Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer
File: hfTuFPbTinzwcSed_3s5FwLjcTU.cer (raw, json)
Hash identifier: ycGbZ1HcLDnhxL1WSkXBhHFYwGOEkPmVWteq2VbZwN8=
Subject key identifier: 85:F4:EE:14:F6:D3:8A:7C:F0:71:27:9D:FF:7B:39:17:02:E3:71:35
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B367436E22D62358BF7CBDA9FB3F53
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:48:44 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.146.224.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:67:43:6e:22:d6:23:58:bf:7c:bd:a9:fb:3f:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=85f4ee14f6d38a7cf071279dff7b391702e37135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8a:01:17:2a:01:02:89:aa:b6:85:9a:9b:13:
f6:9e:7c:41:1e:12:c8:87:ea:a9:20:a8:8c:18:3b:
67:65:97:ae:d4:69:31:e0:e7:25:53:44:fc:38:6d:
fe:26:e0:39:6e:e4:e5:aa:e3:63:05:fa:f2:e0:cf:
35:45:67:d7:e3:5d:85:80:44:4e:ac:c9:23:64:f9:
de:51:f6:67:b5:bb:8d:22:7a:82:06:80:c8:e7:35:
2c:62:d1:e8:e9:f1:a2:3a:fa:16:7a:b0:2a:16:a2:
31:99:2d:86:cc:0a:af:09:f4:1b:4d:81:80:5a:e3:
9f:fa:59:c4:85:55:13:8c:c5:51:3e:cf:a3:20:b9:
ed:08:cb:42:0b:6b:62:a3:15:6b:8c:b0:e4:1c:9a:
4e:f9:1a:48:2e:99:59:2d:96:a7:28:8a:75:6b:20:
de:0b:ad:81:6f:f0:00:d9:d4:fe:71:37:c4:5b:c7:
40:af:c5:35:8b:c8:e9:39:d6:b6:ad:a1:99:ef:4f:
1b:b9:16:07:06:54:a2:52:ab:09:bf:33:7e:da:7a:
2b:3b:38:e1:c6:d2:78:75:2b:98:75:fb:55:8a:d8:
96:16:9e:72:ae:21:84:3b:21:72:06:49:9a:7c:75:
2c:67:f8:96:15:92:fc:f2:38:0d:68:be:14:c9:20:
bb:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:F4:EE:14:F6:D3:8A:7C:F0:71:27:9D:FF:7B:39:17:02:E3:71:35
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.146.224.0/22
Signature Algorithm: sha256WithRSAEncryption
99:cc:0e:b2:a6:32:8a:5b:22:a2:a6:4d:cb:a3:de:5b:4f:85:
1e:8c:da:ed:68:70:6c:e6:a6:37:54:99:e2:18:0f:d1:ba:34:
10:14:65:ec:05:d1:cc:10:79:bb:0d:54:98:40:f8:d7:8b:38:
12:c7:c5:82:2c:a1:42:61:0f:11:1d:5e:73:e8:9f:ef:0d:e7:
01:24:57:45:c7:39:5a:78:b5:58:23:8c:08:c1:a6:0d:f4:c0:
86:9b:d2:15:4c:c6:36:9b:e4:28:13:aa:af:c8:17:6c:11:7a:
97:47:a4:7d:d4:b0:bc:08:1c:63:17:03:2f:f8:25:fc:ac:ef:
74:70:3e:45:51:53:34:3e:4f:04:7c:a8:41:d3:38:30:5b:ca:
fb:c3:ce:f7:41:ab:3e:30:f7:21:1b:ab:2d:4b:00:f0:de:c8:
0f:6d:5c:64:cd:ce:8b:1d:0c:09:29:06:87:89:c5:af:d6:16:
0c:92:7b:09:74:31:56:ef:84:14:74:36:67:2a:51:7d:54:e6:
5d:b9:7f:23:34:8e:05:a9:a6:f9:51:0c:ac:81:72:7b:e2:16:
59:e9:00:b7:3b:81:8c:36:9f:c5:24:d4:8b:3f:b8:2e:0c:e7:
73:9a:d1:f1:e1:b8:48:56:99:a4:ba:b8:88:06:dc:3c:cc:df:
d8:bb:78:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:15 2025 by rpki-client on console.sobornost.net