Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eIeO3aauSgFH23C2YQXP0X8gZqM.cer
File: eIeO3aauSgFH23C2YQXP0X8gZqM.cer (raw, json)
Hash identifier: aZvP27g7K+ppEQOy/RUg70n0NIR9uAhlhjGF9TCOBAY=
Subject key identifier: 78:87:8E:DD:A6:AE:4A:01:47:DB:70:B6:61:05:CF:D1:7F:20:66:A3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FC06271385700F2A8146F21CA9B4F5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/95/f87422-3c8e-4b51-bab8-2e3ed5a17098/1/eIeO3aauSgFH23C2YQXP0X8gZqM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/95/f87422-3c8e-4b51-bab8-2e3ed5a17098/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:48:49 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 149.205.0.0/16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:06:27:13:85:70:0f:2a:81:46:f2:1c:a9:b4:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=78878edda6ae4a0147db70b66105cfd17f2066a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:04:1e:fc:66:a2:21:c4:76:49:10:2d:30:40:
a3:df:ee:91:49:5f:90:fe:36:14:e2:81:49:64:b4:
e9:db:2d:17:be:f4:b2:93:bf:e4:7e:92:a7:01:b3:
2e:60:44:5a:6f:14:fe:a9:c2:a6:6a:08:e0:ff:83:
dc:d4:59:14:41:9d:8d:6e:2e:3f:96:81:b6:c5:9e:
5c:21:47:ca:b2:93:c1:06:ba:1a:bc:20:5a:56:c8:
53:47:8c:8d:1d:f5:fd:81:19:a0:fc:c6:7f:5d:df:
84:9b:11:71:ef:18:f0:98:dc:0a:c6:a1:72:02:e8:
5b:a7:68:c6:07:e1:8c:f5:c1:08:f6:10:f6:fe:bc:
08:ce:ec:43:db:96:fd:8d:f7:18:a0:f3:1f:20:f2:
18:b2:6c:45:23:b5:f8:5e:24:d2:35:64:f3:5e:67:
01:26:34:c0:34:13:cc:8d:14:8e:1b:dc:26:94:b4:
e3:4c:10:fb:ca:9a:a7:36:bd:c9:ce:49:30:2d:34:
0c:3a:b4:06:70:fe:06:1f:93:39:5a:2f:76:78:0c:
24:1f:b5:6e:57:ae:47:25:26:67:1e:f1:16:cf:27:
f4:00:1a:1d:bb:b1:4a:c4:15:7a:f8:46:92:71:a3:
e3:23:48:52:75:b2:c2:5c:d9:5e:1d:99:73:02:54:
33:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:87:8E:DD:A6:AE:4A:01:47:DB:70:B6:61:05:CF:D1:7F:20:66:A3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f87422-3c8e-4b51-bab8-2e3ed5a17098/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f87422-3c8e-4b51-bab8-2e3ed5a17098/1/eIeO3aauSgFH23C2YQXP0X8gZqM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.205.0.0/16
Signature Algorithm: sha256WithRSAEncryption
75:6e:e1:79:82:28:bb:1c:f1:55:96:1f:47:d0:f3:3b:99:37:
31:ed:cc:f5:a4:9d:5a:27:b5:29:db:a4:55:e8:cd:6c:a9:4d:
7b:50:a2:03:87:12:70:cc:0a:f4:59:ad:39:39:4c:04:9f:0d:
fa:c7:01:45:5a:43:1b:ab:0d:b5:5e:b9:e5:67:8b:0e:5d:d9:
f6:96:73:b5:95:e2:98:d9:9b:ee:3a:53:fd:ed:63:0e:8a:53:
87:2c:37:a0:2f:df:a6:7e:d2:fc:17:40:c9:b8:cd:e1:12:f2:
7d:ee:a3:cf:7c:28:ec:f5:9d:ab:34:94:c6:d6:69:fd:ff:69:
c3:48:d3:17:e8:7d:86:2e:71:a6:b7:a0:ce:b5:4b:9d:00:e1:
5d:d0:05:b1:32:73:37:6f:d3:b1:ed:41:19:92:eb:8c:e6:9e:
4a:22:e9:33:4e:42:04:96:b4:21:c6:cb:39:11:d5:c6:0a:f2:
b5:78:ee:60:a9:b3:ec:fc:3d:69:0f:9b:9a:8c:61:1f:77:40:
5e:07:d6:9e:08:02:c8:e6:50:b9:10:09:c2:69:07:f7:a7:31:
8d:43:6f:ed:ad:d6:c0:e9:d9:97:cc:43:fa:1e:f6:e3:c2:26:
29:cc:68:dd:29:ae:e4:62:58:62:7f:26:dc:a5:ca:be:8c:39:
e6:db:99:b2
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgISAZQi/AYnE4VwDyqBRvIcqbT1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMTc0ODQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODg3OGVkZGE2YWU0YTAxNDdkYjcwYjY2MTA1Y2ZkMTdmMjA2NmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwQe/GaiIcR2SRAtMECj3+6RSV+Q
/jYU4oFJZLTp2y0XvvSyk7/kfpKnAbMuYERabxT+qcKmagjg/4Pc1FkUQZ2Nbi4/
loG2xZ5cIUfKspPBBroavCBaVshTR4yNHfX9gRmg/MZ/Xd+EmxFx7xjwmNwKxqFy
Auhbp2jGB+GM9cEI9hD2/rwIzuxD25b9jfcYoPMfIPIYsmxFI7X4XiTSNWTzXmcB
JjTANBPMjRSOG9wmlLTjTBD7ypqnNr3JzkkwLTQMOrQGcP4GH5M5Wi92eAwkH7Vu
V65HJSZnHvEWzyf0ABodu7FKxBV6+EaScaPjI0hSdbLCXNleHZlzAlQzKQIDAQAB
o4ICgzCCAn8wHQYDVR0OBBYEFHiHjt2mrkoBR9twtmEFz9F/IGajMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzk1L2Y4NzQy
Mi0zYzhlLTRiNTEtYmFiOC0yZTNlZDVhMTcwOTgvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTUvZjg3NDIy
LTNjOGUtNGI1MS1iYWI4LTJlM2VkNWExNzA5OC8xL2VJZU8zYWF1U2dGSDIzQzJZ
UVhQMFg4Z1pxTS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUF
BwEHAQH/BA8wDTALBAIAATAFAwMAlc0wDQYJKoZIhvcNAQELBQADggEBAHVu4XmC
KLsc8VWWH0fQ8zuZNzHtzPWknVontSnbpFXozWypTXtQogOHEnDMCvRZrTk5TASf
DfrHAUVaQxurDbVeueVniw5d2faWc7WV4pjZm+46U/3tYw6KU4csN6Av36Z+0vwX
QMm4zeES8n3uo898KOz1nas0lMbWaf3/acNI0xfofYYucaa3oM61S50A4V3QBbEy
czdv07HtQRmS64zmnkoi6TNOQgSWtCHGyzkR1cYK8rV47mCps+z8PWkPm5qMYR93
QF4H1p4IAsjmULkQCcJpB/enMY1Db+2t1sDp2ZfMQ/oe9uPCJinMaN0pruRiWGJ/
Jtylyr6MOebbmbI=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:40 2025 by rpki-client on console.sobornost.net