Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.cer
File: g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.cer (raw, json)
Hash identifier: znPiwqXDrWD9JeSv/tYbD8VYSjx3+UGNHtMe1r6J3xA=
Subject key identifier: 83:B5:B4:91:3C:C7:8E:40:80:3C:00:BE:C6:B1:A9:DC:48:FF:36:84
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194236A0F681F3A8574FA454C0FFD48EFF5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:49:00 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.115.161.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:0f:68:1f:3a:85:74:fa:45:4c:0f:fd:48:ef:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=83b5b4913cc78e40803c00bec6b1a9dc48ff3684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7f:35:2a:43:17:13:1e:66:5b:d2:78:30:aa:
3c:8c:54:5c:63:45:68:eb:cb:98:e2:84:43:fe:c8:
26:06:1d:17:5c:46:35:8c:61:f2:a5:6b:16:19:f6:
3b:61:91:59:0e:32:b8:f5:5c:59:90:61:14:6c:5f:
b1:16:23:88:8d:f1:72:e8:02:5a:e4:05:cc:7a:c9:
d2:1d:29:1a:36:56:0e:15:30:fe:af:3a:15:ab:7a:
70:95:41:47:31:a6:5f:02:92:04:91:34:92:61:88:
28:d9:3c:39:27:e5:b9:39:4f:2f:f8:79:c3:85:1e:
5c:11:2b:a2:69:65:9c:ba:9c:ee:0c:25:43:b5:37:
d7:0f:85:4f:b5:bf:29:ee:5b:fa:ef:02:d4:79:71:
6f:46:5a:9b:f7:2d:9f:6a:74:d1:64:f1:b7:69:01:
e1:6d:a8:96:2f:10:ec:2b:c9:30:be:e4:12:42:2c:
0a:8b:43:2d:d9:0e:c8:c8:12:b1:fc:33:6c:53:a1:
0a:74:da:63:95:f5:6f:22:21:20:e7:81:52:4b:d4:
d7:de:87:3f:7d:85:7d:ee:c7:37:08:86:82:fc:5e:
0b:a7:a0:9e:91:7b:fc:2c:8c:63:0a:dd:69:b5:a1:
ea:1b:26:ee:25:b6:83:81:0e:b0:88:c6:72:3c:39:
3c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:B5:B4:91:3C:C7:8E:40:80:3C:00:BE:C6:B1:A9:DC:48:FF:36:84
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.161.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:4f:e6:3b:07:a1:98:53:41:c5:79:9d:50:2c:48:fa:05:ca:
c2:84:fc:ff:43:da:b1:85:e1:b9:f9:39:a8:26:bb:7e:ad:4e:
b8:39:68:f9:ca:1d:24:72:e3:ec:23:39:20:b8:d2:01:ad:08:
05:9a:07:b3:58:d7:86:0d:1b:28:2a:a3:8a:6f:48:3c:fe:fc:
5f:35:4c:35:ac:b4:87:3a:a2:ff:5e:f4:1c:0c:3a:a0:52:07:
1a:63:94:86:51:15:a8:22:df:1b:53:fb:04:4c:e4:d9:98:ce:
6c:0f:9b:3a:8f:cb:f5:5e:27:3e:f7:54:e3:ad:f5:6e:d5:96:
f2:06:25:e5:1f:60:46:28:49:7a:b4:77:43:23:50:cb:e3:41:
05:cb:6e:f8:db:24:df:21:34:8f:9e:7b:36:c2:ae:a2:81:07:
db:45:05:bd:3d:4c:8c:04:1c:4f:b9:95:3a:16:b6:06:9a:dd:
99:d7:d0:0d:c5:4f:60:70:30:7b:8d:a4:00:63:27:58:e5:b7:
91:8e:cb:84:b3:d8:46:88:f7:3b:e9:22:23:1f:a5:bd:5a:89:
25:5f:15:7d:2f:54:10:58:2b:5d:b3:89:d0:ee:be:f7:98:36:
b7:05:67:a4:8b:b2:96:9c:45:98:cf:ec:60:2f:5f:04:46:76:
8c:b5:53:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:10 2025 by rpki-client on console.sobornost.net