:58:
51:e6:cb:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:28 2025 by rpki-client on console.sobornost.net