Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ih4_jS-ULY_BFu-OV1m8N2f7CwY.cer
File: ih4_jS-ULY_BFu-OV1m8N2f7CwY.cer (raw, json)
Hash identifier: XLrx9qJDRzC6SKXqFSvz1vXCeUfy6kw4oYOkQB8jzng=
Subject key identifier: 8A:1E:3F:8D:2F:94:2D:8F:C1:16:EF:8E:57:59:BC:37:67:FB:0B:06
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C8339B1DC0F1F84F63C6A02F71E0C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:48:09 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 194.13.135.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:83:39:b1:dc:0f:1f:84:f6:3c:6a:02:f7:1e:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8a1e3f8d2f942d8fc116ef8e5759bc3767fb0b06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fe:18:3e:42:65:2d:94:8f:22:2d:81:27:aa:
f3:e7:61:d5:c0:6d:c2:dd:0e:65:45:73:5b:3d:8f:
3e:d5:ff:38:d2:bb:09:61:d4:15:fc:72:67:6c:05:
24:72:17:7e:c4:e5:1b:da:b9:04:dd:74:67:69:03:
24:ac:f0:f8:aa:a1:92:2e:74:e0:56:c3:43:5a:9d:
f6:45:1c:7c:63:48:f6:f7:82:c8:f6:72:0b:57:ec:
f6:a9:1c:7e:b5:06:bb:7e:fe:7d:ee:5a:e8:d8:be:
54:2f:e4:4a:e2:d1:fa:96:42:8d:6d:e2:30:dd:a5:
9b:f1:be:42:bf:ca:a5:f8:40:35:13:4a:ed:d9:8a:
26:c1:d2:fa:c4:11:67:cb:4e:be:6b:24:ca:f9:c1:
30:98:b0:d7:42:b5:37:f1:d7:28:dd:b0:0e:0f:88:
f6:09:c9:5a:00:9f:c4:53:88:19:0d:cf:37:20:a0:
52:57:05:fb:13:65:24:1f:1c:01:ee:e8:4b:f6:ba:
19:99:a4:7d:5b:8b:33:73:96:a1:b0:8b:e9:56:a6:
8e:70:15:81:bb:63:2f:60:06:f1:6c:a9:b5:3d:3b:
53:48:21:30:d1:98:0d:1c:af:21:c2:31:a8:ec:fb:
70:4f:12:36:c2:67:25:db:99:99:b3:48:e0:08:c2:
ab:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:1E:3F:8D:2F:94:2D:8F:C1:16:EF:8E:57:59:BC:37:67:FB:0B:06
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/1a2f03-1d7b-4e04-951d-25c11b796982/1/ih4_jS-ULY_BFu-OV1m8N2f7CwY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.13.135.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:22:16:c7:27:48:ca:79:e9:5b:11:27:95:59:69:e6:6f:02:
1f:33:07:d5:af:0a:34:ba:e9:3f:88:e1:bf:06:89:dc:2e:d9:
ac:8b:74:5a:06:72:8e:ba:0c:c9:df:af:d5:6a:c0:78:b1:7e:
eb:5d:37:c8:a2:44:e6:fd:c9:34:a1:53:83:42:e3:1c:02:a5:
99:8f:88:b6:b8:8d:23:a4:e9:ae:da:12:02:13:10:cc:3d:3b:
f5:6e:60:bd:7f:2b:32:93:32:46:f2:c0:5b:39:ba:a8:a8:97:
bb:39:f8:a7:81:af:ca:28:d8:a9:23:eb:ac:1f:0d:06:f1:14:
7e:56:6a:5e:06:de:6d:83:d2:c0:58:80:25:93:dc:1d:bb:30:
47:00:13:21:77:55:e9:e3:ac:66:84:86:e7:50:b8:93:1e:52:
f5:f6:ff:88:48:92:68:e5:e8:aa:15:59:c4:10:46:eb:be:7f:
a7:f9:cc:53:20:86:d8:6f:9a:c6:d8:a3:24:cf:20:00:23:03:
83:d7:8f:b1:1e:5e:3d:76:9a:26:6e:48:e1:43:2b:e6:5e:fa:
65:d2:0f:86:62:a4:75:2e:9e:b0:7c:82:d9:7e:d7:90:72:91:
38:c8:01:10:a4:d0:b8:d1:11:91:99:2c:bf:14:3f:de:e9:8f:
4f:fc:54:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:18 2025 by rpki-client on console.sobornost.net