Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eG1k6uSinGZdwGXVPjxg08MZDXM.cer
File: eG1k6uSinGZdwGXVPjxg08MZDXM.cer (raw, json)
Hash identifier: 7VenbqhgSeLjHMAi2WKO7f8C66uC1rjK2cmMOgzRuPI=
Subject key identifier: 78:6D:64:EA:E4:A2:9C:66:5D:C0:65:D5:3E:3C:60:D3:C3:19:0D:73
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC9B889F8AA5A7E532BE9339C17B682EB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4e/0846e2-337d-4f13-9fd3-651c939f30d6/1/eG1k6uSinGZdwGXVPjxg08MZDXM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4e/0846e2-337d-4f13-9fd3-651c939f30d6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 10:29:23 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: IP: 194.246.72.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:b8:89:f8:aa:5a:7e:53:2b:e9:33:9c:17:b6:82:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 10:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=786d64eae4a29c665dc065d53e3c60d3c3190d73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ad:0f:a8:43:9c:db:09:03:fe:cf:8e:dc:03:
5d:17:17:a8:ed:30:fd:1e:ec:0d:60:05:04:a2:5c:
9d:fd:db:30:82:46:c7:40:e6:ab:25:29:86:35:dc:
e5:c9:7c:04:66:89:37:c8:ab:cc:e4:d8:8d:96:19:
fc:3c:b3:6d:68:84:0d:36:6b:06:c7:f8:52:4d:47:
42:db:3b:13:48:e3:21:df:63:42:65:4d:8c:c5:5b:
c9:47:08:f8:e1:77:42:5c:87:dd:56:2e:78:e7:be:
b8:77:e0:6e:35:bc:5b:90:bf:e9:ce:75:d4:71:23:
7c:2e:53:64:60:87:e2:15:4b:ce:52:20:75:15:74:
f2:ae:3f:53:e0:ce:61:cd:ec:70:9e:48:30:b4:de:
ea:c1:2b:8d:d6:89:80:b3:3f:c3:ef:a4:64:0c:e5:
81:8d:50:fb:57:d5:3d:41:2a:80:37:84:e6:b9:30:
e1:b7:44:df:42:73:aa:ee:e6:12:e5:ec:31:e7:34:
5c:28:c1:29:c5:b3:fb:6e:f3:3a:bc:86:af:32:9d:
5f:ad:f7:a4:86:58:00:6f:0f:30:69:b8:5b:9e:f6:
49:6b:e1:3b:e4:2d:51:c4:29:2d:da:34:a0:84:72:
da:93:5f:94:21:03:e0:2a:58:4c:54:3e:54:eb:63:
22:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:6D:64:EA:E4:A2:9C:66:5D:C0:65:D5:3E:3C:60:D3:C3:19:0D:73
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0846e2-337d-4f13-9fd3-651c939f30d6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/0846e2-337d-4f13-9fd3-651c939f30d6/1/eG1k6uSinGZdwGXVPjxg08MZDXM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.246.72.0/23
Signature Algorithm: sha256WithRSAEncryption
80:ec:56:65:0f:6b:c5:62:1d:fa:af:71:0a:7f:2a:ea:aa:ec:
6a:66:a1:88:e6:6d:1a:1b:7d:f8:e7:f7:b0:ac:dd:9e:59:a9:
95:3a:5b:7d:64:3e:2c:c3:d6:77:51:c0:78:d5:37:e3:de:17:
17:51:a2:4b:f9:bb:b7:26:c0:29:9a:48:e1:89:56:f1:d8:fe:
ac:88:9a:15:a4:2b:f0:ac:49:cc:d5:86:d2:69:fb:f6:b0:07:
71:d9:b0:a9:90:3e:e9:13:5e:07:96:e9:61:32:2f:d3:36:5c:
cd:bb:16:2f:45:81:33:93:55:78:8b:f8:11:d6:3f:2d:aa:3c:
55:41:2a:22:60:f4:17:ac:16:b3:74:0f:20:15:d1:bd:0a:79:
72:d2:2d:1d:b9:34:b1:29:01:fc:5b:35:c6:f4:10:a0:20:bb:
97:2e:ac:03:ee:c7:80:9e:22:82:44:21:0d:75:d7:e7:3e:95:
ac:18:9e:00:2c:19:cc:a4:5f:9c:54:86:13:24:cd:fb:03:ca:
92:b7:a3:73:4e:c0:62:98:dd:75:84:99:6d:e4:10:84:0b:06:
dc:b4:68:b6:9c:b3:dd:7d:69:4b:64:98:9c:68:64:54:46:78:
73:29:1e:c7:d8:f0:3e:c3:59:ec:9f:4c:12:8a:48:87:3d:56:
e6:21:02:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 12 03:57:35 2024 by rpki-client on console.sobornost.net