Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/hk3xEo99QsaISGO18nPz66ZZYVY.cer
File: hk3xEo99QsaISGO18nPz66ZZYVY.cer (raw, json)
Hash identifier: fj7d4XGhS8jrkzViK1x55VncY/6ycA6HdvC61RwGSXU=
Subject key identifier: 86:4D:F1:12:8F:7D:42:C6:88:48:63:B5:F2:73:F3:EB:A6:59:61:56
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194D55CF4ACA40AE6901A089D741DF680B6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 05 Feb 2025 09:07:06 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.93.40.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d5:5c:f4:ac:a4:0a:e6:90:1a:08:9d:74:1d:f6:80:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 5 09:07:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=864df1128f7d42c6884863b5f273f3eba6596156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6c:29:9c:27:ec:31:63:3d:56:99:4e:46:9b:
34:65:77:e8:9b:26:4c:df:d6:12:95:70:d5:f4:1b:
72:c6:c0:05:2a:89:6e:5c:55:05:06:02:a2:11:a1:
d2:15:95:3e:33:0d:aa:7a:3e:b0:81:7d:32:f6:0f:
dd:c8:1e:5c:eb:c1:67:d4:d9:ac:46:59:ba:a9:fe:
62:45:ca:56:f8:47:51:e5:b9:26:69:d0:d5:40:ad:
90:ef:15:0c:04:73:40:61:f6:f9:31:2c:d9:3c:37:
20:64:df:e1:24:31:17:9a:2d:01:38:e0:fc:d2:a9:
85:8a:12:1f:01:16:ef:6d:8e:9f:a7:1d:6a:10:5d:
c4:35:0e:64:bc:4a:b9:e5:60:56:87:f0:bf:9e:d1:
b7:48:2c:4a:e8:33:29:47:ba:5c:47:32:ad:39:62:
43:a0:3a:7a:f6:31:15:02:94:1c:a3:04:44:bf:53:
be:15:fa:c3:1d:1c:c0:11:2a:86:45:de:81:e9:2a:
76:8a:b7:3a:63:cd:1c:02:5c:95:b5:60:78:5e:b6:
e0:87:66:5f:95:cc:6c:29:a6:ce:80:89:df:8c:d6:
6a:58:c9:73:e9:de:df:55:f0:19:43:d1:af:8a:c3:
d3:1b:8f:e5:6b:46:18:11:0d:5d:fa:b2:74:06:94:
a8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:4D:F1:12:8F:7D:42:C6:88:48:63:B5:F2:73:F3:EB:A6:59:61:56
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9b5d02-16f8-4284-943e-80d7fa5dfbb4/1/hk3xEo99QsaISGO18nPz66ZZYVY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.93.40.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:4c:7a:e0:c8:01:2d:b7:78:73:92:37:2d:f9:59:db:cb:0e:
cf:c7:68:30:06:f8:36:59:ff:ab:41:20:48:29:3a:f5:c8:c2:
60:19:d1:bd:59:1b:ec:5d:ba:34:e9:b6:79:48:c8:1c:cd:ce:
a6:99:ae:53:b9:aa:97:f8:e9:1d:2b:6d:d5:02:12:6e:b5:2c:
61:c5:a1:a7:a3:0c:24:6a:f5:6a:64:16:6f:82:5b:81:12:40:
a8:0c:53:0a:c6:ef:27:4e:f2:4a:a7:99:ac:78:72:d7:16:e3:
c7:5b:4a:85:b1:9d:26:c3:58:85:d1:ad:16:4a:e4:00:02:34:
8d:6b:34:70:21:3d:1d:d6:df:c6:cd:77:a1:75:67:81:4f:0a:
83:4e:68:e3:7d:fc:21:b1:a9:8c:6e:51:66:dd:01:7a:ab:14:
64:68:a5:c6:09:bf:38:67:21:40:48:a0:a4:8f:7a:d9:1a:76:
3e:ae:91:53:bb:68:f4:87:86:53:c5:a4:ce:b3:33:cc:56:bf:
6d:c7:41:a4:06:04:bd:5c:5f:11:91:be:fe:2a:fe:1d:5a:d2:
bc:3f:d2:a1:d7:09:ba:d9:68:d4:b4:56:21:04:0c:cf:39:21:
33:9b:60:a3:5c:5f:e2:22:1a:24:eb:95:45:9c:e4:cb:ab:c1:
b9:bc:f0:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:15 2025 by rpki-client on console.sobornost.net