Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/iXN4Em9V2WUZVT2qSOAuMoISFkQ.cer
File: iXN4Em9V2WUZVT2qSOAuMoISFkQ.cer (raw, json)
Hash identifier: KQSGvxBT16nX4mKA6xW9DObkojWgKGXvq0BBJuXjlP8=
Subject key identifier: 89:73:78:12:6F:55:D9:65:19:55:3D:AA:48:E0:2E:32:82:12:16:44
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C589AA15F20DE043A64939CC5B8CF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/iXN4Em9V2WUZVT2qSOAuMoISFkQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:47:58 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.83.0.0/22
IP: 195.95.236.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:58:9a:a1:5f:20:de:04:3a:64:93:9c:c5:b8:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=897378126f55d96519553daa48e02e3282121644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:c3:ba:7c:67:11:cb:67:be:91:78:ba:cf:9e:
bd:e3:08:12:2d:bc:fc:d4:03:eb:57:7c:5e:16:23:
84:6f:02:38:d0:03:85:f2:8d:ea:7c:51:52:00:26:
06:dd:ab:e1:33:b9:ac:95:60:6e:0e:ba:f2:d6:e7:
b7:e3:c2:7e:56:7d:f7:e0:30:19:d9:43:93:36:ab:
fd:c9:58:00:69:01:54:7d:3c:1b:51:dc:51:ef:0a:
d7:34:08:62:00:e7:3a:4e:ec:c1:d7:4e:70:8c:1f:
5d:58:1b:a2:bd:8e:d3:e3:09:71:59:5f:c6:3f:86:
6f:22:69:7e:60:18:2e:0f:7e:bd:44:af:46:ad:fc:
65:e9:7d:aa:eb:4c:85:15:f6:ab:dc:e0:30:b6:38:
8b:cb:5c:a1:01:77:c3:e9:b7:a9:79:4a:20:3d:0d:
3f:a0:c7:f9:34:6a:ee:1e:f2:c2:d4:77:89:44:87:
d2:79:2c:34:df:8c:7a:03:56:ab:4f:03:3c:a0:bd:
58:fa:ed:92:bb:78:01:fa:8c:f4:75:61:56:06:fb:
49:da:9e:b9:66:3c:09:6d:fd:c5:de:2e:83:0a:01:
17:71:cc:04:76:0a:17:4f:89:3d:52:bb:e3:93:db:
80:d0:60:38:57:2c:88:46:40:f8:5b:c8:59:39:70:
f0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:73:78:12:6F:55:D9:65:19:55:3D:AA:48:E0:2E:32:82:12:16:44
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f2d0cb-c3d4-49be-b0f2-305fb09556c9/1/iXN4Em9V2WUZVT2qSOAuMoISFkQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.0.0/22
195.95.236.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:39:f5:bd:02:ca:3d:70:7d:70:f0:c7:4d:33:c6:47:4e:65:
88:6b:72:a8:8f:65:03:d7:a9:c7:69:97:45:7a:28:ce:3a:6d:
b1:cb:dd:df:11:ef:a2:91:53:bd:b2:e8:39:a2:d0:27:6b:e8:
ca:6c:f5:3f:e0:29:d2:a9:4b:f4:3e:45:c4:46:4b:44:12:31:
b6:72:df:04:c2:7b:9b:15:fc:0e:03:21:cb:19:a5:78:ec:9f:
13:3c:f5:74:90:ee:29:5b:a1:b1:f3:45:c5:e8:db:10:0a:a1:
03:6c:10:65:f1:ad:59:52:9f:aa:50:30:20:52:ac:64:7c:a5:
4b:8a:cb:f2:10:fb:46:92:fc:00:29:c9:98:f9:cd:4f:ab:b1:
2e:a6:ec:08:f7:19:22:75:d9:d2:2e:1a:32:fb:ae:02:f0:21:
7b:a6:7d:e9:a8:ec:f1:65:9e:96:25:0c:f0:74:3a:45:8b:3d:
dd:8a:ba:e8:0c:a4:52:07:e8:13:8e:7f:89:76:b9:f8:78:09:
68:78:b1:97:54:da:55:da:b5:bc:2f:ab:95:e8:2d:10:a2:8d:
f2:3a:9f:f5:e0:f5:95:8c:49:b1:2a:04:71:bc:ec:fc:74:9d:
5d:22:5a:d2:2d:d4:4b:ec:a2:b3:0e:57:44:a6:27:36:32:92:
4c:f5:c7:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:17 2025 by rpki-client on console.sobornost.net