
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/h19BKtsY1C-t0KhYc3GNrakx0cI.cer
File: h19BKtsY1C-t0KhYc3GNrakx0cI.cer (raw, json)
Hash identifier: ufA0IaFvXUIHsqc/vxuNo+SZDvVwWV3385EhDuRGb4g=
Subject key identifier: 87:5F:41:2A:DB:18:D4:2F:AD:D0:A8:58:73:71:8D:AD:A9:31:D1:C2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942825D9F9A93EFBE2CF7AFACD8E9AF2DB
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 17:52:36 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 5.63.21.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:d9:f9:a9:3e:fb:e2:cf:7a:fa:cd:8e:9a:f2:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 17:52:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=875f412adb18d42fadd0a85873718dada931d1c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a1:90:00:5e:5c:e7:22:ff:d2:b0:30:cb:47:
ca:4e:68:88:bd:f2:b7:22:21:00:ae:2f:56:d2:ab:
88:3e:15:45:a2:91:65:fc:f2:4e:4c:ee:93:35:ca:
0e:35:eb:17:28:6c:d7:b4:ca:19:cb:42:83:e7:a9:
2a:d8:fb:41:99:eb:8e:c1:11:09:bb:ed:13:fe:46:
d5:90:f8:00:99:93:ed:51:ab:90:26:33:90:8b:a0:
5d:1f:82:be:d9:89:fd:b5:ed:0e:57:91:a2:db:e3:
f1:8c:86:13:45:e7:d6:7e:44:69:7d:b8:fc:0a:38:
51:be:32:18:54:33:21:35:ad:83:1c:59:e5:0b:dc:
e6:ee:56:5e:97:2c:7b:0c:8e:34:08:61:4e:81:a5:
a4:c8:d5:2f:92:0c:6a:5f:f5:ea:7c:54:72:bd:69:
e1:a5:bf:3a:b9:ea:53:a0:03:b0:17:5f:37:50:1b:
a8:2d:f5:da:e9:b8:71:bf:42:47:60:4d:4a:69:02:
9f:7c:e5:a5:c6:90:97:b7:92:20:2b:3f:d9:83:98:
eb:2d:44:ee:35:9f:5b:f7:9f:e5:bb:8e:6f:f5:5a:
6d:bc:b8:5f:db:41:b2:b0:8e:4e:20:31:cc:c3:45:
dc:2e:9c:95:19:c4:f7:d4:96:c4:94:ab:8b:83:39:
4c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:5F:41:2A:DB:18:D4:2F:AD:D0:A8:58:73:71:8D:AD:A9:31:D1:C2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b841cc-d663-4633-9c49-147e386c0150/1/h19BKtsY1C-t0KhYc3GNrakx0cI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.63.21.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:56:71:33:90:4e:0d:43:03:db:73:a2:db:c9:30:09:0a:dc:
80:e7:2e:8f:75:b9:05:b0:84:89:b8:f4:14:70:39:d0:3b:cd:
48:62:48:da:5f:6b:53:1a:49:a4:73:d6:ac:aa:de:a0:21:04:
d3:4c:56:ca:26:8a:f5:b2:17:65:21:4e:ba:42:4d:e8:c4:5d:
13:ad:87:0c:86:97:e2:36:9c:4a:2f:50:fe:a4:d2:18:c9:6c:
9e:9a:78:fd:3e:19:cb:4e:d7:08:fc:82:c7:13:ec:8d:fb:09:
07:b7:50:46:e3:9c:2f:c6:3c:cb:44:11:bd:46:20:d5:be:4f:
4e:09:01:36:b1:53:fa:1c:a6:41:83:2d:db:7e:5c:c9:ee:54:
0c:dc:c2:21:a6:84:99:36:c7:42:9d:4d:c5:5a:6a:c4:3f:be:
ad:eb:80:b6:99:65:cd:66:fc:a7:24:d8:32:25:d1:03:a3:ab:
d8:96:c7:fc:4d:03:63:0f:04:6f:4a:5e:3c:56:b3:f0:c9:61:
d6:ee:1d:a8:6b:31:63:45:de:10:7b:ed:b1:04:13:0a:a7:78:
68:25:9e:af:ff:f3:dc:87:fa:2f:26:1f:88:f6:19:0b:34:81:
04:13:1f:a1:c3:b2:02:d4:4b:83:92:ff:d0:9b:48:99:bf:76:
7d:f9:e5:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:13 2025 by rpki-client on console.sobornost.net